Extracting prog: 1h2m4.933271418s
Minimizing prog: 36m34.11023326s
Simplifying prog options: 6m31.495944558s
Extracting C: 1m35.254162484s
Simplifying C: 0s


extracting reproducer from 67 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setsockopt$inet_IP_XFRM_POLICY-socket$packet-setsockopt$packet_int-prctl$PR_SET_TAGGED_ADDR_CTRL-recvmmsg-lsetxattr$trusted_overlay_upper
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 67 programs with base timeout 30s
testing program (duration=46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 15, 5, 30, 4, 30, 30, 4, 17, 7, 23, 4, 30, 30, 30, 5, 2, 24, 30, 12, 9, 26, 14, 30, 30, 30, 30, 30, 9, 23, 30, 24, 5, 20, 20, 17, 30, 7, 20, 30, 6, 6, 26, 40, 30, 30, 12, 30, 36, 26, 29, 4, 19, 4, 10, 25, 25, 10, 4, 11, 30, 7, 8, 5, 30, 13, 7]
detailed listing:
executing program 3:
syz_mount_image$fuse(0x0, &(0x7f0000000640)='./file0\x00', 0x2446a, 0x0, 0x1, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x42, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d0001000000140007000000000000000000000000000000000108000f"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804)
io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0}])
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f00000000c0)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f00000001c0)={{0x0, 0x0, 0x2}}, 0x0, 0x0}})
mount$fuse(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000007c0)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x202f)
mknodat$null(0xffffffffffffff9c, &(0x7f0000002800)='./file0/file0\x00', 0xc01, 0x103)
write$FUSE_INIT(r0, &(0x7f0000002840)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0xffffffffc1001081, 0x800, 0x0, 0x7, 0xa14, 0x0, 0x0, 0x1, 0x400}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000028c0)="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", 0x2000, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004980)={0x90, 0x0, 0x0, {0x0, 0x400000000000, 0x0, 0x1000000000000000, 0x0, 0x22000000, {0x1, 0x1003, 0x2, 0x0, 0x4, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x144, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@private=0xa010100, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x5}, @iptfs_dont_frag={0x4}]}, 0x144}}, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004a40)="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", 0x2000, &(0x7f0000006a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006b00)={0x90, 0x0, 0x0, {0x2, 0x3, 0x4, 0x8, 0x9e3, 0x1003, {0x6, 0x4, 0x0, 0x7, 0x801, 0x20e, 0x80000000, 0x80000001, 0x100, 0x6000, 0x6909, r4, r5, 0x1, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 32:
syz_mount_image$fuse(0x0, &(0x7f0000000640)='./file0\x00', 0x2446a, 0x0, 0x1, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x42, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d0001000000140007000000000000000000000000000000000108000f"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804)
io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0}])
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f00000000c0)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f00000001c0)={{0x0, 0x0, 0x2}}, 0x0, 0x0}})
mount$fuse(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000007c0)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x202f)
mknodat$null(0xffffffffffffff9c, &(0x7f0000002800)='./file0/file0\x00', 0xc01, 0x103)
write$FUSE_INIT(r0, &(0x7f0000002840)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0xffffffffc1001081, 0x800, 0x0, 0x7, 0xa14, 0x0, 0x0, 0x1, 0x400}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000028c0)="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", 0x2000, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004980)={0x90, 0x0, 0x0, {0x0, 0x400000000000, 0x0, 0x1000000000000000, 0x0, 0x22000000, {0x1, 0x1003, 0x2, 0x0, 0x4, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x144, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@private=0xa010100, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x5}, @iptfs_dont_frag={0x4}]}, 0x144}}, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004a40)="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", 0x2000, &(0x7f0000006a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006b00)={0x90, 0x0, 0x0, {0x2, 0x3, 0x4, 0x8, 0x9e3, 0x1003, {0x6, 0x4, 0x0, 0x7, 0x801, 0x20e, 0x80000000, 0x80000001, 0x100, 0x6000, 0x6909, r4, r5, 0x1, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
getrusage(0x1, &(0x7f0000000000))
write(r0, &(0x7f00000002c0)="306663353a313232373ad3612c", 0xd)
executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x58e, &(0x7f0000000100)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@test_dummy_encryption}, {@block_validity}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x459, &(0x7f0000000840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000d40)=0x7)
r1 = getpid()
r2 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000280)="7b31e554558377aec66872c40793a459005cee2eeed859d582442aba8d6272d26c222ccd7aad66fb086650dab472472505d14e4b", 0x34, 0xfffffffffffffffb)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f00000002c0))
sched_setscheduler(r1, 0x2, &(0x7f0000000d80)=0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000dc0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
capset(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
connect$unix(r3, &(0x7f0000000e00)=@abs, 0x6e)
r6 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000002f40), 0x801, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f00000030c0)=0x6)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000003100)={{0x1, 0x1, 0x18, r5, {<r8=>0xee00, <r9=>0xee00}}, './file0\x00'})
r10 = getpid()
sched_setscheduler(r10, 0x2, &(0x7f0000003140)=0x7)
getresuid(&(0x7f0000003180)=<r11=>0x0, &(0x7f00000031c0)=<r12=>0x0, &(0x7f0000003200))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000003240)={0x4b4, 0x400, {<r13=>r1}, {<r14=>0xee01}, 0x9, 0x2})
r15 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000032c0)='./file0\x00', &(0x7f0000003300), 0x80, &(0x7f0000003340)={{'fd', 0x3d, r15}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r15, &(0x7f00000033c0)={0x2020, 0x0, <r16=>0x0, 0x0, <r17=>0x0}, 0x2020)
write$FUSE_INIT(r15, &(0x7f0000005400)={0x50, 0x0, r16, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50)
sendmmsg$unix(r4, &(0x7f000000ba80)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000000380)="670457a5930f4872642f55b1fcf66faa468b4866ecc4642f2e3f2d63d64365f560fd83fc485a20b530cccbcdb10a8b438c8a92e93935da23de1a2c9e6d3e662c2874295ff7a6a469c8fe690932481e81a3ec7a805359098a47ebdd3f0c6dd57db3014e23da5206c13bd6850e65fa051b0ce75367138716efd3c936c527cff56d33a351866021293e2feb5d6e9093af2bbfc4f34869d2ae1a1e9dec298f372d687dae24367443206e86b666be1c66665868e999362e552795673678eab1db99889da60104a31cc3e6a23ca07cf7e7c6a6b4a0217b", 0xd4}, {&(0x7f0000000480)="2262792952eab00ca869eb138e82a1d182fb1532632672b948bcefc371e25840e88211ef570b276a0e960d866d5c23df9b03157524127730a08c95394bca1ad41ccfb44060fea711e5cc66a54723c09c6e9533a98ff47a2e52f3502c29621f9c790f937876d6ab03c4f0896d2da1312a", 0x70}, {&(0x7f0000000500)="ff3e12161c7c4495b1b01bd2356cb2c853f9a6021afb882d07a3d80fdde902080f8d6aa3d546759b9adb4f21215d7e83542db85a7067b260b6432771ea8a91856dda9ea0a7a5d855332f95abefda28bf9ae922c508543bc2a202d5b9194599f0e834351478dc0579cfb7360d34be3f60e9c480a6886e0995ce4690f35e02cd10d1da61", 0x83}, {&(0x7f0000001f00)="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", 0x1000}], 0x4, &(0x7f0000002f80)=[@rights={{0x20, 0x1, 0x1, [r5, r6, r5, r0]}}], 0x20, 0x8001}}, {{&(0x7f0000002fc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000003040)="c9ad2b1a9141", 0x6}], 0x1, &(0x7f0000009800)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11}}}, @rights={{0x30, 0x1, 0x1, [r3, r5, r3, r6, r0, r5, r6, r3]}}, @cred={{0x1c, 0x1, 0x2, {r1, r14, r17}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r6, r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r5, r5, r6, r5]}}], 0xd0, 0x4004824}}, {{&(0x7f0000009900)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000009b40)=[{&(0x7f0000009980)="6ff028fd44002adfa18a6e2b52f2be140d9636c7e4eaa83fd5c5a95604f35c30665bf792466b253a03d9cba84288867b50121150a37b89492a0c32de53f7c3f2126a6d330dc9c27179e56a8c224101a88c81d1169339248d87d9e1592ec8b127f5afef8a437e552782f4b0f52f354dd8e378364962fd962c44c93d34a4294fffb4da70fe10ad7ca6b6fb53ed690844e6c6f18e99206254cf6817475132a3728ffa62a0d79f27a699", 0xa8}, {&(0x7f0000009a40)="d42d4783d6f8a9ae20ff4334e6fc4feac15ab98bed63717b28e579d658c6e6bee18a2b70a4dc8f8ec876f57c0ec2c1e2f34550dc695c34ba72dbfb8fce3f4afe3bf95b6ad223a3f52d09d792bb4343256685416f2114be88df9121f2bb5b459b50ffb9e73e02bd9b94f67e8716018893f1fa70f3ba81c756818d5c2d4b8ba8e2ba8318018cf68a0d55edc57d65", 0x8d}, {&(0x7f0000000180)="8d63fd9367721f57fd9497878ad971ba61a10cb8249aff5483c732623803053816b6fbda490d21b225e2504c38b9e5f17694f46ab738dfc1ef00", 0x3a}], 0x3, &(0x7f0000009ec0)=[@cred={{0x1c, 0x1, 0x2, {r13, r12, r9}}}, @rights={{0x20, 0x1, 0x1, [r3, r3, r3, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r14, r17}}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r7, r14}}}], 0xc0, 0x48084}}, {{&(0x7f0000009f80)=@file={0x0, '.\x00'}, 0x6e, &(0x7f000000b480)=[{&(0x7f000000a000)="a31cab8f67e1dca85c7e3d326cbfcabdd058aa87cee2174b34a15a7e66223a1b72b0f5cf9bd984ce2c8b4def52062e4be34863b5d774aec3bb5c0e75d4002491f43eae47cd3300f53c7f29c93e0eedb6a86b5842ca30d69a97a4e66b769e4ecfa1f419598c857af6b6b4c35115722d4114a3ee8f7160c43ce4e09f20ad0bb711675fc489fb2e1e06f9d923fddf7c4770a6d7658bd174b2a522fde36259d23b7347a2e575367d2dac07b803f05ab622a3436677735d02b0a74e4664c5cc6fc0199476f6075c0948aa7d0a7e9d", 0xcc}, {&(0x7f000000a100)="bea4297c89a2573155a6715c4fc2feb5e54ff9d5cec8ea0ecc9461cb17dddb4e96f2af963ed9a20e293c7fd90d4ca92e6deedef3adfe7b475c445f41ab365a8fd5723d52d592b9d8e5dbd89c66c91dfc2d5ce0fb29b739baddbe5c50d673131e8a9a3a646fc9a65ff0a741b2a4139fc72a4a3f48b2d8e94cce39f1ff1b6f5b500f9d6802cc753bd2a82ec0831e083f8ed4ff3fb234e6d74dbf5d42c31176ada2caae15988bc176592b425393091c104a43d0a11cd44c44087b5f308a9b661cca34d8efc54bbdc1d9", 0xc8}, {&(0x7f000000a200)="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", 0x1000}, {&(0x7f000000b200)="438451d2add58e39b7cbaa4a2c4e1b31956d2fed19e44d67b54e3f56ee4bca3bc9d9a62c1696a1f54d5c77959de67855c57b67cc65f7bb226bd2fb2f318b0ea1c5fe060df4453e1c119c47078ffca499d47ff1d69c2ad9ee08f01b20681cc2a8bc9a5f4c4db3b030f98621b48e0e68abee1673a976a026dece49e794e17910bddab6b29454d5a4f1e2004b85b26ad978879c681b0c72f724a6894ace0d3a2a4ab97a55e3d09e6355d8682dd8cffa358f4f0c725f", 0xb4}, {&(0x7f000000b2c0)="96411198cd7038f039e8fd5691deebfaffb3dad317d98b3779581f1173a968539c5f9217b2675e652d501ce87f9ca2986f2296a769e704a9145e9efbdf86eda271475ba2e8e9637ad90207838680d39078b5cd599ce649ab341fdd8dd06717feba69fe5dc3185afef61c4b93b5910736cca6961e986660cb4bb4e0e40d6640b446eef101167a0d97ecb96ed39ba3c3571d8fdcc1bfa8a20ca12f20da11742b6e7f8f2a7f4f92dac27482437c9520339af65eeedbaefe385df85f535dc7e6a2ece7fcdefe6cdea54a2287bd993fbffe2de109e668e5e9fa900da49e68830a0018adb9bc63509bd066a5790f7483c2c53740dc0ca4362fed", 0xf7}, {&(0x7f000000b3c0)="6fc6912d4ef42a1316f0e76cda4eb4b5be5dd5ebb279b05c9c230a244dd7ff7343fc91d1c42473cbafd6b770f123691a09f5d05c1aaa72b1", 0x38}, {&(0x7f00000005c0)="4791c714e71a12a16ae25332f99a366dba3e05287be7a470bcdb643936a7c551374feac83080a3e5f5c04c4a416f97736a206fe6b2aadbb4bab8a923b6711ee7dd588cec053b45ea19f2beb975045a74643d17ef27bf5cfe382b1978e3ffaa92fa5801d140c6cc086427a5cd77f1359e0feb8abc3f503df6797e6678116e1e868b7a1d69540406c2f7098af7608c770a2cc9a17553", 0x95}], 0x7, 0x0, 0x0, 0x4010}}, {{&(0x7f000000b500)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f000000b7c0)=[{&(0x7f000000b580)="4b3975ac9eae0b58e1b13096796d9b50459e45c9f9c97426d10580745e8897394473749b5256", 0x26}, {&(0x7f000000b5c0)="ee8aff377a2098b305169970f79c550baaab5cc9481c2a4a00c3f24c3f6a3b246be510ae9bb33f30f82c0c52f195cab097bb1344de7feeb034ca7ff5d4863ccb2967d476119048f944310484350bb2b525d7516775b60773173489224969aa0682240242533f51fbfbeefb9071db808e3cfee340cd372c9b27720567f0cd5434ed47a87cb472a54acf7536892788d3c5871282d0efc00025148670ffa2", 0x9d}, {&(0x7f000000b680)="c31d851c0e", 0x5}, {&(0x7f000000b6c0)="ce2485464285dd09edbae28db162e04f1d6e421c993c1de1d749f27c33d2d999adbbfd286b7c17644b3cabcd88c51629959da6c6a524752db351599fe4bece24a9fd8d069da428a37567c29eaf3941e66337ab2ac5152807b612e6b413ce862b458aeea8e943b47e708a2dc28f97af7475c4be3c7d99cb75e6bb208738c7ab54c95056cd0eb3ec7ea10005434892122e0ba62b45b0eaf51d0d5fa2b531c57bcdaea0a92440f60dfa656927d2a3f2992f612a1aff1542", 0xb6}, {&(0x7f000000b780)="a9e1517f236fc3d667cf5989efe3b97a06e6c779931b5d9f321de89d87", 0x1d}], 0x5, &(0x7f0000005480)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES64=r0, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32=r0, @ANYBLOB="9d5caed18ce26ceab61a676f9db5d008259461c68d78008301598f2fc819e36c0cf26a74bb1576be674cda01aeadd251b47b4e34c39e5c264fae3592fb65be36be9bd17b25bf7ebb9d4efcf707b614f1661331b7519784e80b2a0d8a8d73c25785dfb33c37ee6d9e23201e998bd8b629331a53a497d6d05f6fb58bc59b1b202fae6a8bfc3e962060a3c25e9aa035d9879da0bf0c6e28ea2b7228efbcd30a68d125fcd825c919aedff3089f2d62d2bd39924f4d99a9241740e8619d09fe7310fd", @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r15, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r15, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00(\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32], 0xb8, 0x10}}], 0x5, 0x0)
recvmmsg(r3, &(0x7f0000000ec0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x6)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r18 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000100006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000001d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000001dc0)={0x3}, 0x8, 0x10, &(0x7f0000001e00), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e40)={r18, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001ec0)="b9ff16000f00008d9c180a106fd2", 0x0, 0xfea, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x103042, 0x0)
lseek(r1, 0x0, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x322b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x3}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x6}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7ff}]}}}]}, 0x50}}, 0x40080)
executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000015c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x5}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000016c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001680), 0x13f, 0x9}}, 0x20)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x71)
write(r3, &(0x7f0000000040)='27', 0x2)
r4 = socket(0x11, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00')
fchdir(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x2)
getdents64(r7, &(0x7f0000000340)=""/23, 0x17)
getdents64(r7, 0xfffffffffffffffe, 0x29)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0)=0x1d9, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'gre0\x00', <r8=>0x0})
bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000280)=0xe9, 0x4)
r9 = fanotify_init(0x8, 0x400)
readv(r9, &(0x7f0000001700)=[{&(0x7f0000001740)=""/175, 0xaf}], 0x1)
r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000001800)='./bus\x00', 0x10b980, 0x173)
fanotify_mark(r9, 0x1, 0x40001019, r10, 0x0)
close_range(r10, 0xffffffffffffffff, 0x0)
sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001880)=ANY=[], 0xdd12}], 0x100000000000024f}, 0x40008c4)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40042, 0x1)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x10001, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[{@msize={'msize', 0x3d, 0x4401f45a}}]}})
getsockopt$nfc_llcp(r3, 0x118, 0x4, &(0x7f0000000540)=""/4096, 0x1000)
ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000100)={0x0, @vbi={0x5, 0x8, 0x7, 0x36314d59, [0x4000fff, 0x3], [0x40003, 0x9], 0x1}})
executing program 33:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000015c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x5}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000016c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001680), 0x13f, 0x9}}, 0x20)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x71)
write(r3, &(0x7f0000000040)='27', 0x2)
r4 = socket(0x11, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00')
fchdir(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x2)
getdents64(r7, &(0x7f0000000340)=""/23, 0x17)
getdents64(r7, 0xfffffffffffffffe, 0x29)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0)=0x1d9, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'gre0\x00', <r8=>0x0})
bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000280)=0xe9, 0x4)
r9 = fanotify_init(0x8, 0x400)
readv(r9, &(0x7f0000001700)=[{&(0x7f0000001740)=""/175, 0xaf}], 0x1)
r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000001800)='./bus\x00', 0x10b980, 0x173)
fanotify_mark(r9, 0x1, 0x40001019, r10, 0x0)
close_range(r10, 0xffffffffffffffff, 0x0)
sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001880)=ANY=[], 0xdd12}], 0x100000000000024f}, 0x40008c4)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40042, 0x1)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x10001, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[{@msize={'msize', 0x3d, 0x4401f45a}}]}})
getsockopt$nfc_llcp(r3, 0x118, 0x4, &(0x7f0000000540)=""/4096, 0x1000)
ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000100)={0x0, @vbi={0x5, 0x8, 0x7, 0x36314d59, [0x4000fff, 0x3], [0x40003, 0x9], 0x1}})
executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000097090100000002816500feff0000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', <r2=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r2, 0x80, 0x8057, 0x8, 0x7aa, {{0xa, 0x4, 0x2, 0x27, 0x28, 0x64, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @generic={0x88, 0x9, "33416d818fd716"}, @ra={0x94, 0x4}]}}}}})
executing program 5:
unshare(0x6a040000) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) (async)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="90cb8c693dc85bf6422208a587fceb969024deee39f9828d22f6d688724429fd43b6c4561039fc8f5bb75fe94d4969e0ee9fe0e2334ae0fb2ebcf3408611ee16022b24ec96d71c67a3154e5d188aee290fe4558ea1478ca5fb7c171a046fdd82684dc0dd5cc25412c568d507d26672607edc82b946219fdee1b10490086e5d650138984fc271417264fcc865d7667b1ce555dc2117c8559f36f77735c8bb88c0f8dd233f8bab999b8d5a5bd9d9d3eecd42ad06318d04bb19c075e5ad6e9a9a139bc7138750", 0xc5}], 0x1}, 0x240c4855) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/229, 0xe5, 0x0, 0x0}, &(0x7f0000000640)=0x40)
sendmsg$inet_sctp(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="c1edb2f6f3d06fee4460f65fc8e26576b11bc0b78872d5d68e9a54df8a63c5ed823568f1fe22d00e900985", 0x2b}, {&(0x7f0000000740)="66b56e88fe628cd1e65896c72f1d8df28dae90e1021cd594b7bf68717b232b2444268adf076090a506bf1e38f971bd297eb827ae71c9b500bc6f2cba4ad6518daf4051d3959261cf26def41cbcd01c11bd47091fc3cab36ab3f68d6f86d282857068d2ffc2c7519d79ac2dc803b8e9834e6829df563b947971947ed04c9a75", 0x7f}, {&(0x7f00000007c0)="013f6b8605e72b3bbec253a733bd2d0aa6ed8b953b85bea869464d", 0x1b}], 0x3, 0x0, 0x0, 0x20000044}, 0x10) (async)
read$FUSE(r1, &(0x7f0000000800)={0x2020}, 0x2020)
sendmmsg$inet(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f00000028c0)='f', 0x1}], 0x1}}], 0x1, 0x0) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7f, 0x4, 0x6, 0x1, 0x4, 0x4, 0xb6]}}]}]}]}, 0x44}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000b1ee2d02ec100001f324bd7000f9dbdf", @ANYRES32=0x0, @ANYBLOB="158804000301050008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000080)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000000d80)="$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")
mknodat$dm(0xffffffffffffff9c, &(0x7f00000013c0)='./dm0\x00', 0x6180, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0)
r1 = dup(r0) (async)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000004c0)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000540)=<r3=>0x0, &(0x7f0000000580)=<r4=>0x0, &(0x7f00000008c0)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000900)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, <r6=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000980)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xc9}}}, &(0x7f00000009c0)=<r7=>0x0)
syz_ublk_setup_queues(r1, r7, &(0x7f0000000a00)={0x0, 0x9e80, 0x1, 0x3, 0x27a, 0x0, r2}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8a70, 0x8, 0x2, 0x33a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x61a, 0x200, 0x1, 0x27}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd920, 0x4, 0x401, 0x8f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6583, 0x2, 0x0, 0x205, 0x0, r1}}], 0x4, &(0x7f0000000d00)={0x2e, 0x0, 0x0, r1, 0x1201, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, r6, '\x00', {0x4001, 0x455, 0x0, 0x0}}, 0x0)
executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x840, &(0x7f0000000080), 0x1, 0x241, &(0x7f00000000c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events.local\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000c40)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b0000000000000000f6000000800000080000002a4b37cd251b01834244568fa2e85d2e9faeee0125e8132ecee07ba80d7259f648ae29e92aa185f6e5b9c60a52a09098719c2f0004362ba29e372f207856", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xb, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x140c}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x8000000)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8)
semget$private(0x0, 0x4000, 0x555)
semtimedop(0x0, &(0x7f0000000340)=[{0x3, 0x1000, 0x1800}], 0x1, 0x0)
unshare(0x2c040000)
unshare(0x14020400)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r5, 0x0, 0x10, 0x10, &(0x7f0000000740)="0000ffffffffa000", &(0x7f0000000780)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./sys_mnt\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106}}, 0x20)
write$binfmt_script(r0, &(0x7f0000000480)={'#! ', '', [], 0xa, "e6861442067ab9c0757504f21b5d3d66e56b15bac40643919c7fdb05384058b032a45cbd0df26da86f95ae6116938407e568df56835afd6cf86ab844d669cc7fd7fd8df451a99c44f0356f"}, 0x4f)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000680)=ANY=[@ANYBLOB="0c000000000000000f"])
executing program 5:
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x101b, 0x0, 0x0, 0x0, 0x600e000, 0x6, 0x1})
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) (async)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x101b, 0x0, 0x0, 0x0, 0x600e000, 0x6, 0x1}) (async)
executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000080)={{0x8, 0x2, &(0x7f0000000040)=[{0x2, 0x0, 0x3}, {0x6f, 0x0, 0x25}]}, 0x1, 0x2, 0x9, 0x0, 0x0, 0x1, 0x100, 0x4f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r0, 0xc0086448, &(0x7f00000000c0)={r1})
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0xffffffffffffffff)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x9, 0xfff, 0x20c, 0x6, 0x4, 0x8479, 0xffffffff, 0x101, <r3=>0x0}, &(0x7f0000000180)=0x20)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x5, 0x0, 0x2, 0x4, r3}, &(0x7f0000000200)=0x10) (async)
setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000240)={r3, 0x4, 0x3, 0x6}, 0x10) (async, rerun: 64)
ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000280)={0x2, 0x8}) (rerun: 64)
r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000340)={0x9e0000, 0xfffffff8, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0xa2090b, 0x0, '\x00', @ptr=0xb5fe}}) (async)
connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r2}) (async)
ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000400)={0xffffffff, 0xa, 0x4, 0x6c0bda7fc915ba95, 0x5, {0x77359400}, {0x1, 0xc, 0x5, 0x4, 0x8, 0x4, "20aa5ee7"}, 0xe, 0x4, {}, 0x4, 0x0, r2})
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r2)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r5, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) (async, rerun: 64)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 64)
bind$802154_raw(r6, &(0x7f00000005c0)={0x24, @none={0x0, 0x3}}, 0x14)
r7 = accept4(r6, &(0x7f0000000600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000680)=0x80, 0x800)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r7, 0x84, 0x65, &(0x7f00000006c0)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0xffff, @remote, 0x7fff}, @in6={0xa, 0x4e22, 0x368, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}], 0xa8) (async)
ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000780)={0x5, @pix={0x536e, 0x7, 0x32344d59, 0x4, 0xfff, 0x3, 0x3, 0x5, 0x0, 0x8, 0x1, 0x5}}) (async)
r8 = syz_open_dev$dri(&(0x7f0000000880), 0x6, 0x1) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, <r9=>0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x8, 0xa})
ioctl$DRM_IOCTL_MODE_SETGAMMA(r8, 0xc02064a5, &(0x7f0000000ac0)={r9, 0x8, &(0x7f0000000a00)=[0x0, 0x0, 0x1, 0xb, 0xfff7, 0x9, 0x37, 0xa], &(0x7f0000000a40)=[0x8], &(0x7f0000000a80)=[0x4, 0x5, 0x1, 0xfffa, 0x80, 0xb, 0xe836, 0x3, 0x5, 0x2]}) (async)
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000b00)={0xff, 0x18, 0x7, 0x5, "cc4e61ec6bb05dc61851fc03474ad521c3c8fb033516fb1290bc30a8ff4dea82"})
ioctl$NILFS_IOCTL_GET_VINFO(r2, 0xc0186e86, &(0x7f0000000bc0)={&(0x7f0000000b40)=[{0x8b5, 0xbaa, 0x6, 0x378}, {0x0, 0x4, 0x3}, {0x9, 0x12, 0x5, 0x400}], 0x3, 0x20, 0x4, 0x3})
ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000c00)) (async)
ioctl$FE_SET_VOLTAGE(r2, 0x6f43, &(0x7f0000000c40)=0x2) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x14042800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x881}, 0x0)
executing program 34:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000080)={{0x8, 0x2, &(0x7f0000000040)=[{0x2, 0x0, 0x3}, {0x6f, 0x0, 0x25}]}, 0x1, 0x2, 0x9, 0x0, 0x0, 0x1, 0x100, 0x4f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r0, 0xc0086448, &(0x7f00000000c0)={r1})
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0xffffffffffffffff)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x9, 0xfff, 0x20c, 0x6, 0x4, 0x8479, 0xffffffff, 0x101, <r3=>0x0}, &(0x7f0000000180)=0x20)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x5, 0x0, 0x2, 0x4, r3}, &(0x7f0000000200)=0x10) (async)
setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000240)={r3, 0x4, 0x3, 0x6}, 0x10) (async, rerun: 64)
ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000280)={0x2, 0x8}) (rerun: 64)
r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000340)={0x9e0000, 0xfffffff8, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0xa2090b, 0x0, '\x00', @ptr=0xb5fe}}) (async)
connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r2}) (async)
ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000400)={0xffffffff, 0xa, 0x4, 0x6c0bda7fc915ba95, 0x5, {0x77359400}, {0x1, 0xc, 0x5, 0x4, 0x8, 0x4, "20aa5ee7"}, 0xe, 0x4, {}, 0x4, 0x0, r2})
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r2)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r5, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) (async, rerun: 64)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 64)
bind$802154_raw(r6, &(0x7f00000005c0)={0x24, @none={0x0, 0x3}}, 0x14)
r7 = accept4(r6, &(0x7f0000000600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000680)=0x80, 0x800)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r7, 0x84, 0x65, &(0x7f00000006c0)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0xffff, @remote, 0x7fff}, @in6={0xa, 0x4e22, 0x368, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}], 0xa8) (async)
ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000780)={0x5, @pix={0x536e, 0x7, 0x32344d59, 0x4, 0xfff, 0x3, 0x3, 0x5, 0x0, 0x8, 0x1, 0x5}}) (async)
r8 = syz_open_dev$dri(&(0x7f0000000880), 0x6, 0x1) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, <r9=>0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x8, 0xa})
ioctl$DRM_IOCTL_MODE_SETGAMMA(r8, 0xc02064a5, &(0x7f0000000ac0)={r9, 0x8, &(0x7f0000000a00)=[0x0, 0x0, 0x1, 0xb, 0xfff7, 0x9, 0x37, 0xa], &(0x7f0000000a40)=[0x8], &(0x7f0000000a80)=[0x4, 0x5, 0x1, 0xfffa, 0x80, 0xb, 0xe836, 0x3, 0x5, 0x2]}) (async)
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000b00)={0xff, 0x18, 0x7, 0x5, "cc4e61ec6bb05dc61851fc03474ad521c3c8fb033516fb1290bc30a8ff4dea82"})
ioctl$NILFS_IOCTL_GET_VINFO(r2, 0xc0186e86, &(0x7f0000000bc0)={&(0x7f0000000b40)=[{0x8b5, 0xbaa, 0x6, 0x378}, {0x0, 0x4, 0x3}, {0x9, 0x12, 0x5, 0x400}], 0x3, 0x20, 0x4, 0x3})
ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000c00)) (async)
ioctl$FE_SET_VOLTAGE(r2, 0x6f43, &(0x7f0000000c40)=0x2) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x14042800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x881}, 0x0)
executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000180)=[{0x20, 0x1, 0x0, 0xfff7f032}, {0x6, 0x5, 0x0, 0xfff}]})
r2 = syz_open_dev$dri(&(0x7f00000005c0), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000600)={0x0, 0x40, 0x3f, 0x30315559, 0x0, [], [0x45], [0x0, 0x0, 0x1], [0x0, 0x0, 0x8ad7]})
ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000280))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = io_uring_setup(0x7272, &(0x7f00000007c0)={0x0, 0x8270, 0x40, 0x1, 0x117})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x25, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r4)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000003", @ANYRES16=r6, @ANYBLOB="010027bd7000ffdbdf25020000000500010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054)
write$cgroup_type(r3, &(0x7f0000000300), 0x9)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
ioctl$TUNSETIFF(r7, 0x8004b708, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000004000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRES16=r8], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r9, <r10=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%pi6   \x00'}, 0x20)
prctl$PR_SET_NAME(0xf, &(0x7f0000000540)='+}[@\x00')
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r10, <r11=>0xffffffffffffffff}, 0x4)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f0000000c00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000001340)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r7, @ANYBLOB="000125bd7000fcdbdf254f000000080003001bcf43a30aca2c04bc0f27221c84e4e45d77c61d3df8b2246b05a6bedcd303e913fe8b38288f0a92293c211377027820e2aac67061c31743e40cb3a5a361d8200806006a627f4be09b1d", @ANYRES32=r14, @ANYBLOB="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"], 0x2ec}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000780)={r12}, 0xc)
pipe2(&(0x7f0000000080), 0x880)
executing program 7:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x61)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/file1\x00', 0x3220019, 0x0, 0xff, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', &(0x7f00000002c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x93e4}}}, 0x0, 0x200)
executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x90, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x28136632}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9849}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
executing program 4:
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000580), 0x10400, 0x0)
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f00000005c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000773000/0x4000)=nil, 0x3000}) (async)
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f00000005c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000773000/0x4000)=nil, 0x3000})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x90}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x90}}, 0x0)
socket(0x28, 0x1, 0x0) (async)
r3 = socket(0x28, 0x1, 0x0)
getsockopt$nfc_llcp(r3, 0x28, 0x6, 0xfffffffffffffffe, 0x20000002)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000090c00"/20, @ANYRES32=0x0, @ANYBLOB="000000c05110391ac74e82000000000000300012800b00010062726964676500002000028006000800a88800000c00230000100000000000000500180001000000354a989cfbc1f2794edb4fd5f45f1d4cc672c48fc4448d8166585f58a4c58b5984f19c3c9b6db4da807029e48d7f72386985b12be2"], 0x50}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="23ffffe7", @ANYRES16=r4, @ANYBLOB="000428bd7000fcdbdf250200000008006a00090000000800610004000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000851}, 0x4044001)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000027edfed20fa438ba", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x9f53bf378a3b2abe}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x28, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8c0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x9f53bf378a3b2abe}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x28, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8c0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd700000100000010000000c00020003000000000000001c0007800c000180080001"], 0x3c}}, 0x400400c)
executing program 7:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
splice(r0, &(0x7f0000000040)=0x3, r1, &(0x7f00000000c0)=0x8db, 0x4e33, 0x0)
ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x0, 0x3})
pwrite64(r1, &(0x7f0000000140)="681efc186ee3313616e97509bba48c320c5fc1b793dc361ec992", 0x1a, 0xe)
ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000180)=0x3)
ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0xb5db, 0x3, 0x6})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0xe, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40010)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
pwrite64(r1, &(0x7f0000000300)="d361d276a2e9cc1cba6c280c8c2588193d390a17668a6b997991cde4ccbbff67e83199e08f6ae874c9071f33584772bc486f684ebabae0405a00d381122279d67e56bceda72b59f61b6d5ced4be3c43bcec0711eccc730452910f1a9c1c0c04c534fe3bacad7ef3073", 0x69, 0x52d77cef)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r4=>r3, {0x1}}, './file0\x00'})
ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f00000003c0)={0x9, 0x6})
r5 = open(&(0x7f0000000400)='./file0/file0\x00', 0x4080, 0x184)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000800)={<r6=>0x0, @remote, @empty}, &(0x7f0000000840)=0xc)
sendmsg$inet(r5, &(0x7f0000000a40)={&(0x7f0000000440)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000480)="396a40ba7ad73ca3258697500a672bed1617de07c7ba90644b999a520d15517e249da491bf237ccb49c4db1a94d1eedc65d4f13c7f16d9f02f912636655c0439274068866e9b604a6110032c5afff93d516b0de504d6f2b0f77173d6c169020e7b6bdb45021087cc02642312512922071be9bc901b8110553abb5fc87a86ffb7f65029673307e3558ebefb6e2aa1999c938567bcf055829a03551f5f9c06be7d98658fe1359e296704daa648d7778541feb5c0727f2298704976773004545e8cab48a5008815d01c0cbb697149dff6960c8c374e71598b87ae0f1b4026d7a4e6c8b3c40ab781f2", 0xe7}, {&(0x7f0000000580)="0f47f452d6aa9647fd706c5c13ea039342f993b4b276ef09769a69", 0x1b}, {&(0x7f00000005c0)="c8fa2f469beed446526ac4ea7da06d06e1b8d3db9361dd66386d0aebb88ebe01d88b93da0aaa453ddd620b06bbe4f1a949b1c5ff247dbfea6c1380eaadd88218af8dc492762995435c10494abed2ed30780eae131b887b83414d50057bc5d1414eb43bf8a2937a4fc8587a2307a00adef5c95ab92f7d93f668ee5f5f79e89dcac163c7ecee039f3df1006890f29ea05de65ca3c7292a0881ce2d66f627d9ca4ca2238877a70ec207ed00b34a9c15de8367d85bb86b504d0398baa2679ed819b4dea564c213c88f2d4d1c6671c7b85bfa2cfd642a31092b49e6f04601256089ffe5ba", 0xe2}, {&(0x7f00000006c0)="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", 0xfd}], 0x4, &(0x7f0000000880)=[@ip_retopts={{0x40, 0x0, 0x7, {[@generic={0x94, 0x12, "8d54051ad875bb2a94df1c1bc4bfd7de"}, @noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x11, [@loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x17}]}, @lsrr={0x83, 0x7, 0x91, [@local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0xec, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x8d, 0x1, 0x8, [{@empty, 0x2}, {@multicast2, 0x80000001}, {@multicast2, 0x6}, {@empty, 0x5db}, {@multicast2, 0x8}, {@empty, 0x3}, {@remote, 0x8}]}, @rr={0x7, 0x7, 0x76, [@local]}, @ssrr={0x89, 0xb, 0x2f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x2b, 0xf4, [@empty, @rand_addr=0x64010100, @broadcast, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}, @loopback, @broadcast, @multicast2, @private=0xa010102]}, @timestamp_addr={0x44, 0xc, 0x28, 0x1, 0xa, [{@multicast2, 0x3}]}, @ssrr={0x89, 0x13, 0x16, [@loopback, @loopback, @empty, @multicast2]}, @timestamp={0x44, 0x1c, 0xea, 0x0, 0xf, [0xffffff7f, 0x3, 0xa15, 0x8, 0x9c18, 0x3]}, @timestamp_prespec={0x44, 0xc, 0x52, 0x3, 0x9, [{@loopback, 0x7fffffff}]}, @ssrr={0x89, 0xf, 0xe9, [@remote, @multicast1, @private=0xa010102]}, @lsrr={0x83, 0xb, 0xbc, [@dev={0xac, 0x14, 0x14, 0x22}, @local]}]}}}, @ip_ttl={{0x14}}], 0x1b8}, 0x8000)
r7 = accept4$tipc(r5, &(0x7f0000000a80), &(0x7f0000000ac0)=0x10, 0x800)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000b00), &(0x7f0000000b40)=0x4)
r8 = open$dir(&(0x7f0000000b80)='./file0\x00', 0x430120, 0x0)
renameat2(r8, &(0x7f0000000bc0)='./file0\x00', r5, &(0x7f0000000c00)='./file0\x00', 0x3)
r9 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETS2(r9, 0x402c542b, &(0x7f0000000c40)={0x8, 0x80000000, 0x800000, 0x80000000, 0x85, "5bb7b821303a5000a012ed9ae2b3b3ab275e6c", 0x4, 0x52408893})
r10 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_int(r10, 0x0, 0x35, &(0x7f0000000c80)=0x1000, 0x4)
ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000cc0)={0x96, 0x6})
bind$inet6(r5, &(0x7f0000000d00)={0xa, 0x4e23, 0xc876, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c)
munlockall()
mknodat(r4, &(0x7f0000000d40)='./file0/file1\x00', 0x8, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
executing program 4:
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0xa, 0x11, r0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000540)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x100004, 0x0) (async)
mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a5b091, 0x0) (async)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x84000, 0x0)
executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0}) (async)
setns(0xc9, 0x0)
r5 = gettid()
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230a29bd7000fbdbdf253100000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00R\x00', @ANYRES32=r5, @ANYBLOB="df7a75d1cfd5c151b63d21ed0153099caf89147c739ae22d37d636834950c07db77fd70251bdf05d152b2295193833abb5b39fd496c7e1583b497de14d1b08b1be3e15bf8f871c471a8f0681a94b4619cbff5f7e85ad0e85b43af801a8e924d888e8c38458f75cf5e00c88edb4f1fe10ffc5b3f44dc8003c4bb8ad074e12cd715ca09b7917af2fda78e7eb221740250e065a820d1caa5b76a73dc9f449907e378e1ae2b2351efeb98ad14e3e"], 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084)
executing program 7:
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x1b, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @ldst={0x1, 0x3, 0x1, 0x1, 0x0, 0x6, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x1, 0xe4, &(0x7f0000000140)=""/228, 0x40f00, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x8, 0x245, 0x5}, 0x10, 0x1052a, 0xffffffffffffffff, 0x3, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x2, 0x1, 0xc, 0x1}, {0x4, 0x1, 0x6, 0x2}, {0x1, 0x4, 0x1, 0x5}], 0x10, 0x1000}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback, 0x2b, 0x1, 0xfffffff7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], <r1=>0x0}, 0x40)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x210000, &(0x7f0000000800)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f00000008c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000e40)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x4008, &(0x7f0000000f00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000f40)='./file0\x00')
setresuid(0x0, 0xee00, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x41, 0x2)
mknodat(0xffffffffffffff9c, &(0x7f0000000f80)='./file5\x00', 0x61c0, 0x700)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000740), 0x40000, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@fallback=r2, r0, 0x13, 0x2018, 0x0, @value=r3, @void, @void, @void, r1}, 0x20)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0xa9a8d000)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0xa00, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
add_key(&(0x7f0000001300)='keyring\x00', &(0x7f0000001340)={'syz', 0x3}, &(0x7f0000001380)='.', 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x10, 0x8, &(0x7f0000001280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xf}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x9}, @ldst={0x1, 0x1, 0x6, 0x4, 0x3, 0xffffffffffffffff, 0xa3964bf3d5b21db0}]}, &(0x7f00000012c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BLKRRPART(r5, 0x125f, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000fc0)='./dev/console\x00', 0x1, 0x0)
ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000001040)={0x85, 0x8, 0x21cb4, 0x7fffffff, 0x6, "f21059be8b65aca30f3dbbdf7065bfeea59c28", 0x80000009, 0x1})
ioctl$DM_DEV_CREATE(r6, 0xc138fd03, &(0x7f0000001080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x81200, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}})
executing program 7:
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000180))
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040))
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x5)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef)
executing program 7:
r0 = syz_clone(0x100000, &(0x7f0000000000)="8690063087d5081e89c925b80550991e83cac1912dcd52a97697770a697b", 0x1e, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="f713708f91d03a129737c90cd70619c87ee1f8fdc3d933fcefc9dcf0cf98e47d0d84a7cc7b00f8c38446584ddb4130fc31bfc71640073ca3fc5d7a5e17cd269ca08a8ae85ee9679092a5e063a0cac01111bae685b30af7a7736a47e169daded9b0a135720d09499caeac9220c7524f52385bfe862077caf42f1c1f7e0aa03d1b61c6f9f8a125379a1dbb75d826ae96f89569c19d131dac7dd79b37aedec851f04abe1ecbad4df49cb6251d76406a4779e0b22502f57a5c6956fb27fc1c0156e30d9602c4962de2fd6bd59bfab051538e0e0641ea11298b5ab6")
ioprio_set$pid(0x2a4fbd8f164d6d22, r0, 0x6000)
r1 = syz_create_resource$futex(&(0x7f00000001c0))
r2 = syz_create_resource$futex(&(0x7f0000000240)=0x1)
futex(r1, 0x2, 0x2, &(0x7f0000000200)={0x77359400}, r2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
ftruncate(r3, 0x2)
futex$unlock_pi_list32(r2, 0x687, 0x4, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)=0x80, 0x4)
r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000380))
futex$unlock_wake_list32(r1, 0x681, 0x7, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)=0x9, 0x7)
r5 = accept4$nfc_llcp(r3, &(0x7f0000000440), &(0x7f00000004c0)=0x60, 0x81000)
ioctl$XFS_IOC_ERROR_CLEARALL(r5, 0x40085875)
futex$unlock_pi_list64(r2, 0x287, 0x8, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)=0x4, 0x40)
ioctl$DVB_DVR_DMX_EXPBUF(r3, 0xc00c6f3e, &(0x7f0000000580)={0x1000, 0x0, <r6=>r3})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0, <r7=>0x0, <r8=>0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, <r9=>0x0, 0x0, 0x0, <r10=>0x0], &(0x7f0000000640)=[<r11=>0x0, <r12=>0x0, <r13=>0x0], &(0x7f0000000680)=[0x0], 0x4, 0x7, 0x3, 0x1})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000700)={r7, 0x2, 0x2, 0x6, 0x3, [], [0x8, 0x8, 0x7, 0xffffff80], [0xa, 0x6, 0x4, 0x5], [0x0, 0x4, 0x0, 0x400]})
connect$inet(r3, &(0x7f0000000780)={0x2, 0x4e23, @remote}, 0x10)
r14 = syz_open_dev$loop(&(0x7f00000007c0), 0x4, 0x4000)
ioctl$LOOP_SET_BLOCK_SIZE(r14, 0x4c09, 0x8)
r15 = fsmount(r3, 0x1, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000800)=0xa0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r15, 0xc02064b6, &(0x7f00000008c0)={0x0, <r16=>r9, r7, 0x0, 0x0, 0x7, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000900)={&(0x7f0000000840)=[0x0, 0x0, 0x0], 0x3, r16})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r15, 0xc04064a0, &(0x7f0000000a80)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[<r17=>0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x2, 0x5})
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000b00)={&(0x7f0000000ac0)=[r17, r12, r11, r13], 0x4, r10, r8, 0xfffff306, 0x2, 0x1, 0x3, {0x21d32075, 0x3, 0x3, 0xb45, 0x400, 0x1, 0xe08b, 0x5, 0x7, 0x4, 0x4, 0x5a, 0x7ff, 0x0, "9f3322bde99fd49a0e42ea5fe29fdf7f3259ce1283cafe4506b94dd0ea871a13"}})
ioctl$XFS_IOC_EXCHANGE_RANGE(r5, 0x40285881, &(0x7f0000000b80)={r6, 0x0, 0x8, 0x6, 0x0, 0x8})
syz_genetlink_get_family_id$smc(&(0x7f0000000bc0), r15)
futex$unlock_pi_list32(r1, 0x607, 0x3, 0xffffffffffffffff, &(0x7f0000000c00)=0xffffdbc2, 0xa7)
epoll_pwait2(r15, &(0x7f0000000c40)=[{}, {}], 0x2, &(0x7f0000000c80)={0x0, 0x3938700}, &(0x7f0000000cc0)={[0x4]}, 0x8)
executing program 35:
r0 = syz_clone(0x100000, &(0x7f0000000000)="8690063087d5081e89c925b80550991e83cac1912dcd52a97697770a697b", 0x1e, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="f713708f91d03a129737c90cd70619c87ee1f8fdc3d933fcefc9dcf0cf98e47d0d84a7cc7b00f8c38446584ddb4130fc31bfc71640073ca3fc5d7a5e17cd269ca08a8ae85ee9679092a5e063a0cac01111bae685b30af7a7736a47e169daded9b0a135720d09499caeac9220c7524f52385bfe862077caf42f1c1f7e0aa03d1b61c6f9f8a125379a1dbb75d826ae96f89569c19d131dac7dd79b37aedec851f04abe1ecbad4df49cb6251d76406a4779e0b22502f57a5c6956fb27fc1c0156e30d9602c4962de2fd6bd59bfab051538e0e0641ea11298b5ab6")
ioprio_set$pid(0x2a4fbd8f164d6d22, r0, 0x6000)
r1 = syz_create_resource$futex(&(0x7f00000001c0))
r2 = syz_create_resource$futex(&(0x7f0000000240)=0x1)
futex(r1, 0x2, 0x2, &(0x7f0000000200)={0x77359400}, r2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
ftruncate(r3, 0x2)
futex$unlock_pi_list32(r2, 0x687, 0x4, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)=0x80, 0x4)
r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000380))
futex$unlock_wake_list32(r1, 0x681, 0x7, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)=0x9, 0x7)
r5 = accept4$nfc_llcp(r3, &(0x7f0000000440), &(0x7f00000004c0)=0x60, 0x81000)
ioctl$XFS_IOC_ERROR_CLEARALL(r5, 0x40085875)
futex$unlock_pi_list64(r2, 0x287, 0x8, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)=0x4, 0x40)
ioctl$DVB_DVR_DMX_EXPBUF(r3, 0xc00c6f3e, &(0x7f0000000580)={0x1000, 0x0, <r6=>r3})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0, <r7=>0x0, <r8=>0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, <r9=>0x0, 0x0, 0x0, <r10=>0x0], &(0x7f0000000640)=[<r11=>0x0, <r12=>0x0, <r13=>0x0], &(0x7f0000000680)=[0x0], 0x4, 0x7, 0x3, 0x1})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000700)={r7, 0x2, 0x2, 0x6, 0x3, [], [0x8, 0x8, 0x7, 0xffffff80], [0xa, 0x6, 0x4, 0x5], [0x0, 0x4, 0x0, 0x400]})
connect$inet(r3, &(0x7f0000000780)={0x2, 0x4e23, @remote}, 0x10)
r14 = syz_open_dev$loop(&(0x7f00000007c0), 0x4, 0x4000)
ioctl$LOOP_SET_BLOCK_SIZE(r14, 0x4c09, 0x8)
r15 = fsmount(r3, 0x1, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000800)=0xa0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r15, 0xc02064b6, &(0x7f00000008c0)={0x0, <r16=>r9, r7, 0x0, 0x0, 0x7, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000900)={&(0x7f0000000840)=[0x0, 0x0, 0x0], 0x3, r16})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r15, 0xc04064a0, &(0x7f0000000a80)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[<r17=>0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x2, 0x5})
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000b00)={&(0x7f0000000ac0)=[r17, r12, r11, r13], 0x4, r10, r8, 0xfffff306, 0x2, 0x1, 0x3, {0x21d32075, 0x3, 0x3, 0xb45, 0x400, 0x1, 0xe08b, 0x5, 0x7, 0x4, 0x4, 0x5a, 0x7ff, 0x0, "9f3322bde99fd49a0e42ea5fe29fdf7f3259ce1283cafe4506b94dd0ea871a13"}})
ioctl$XFS_IOC_EXCHANGE_RANGE(r5, 0x40285881, &(0x7f0000000b80)={r6, 0x0, 0x8, 0x6, 0x0, 0x8})
syz_genetlink_get_family_id$smc(&(0x7f0000000bc0), r15)
futex$unlock_pi_list32(r1, 0x607, 0x3, 0xffffffffffffffff, &(0x7f0000000c00)=0xffffdbc2, 0xa7)
epoll_pwait2(r15, &(0x7f0000000c40)=[{}, {}], 0x2, &(0x7f0000000c80)={0x0, 0x3938700}, &(0x7f0000000cc0)={[0x4]}, 0x8)
executing program 4:
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget\x00', 0x930aa59063c1a109)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000007, 0x3b071, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000687000/0x3000)=nil, 0x3000, 0x64)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r1}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x9, r2, 0x4}, 0x38)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x12, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x10000, &(0x7f0000000780)={[{@resgid}, {}, {@grpquota}, {@nobh}, {@journal_checksum}, {@orlov}, {@dioread_nolock}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000800)="$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")
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000d80), 0x2, 0x0)
readv(r3, &(0x7f0000000dc0)=[{&(0x7f0000000e00)=""/14, 0xe}, {0x0}, {&(0x7f0000000e40)=""/90, 0x5a}], 0x3)
write$input_event(r3, &(0x7f0000000ec0)={{0x77359400}, 0x15}, 0xfe4f)
io_uring_setup(0x6c69, &(0x7f0000000f00)={0x0, 0x4641, 0x4000, 0x2, 0x74})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@local, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x19, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x781eece4fc9ea1c5, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x3, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x7ff, 0x918a, 0x10000, 'snmp\x00', 'syz1\x00', {0x405}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0)
syz_mount_image$fuse(&(0x7f00000019c0), 0x0, 0x84406d, &(0x7f0000001a00)=ANY=[], 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x1}, 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, r5, 0x25, 0xb, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20)
mount(0x0, &(0x7f0000000040)='./gadget\x00', &(0x7f00000000c0)='gadgetfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget/dummy_udc\x00', 0x2, 0x4b)
write(r7, &(0x7f0000000140)="0000000008020900010100800112fbfd020000004000800000000000000001", 0x1f)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x200004, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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")
ioprio_set$pid(0x3, 0x0, 0x0)
r8 = openat(r7, &(0x7f0000000280)='./file1\x00', 0x0, 0x54)
sendfile(r8, r8, 0x0, 0x7a680000)
executing program 4:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, <r0=>0x0})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000)
getsockname$packet(r1, &(0x7f0000001c00)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c40)=0x14)
sendmsg$nl_route(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket(0x10, 0x803, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000001e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001ec0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x20040000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001fc0), r5)
getsockname$packet(r5, &(0x7f0000002000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xfffffffffffffd7a)
sendmsg$inet(r4, &(0x7f0000002080)={&(0x7f00000020c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r10 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000600)=<r11=>0x0, &(0x7f0000001940)=<r12=>0x0, &(0x7f0000001980)=<r13=>0x0)
syz_io_uring_submit(r11, r12, r13, &(0x7f00000019c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000001a40)=@xdp={0x2c, 0x2, 0x0, 0x20}})
syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000001ac0)={0x2e, 0xd, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8000000000000c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
timer_create(0x4, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300))
r14 = socket$nl_audit(0x10, 0x3, 0x9)
r15 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_opts(r15, 0x84, 0x1e, 0xfffffffffffffffe, &(0x7f0000000540)=0x5a)
sendmsg(r14, &(0x7f0000001900)={&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x4e23, @remote}, 0x4, 0x2, 0x3, 0x4}}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="d00000000000000001010000060000003187accca3c64b2a4739e7677843a333221995175763b5a8ce79a7ae7a90a1a14e8087436e78ad6e2695f2e23886032eaf0fe776d8e7d012c3f111263f8148fcd8b102cc1ef6533ebaccd496b797151ccd66916f3c6d81312b53aaa65707dd021243a30f8bd1d7413ca7be5a53cef851475f6e520a6bb90d6904b7427433389ec11842b20c8034250001504f8a3ffe697f4cc25212990e06cab17bb5797f5113d3935780c91d2756df0400363beecdb5f807d8569c0ea46c5a000000000000007800000000000000030100000800000025154b148b8091093157c36f27bd191dce4398387212d234e31e51aaaea4636f3d11990dbf4e1b0d0ccf3d6ceb9b14aa74d7d36133980aab8addc0aca7e9a8c0708c5e750e9f4f6d70ba087df3d7d1a13cc427944304e919b336bc3e5151b7e6b02817c14600000088000000000000000d0100000f00000010fa325b9ca6ac4557125987e7f2823d179d302106ca32436f79b8386c8bdfa23b9631b1d0593d85f7cb0ce3f1bf46936df596ab3127295b5e09674a7dd3dd4cd0f1e7f84d78c6201a45f3230f214f6859141c2c28b934adbb19528b3b43a94bc77e94bcab4914c292c06e29bcb51fee5f9eb50434c9c500101000000000000015010000ff0f000096507f376a4fc7f45dd8735fcd46427d989ce14c53b23b4f85d84d0d765b7fbc859150930e176aaac085ea5631e704686804a7782f4e164cc4a16a5ff91776bb4c8170b885a767132bfc40454c49f863c5fd8cbea0443aba53f320bc4e45a577a066e48be43f227fb76386e6dfae741d4a9e8b89bdda7f2605a466016b98529944cbc4169a2ca26a6b3c4c3761da204d4aa566d693fc475e53dd35988caadec48df150fd3ffca101640410512bcc82cf1919489ce0b819e5a1fb4922fc3b3b6f3e59abb8cafdac8aef8dec4b8abaf787d9db85fec94ec954da99e808207a1d062d53683a7daa93ca54575a3afd8a814a695362e02ade5f26ff99f922a01f8bf260aa8bd0a30bd17756ba23afbff95e71a0f0a44d2fbc962762b0e2df18daaf4734da101585f274549238e5ce429c5b810cd51c90927796b66c1397836437b2b5e41e7e26c94221aaa3456b888750f77bbc82bd5f863b9f6eec81994feab8a33a7a0067346d8b23e997ca5846d19a5931f8326f16e3a8af4a3dd180542977e6e7301cd36fa80e852ecb6914a41304a611e760d8d1e5d7988e0580e7c00e343b53e65451f0b454a9ef48fb9da625eb1fed64dd5ec0b8487a95d935a54c155261c6d40232fbd39cf76b3658e1f94a14fd82cecde8469ee5ab1acda04a635c84ec53238087cb56dba8513ccd1c2620beab3f0cf886abaaf662cc37df36fc7593bb331ac290e8d7f6ea4318bfdf8c8f96b6362387d3e72fad721bf529976f80b1e057be18b6c46774afb93683004a382df7dc70ee0fbed09e44ff8fd6e13196c030182c55e9de2252e6c073223285e203edb6e9ade387e5fdf5cb41822c22a951328dcc3bb928ae4d2ffd4760e066952c363cd65b4cbae7a9dba8c2e5d8cfa25056dfc249c57e2d4d5370cf2727b13c2ee04fecd79502bdbf5b4acf35c90ebc8ac0f29358195e784debc48a46c53309079801517312f234ee0efde269b8ecebca63c05348684300dac731f85f1c85fb8970ab655f8cefd652c3fd109d5a4d929dad424d93e38372404f175719d7ab3d7cd237f889571bc79d3afb2f7165a8d0ff8238305df5c6a74cf8c7d1473062c9f863d54c625f71a1f1db8c3e61e1dbc8cb06f490ce3f9ee4db3861a8e17521297738ba3244167f1231c88a531f8c21c55533252fd8288c6864689856ea10dfbb180b996b8f3514bc8279e6596c45d3a56ef54d60757e8792b6744b856531ec1c08c2d27e7088e9e4457491ad2a3ff94044736a16e771d1ad5bfd6de1a7b41a6bfdd163b4ded957f5c304bf8367aa8ce9eee3c46d6afe5f45de69fe8f3bbe505eb3057c7550b79f9a17bbd8452495b0ecad411201b8a8807d57d7a6c83baf898745fb5bf2c35e4cebb025040378b445fde170a1c838ce34fe5b808f6624416d5238af95a22664c95b0bce55983edae6e078d0b98b4a790b6f718c82f7cd188a93f0ece6158e1dae0e21e1d1fc779446b42bbf38d87e5e320d985d11e4205b2cf0c54dd4c17915dd8390f60502f344d2a616ca5b3aba0f6c5bba8305586f45acdf7194401db684d383cb30a0788de68672774b255cfc780d0aa7c692a538f8d56a5ba519d5345cad3405d26a751dd4b19dfc6081ea3434f05d94ffab15ad7578273721e35826a54170f15a8d44c2d94ada9c16feb99ebcfbaadc8377e2b6ed8d90d7a4cd7251f2e45c3aaaab81bc5e67a29041d1b82f7866ecc9140238268a2adc22ea186e4d738f295800998ca00a52dade25bea4b8418b9a3e20f42b2b2af073dd315c785d3a8cf459a550c53032fef7122b42edbb85dc1647d0599b5d72e3ed7879212c9e3caef97e6e6febafb90455f6b1402f7ed21e88d553da3018fc8fd025d72497646d3485d1966dae3f6dedca9d089b68a5fc881ed3a74d1ed99e814e794dc3e591d6d70a95b6b277bd1715ab62aac59d127c2c1f7b9202e7a9efb07ed64c9888bb6d19fee53304f38714c1a0715035e714d241896d677a4bea3ffd29d5b692c601b44722261e52caa2ce3acd5b5c51bc81b30ea6d88ab17754a19563e636828eefb2797e23c2dce4278992fb86240542f0d9849ad1863010b2a87a706563bf4240185dab605bc22c7720cb6f508c00ffdf1f20ea27c6e14140bb764fab41d99d7e10374e9efea35bd5b814de57a19fc777bc806a5d58358b838191b2fd8fa193a55a1ff4d21f167d300e5e912f8b7adad41eba06d02537aa9b39404a5052a3048dcabdceaed95753e45ef97141c69f5d66996c8f0660fd92f0acbf267932aac1cc6e5893ed283f8cf8c07efa1f32d80e5e9c45499617ae7f8f48ab069849bf53bac08a4d014d8f797bf0a4db3e0e2416e6ee7ab25cf718254fb40487ed4611affdf255d17f72696e90bce514f431f14dd56d0f02a52b76c2104eaeab629b7907415436d9d679023f5eda140daf0b927e07fcbc2044b56715dcfcf4eea09ff9399f9e0d8a6d3bfb4de4644677d0e74df4763176f1ab0c7070a1ef47029034e527a521901145b40ba41b8b951266aafb77597aba13d216e059496248eb832513f0b95b19ba1508d9f1eaeb2322f3ce47d10b0b46e909d5573c085bea817b47f9c84d644813066ab1d7b5ed131f6f0ff65c461964fceea205827dd5d2d6a29e3efd98f28dc63556252dc5eea4d252bc206547a9859f6447c39dfedcadf774405f774a0c95c4b806035e39949da1b7d9783e26d8495fa1db7da8750bc0c9b263a689841b734c48c9a657933c7ea28f89aeb7ac85112979cd91430c120b5e61b7168223ad78a4b957a334da25fa105527388c836d73b26bd860ac2f0f59eb5947944eeb20fba25449a9ee299e9d653ed6870e0ce0277af1e887e68ce28e1b2e63ad4fa9be539c10fed6123fdcbda25fe1f166dab3c7689cf72c5f46b0ee7c48e839ea29d3f8ded5aefa08e3db5ece0f896704ca3ef6eb4145198c9a645b8986b31088ea69b7a744cb01cf5dd3ca3b0d7c46d9e86d4e6fd9e8abf1932c3dbf6049ac756d7e6703fb91fedb3b91b329784165b6b9185deb1e6ae2a8ae57a0a161f34fc5c0669e57bf7ac4f4ab5c6edc83ef1b3395051266e9efb09e977adeeef45ade0509e3a7f739f82e62066e7c029052c00d22f1ab79ad465b97045263f8d5394a7b260419ff51b9598a038b0c2a913ac6751f68f60ebc68d7327d852b9359157bf34d0eba75fffa52dc9cd3eb97f97e5e7b3c66d3579a6c6ef9a32e258aab5085840162b2a7ed5b5617a372f7824d1fb082bdb8c1f8c886c0e661ed88203ed9e932ba118c9ee29f368a3a5bbd9e88db6640e6e6f43c943dc3d704d7cafe6e09c307a2d7c863273c92fef0e0db2c70d4a887ba605a62b4b43ba3bfa5d65b6ff3a4ecfa787f9424e48cc77c293ea3695bc006ef2891391adcea473d847c374e8b321f11d3d272f4f85ccc93d27a9470a9c55bd1074fa72c16b7cd4f96ddea247db86897dd1819d09bc7668baa994dfdeab7241e6ee0959a3e7bab37d9451ea0cf4f58ffb0b7e0d0d3732186a824b5b4f59f9224aba47d4615575766b183ae14bfc610c71b27e36dd154a1cc976e5c507da2c7e75c9d9efa9f07e396b0b21c2041c3013521d0b4135a083109138b2b747e9f6229aed0583a63a2d330355d7a506bbb9b0c5cfede4876656d9f2ec3f777424b669a934617e51c295161e18848853e2ced75a13d09d5f517cfe8c952ba4bae221fe07ffc09901d2351460dfd6a608bc77b807c48363c60597e9fc1e11c8b5044d3776ba5878ca246ead9e70667e815e4cd239c538cc1b690fc5d07bf14b80d84f631ef5b00488132afc489af94732ee514a01ad1eb676b56a0d6e64df2017c8d5a92c969fa96aa5f24a28672db269919b63deb03bd60068509705d9bd64bb37b2178264a86a904bb60f9c30363f70b0a03b4d58e067086244716951b179ec55e5e8aa5091b3e4bd75e85738fa7557ee0a935635f2ef0baac2ad4412a60627cd8c8549919a6ee5ed52e362212dde4cd08a3ee36d9629300d9c13c264419e2289e382138ef58f4c46ab37b5aa3c3f2c91fe73a852a3f96449866b7343823b4f437cf1c9b2ce95a5a7919319a704016a1c5c691d801492941a0e0090806c6f121722868089d860f2692148f2b5fc3bbc2db7e2e35092d63f2e32cd0cd239ba5acece9a5ee9bc19584be32d4266ae6504a0b75d60c1ccbd4f009ed101eeb6348afd2a5ba767540df0b575119567b71d78e430a83d16dd35557b04e4c34c08cb811e1573bba235249922596dd43d08fcea7800ff3f2bbba306e5f8d67486a3079aed85a9992bfb28329efbc252eaeecb2652be90924f30706f570f6cc660829e6d02a17837a82fffd4013acda8c22fb33d69e5e70794ece9b8ef1fad9da9f59f33c256f5471b7455245115b766ad559d9a9386553491b5d2a4966364ae9b6f44195900644d72325df9d272f176a51596478f56df1ec504043628c822cbdc5e5beb504ef7462303badcb15d01567825632acbc7e8567e7e5fd759332435323d70606287511744def4a8d44440d5915a9d9d19a628ae3f770b6ad54a6fc27e1b594736aecf4d216ace9f7414ffa0d894cee102a522102acb2a13889f612fb7207c11b62bb752858f9769b428936539ca9a19cde05f48e47e408d98f839d9c57889c539db1ff4ff2033c631d231616dddd5e5fc379746b7e271ddacac5a27221b06940bfbeb3731e8ab1661a127c3e422fc3008768028637e2058249840a75626daeaef71685bb00f7d257eeeabddd3d9764fd3fda44e27828cc768c28f09182731e3707c30b5d6459a801a7eba9d9910b72213fc66aa30513e08cc8fc7042cab4d63c404a060b933e9f1990c2a53f9aaab3c658f3254ec4c43c868c52f75980657ed0e5ddb774bfdca967280e8ce71715a025ee62fa3cb4e334e2f3fc79467dc99d10a0b6feb7cc51cb2fc786406d67f7575a39fbc4f61b3fed89d74b5800d47a6d6038925bbe89bcd8344d192272be2dca9d9a90f17f55bcec59c813565aee41558e8584f38f4fdd68c70b64aa0882a8d3a8c973be1b1ac6f445502e42017a258c31047defe9ac5d32752be31b1ee3f83fad4a438f204674e162b567473dcbfa40a558c22225d881752b1926c8da0530142fbeeb094176306531e45633280db7463d57d96c0495fb51bb32b1569f7e35d94a2110e7fe656b4f18f87352b20377dc9d38c241eca30353f339a288933dfd8a749bb1c354d92ecc90136a9c45988de7d836ad64dd9317094ee102bccdb25a0fb7363926d3d2e9250f9d73f843db58ab302c323a1d6294815c110b66ca9fe142937d91a34ef810b457b2f343065225ad5c49ae5df532c80a025aedb2da5706272adfbdfa43a486316b66916c4549c533f212ac043f6f9f49309dd66c6c03c812eff11067ebff058bbd6d078b8bbd171c3d95be46d5c803be35954b3ccb4e6835b68426809c9b4d95bc6b3ede8e25a514a168bf6ce819bd0f24ebebbae3e66d961faa4c506a0ae15a04afb6c31f63a284b1e0bd3afb44b2948355fa6c10056b1709b6cb45ea2cb3d51b81d524784fe7759908d484068817d2692b75b295e1c77863053b4879cfa9859d784318ea00ecac828a206cc34bac86bb7ad147dadcfc8b26b27b90dd05608d9676d2943e41d191177b41978b2d7bebccfb474d894e4e7aeaf797d5403142204959824d317f761e82dd849c368c972a45195832deb105ec064f6ffd22ba6e4f975552473340d6d70c089632b91f4ded5a7af378845beaeb21550de9b922a3823d2c5000000000000000000000001ada0000cb355243ae74f3831571553859b46114b58d9581ed4c1045bcc86e49e0e509597382e3d58eb09dbbf042ae315a3fc1a40516d8374245a9243cfb1ca39d00000060000000000000000d01000073220000259fd955c239f8e5b198fce736929d1c87a6b4f1475e2801ff9df408708f94bfdc98f5ca7a6a7988d073b27e8f226cd026286120fa44d49ec4401e1d1b141b6b6d9461e2f4b1de6a11adf95592000000"], 0x1290}, 0x1)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
executing program 36:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, <r0=>0x0})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000)
getsockname$packet(r1, &(0x7f0000001c00)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c40)=0x14)
sendmsg$nl_route(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket(0x10, 0x803, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000001e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001ec0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x20040000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001fc0), r5)
getsockname$packet(r5, &(0x7f0000002000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xfffffffffffffd7a)
sendmsg$inet(r4, &(0x7f0000002080)={&(0x7f00000020c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r10 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000600)=<r11=>0x0, &(0x7f0000001940)=<r12=>0x0, &(0x7f0000001980)=<r13=>0x0)
syz_io_uring_submit(r11, r12, r13, &(0x7f00000019c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000001a40)=@xdp={0x2c, 0x2, 0x0, 0x20}})
syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000001ac0)={0x2e, 0xd, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8000000000000c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
timer_create(0x4, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300))
r14 = socket$nl_audit(0x10, 0x3, 0x9)
r15 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_opts(r15, 0x84, 0x1e, 0xfffffffffffffffe, &(0x7f0000000540)=0x5a)
sendmsg(r14, &(0x7f0000001900)={&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x4e23, @remote}, 0x4, 0x2, 0x3, 0x4}}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1290}, 0x1)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={<r2=>0x2, 0xe9, "52bbb5cbb243dcc4a697193b7a4bcd430787c2a0c1ea25b01adc461b2063f9a0649ea577983149ee37ebde63e5cd1c715e94620d55d33f8e9ffc4c74da29b90678140c1e8be2921f536aa10995ab75f16d8621bb0efb1daf6bf203fe0a38c2285a9c36d59a0b1635becdcb2ad8236ca3c8a9057ad0e8cfdf07691fbc4a33f079bd375fcd550709c76128d9d16134fc7646c1bfeb229e8c1c8eee2c9eaf86aa62640312094b1868deb14cba3f0c0c596906e5ccd4f4f5156233435f79aa064f954de6ce3dd0d89178a2e48f746aa3f15b426dc4b480e890b6ea44056a64f5fd251e778948a7302e7d59"}, &(0x7f0000000340)=0xf1)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e24, 0x7fffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}, 0x84)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x6400, 0x11223}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}, @IFLA_MTU={0x8, 0x4, 0x44fc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004050}, 0x20048040)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10)
executing program 6:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x8}, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x246}], 0x1, 0x40002162, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x10, 0x4, &(0x7f0000000900)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200a, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x10}]}, &(0x7f0000000940)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000300)={r5, 0x0, &(0x7f0000000340)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r6 = socket$kcm(0x11, 0x2, 0x300)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r7, 0x4)
r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000980)={0x1, 0x2, 0x1})
r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x389181, 0x0)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r9, 0x3309)
r10 = syz_open_dev$vim2m(&(0x7f00000009c0), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000a00)={0xf0f022})
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r11, 0x5, 0xb68, 0x739, &(0x7f0000000800)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x40000)
executing program 6:
timer_create(0x0, 0x0, &(0x7f00000001c0)=<r0=>0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x66}, 0x28)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000580)=0x1, 0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000640)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000740), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000000780), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048885}, 0x2004c0c4)
r7 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000140)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "e5fad343e15e00deffffffff0500", "0000f8f88813da00"}, 0x3eb3, 0x2})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000180)={0x80, 0x0, 0x0, 0x48})
bind$inet(r1, &(0x7f0000000880)={0x2, 0x4e24, @multicast1}, 0x10)
sendmmsg$inet(r1, &(0x7f00000008c0)=[{{&(0x7f0000000900)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000980)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000009c0)=@gcm_256={{}, "b8155244614427c8", "6120cc39c039a8222816358a7d0637f0dd5d60d0d3ec50524456c96e4db1b2f7", "75223cec", "ae1b8a64b7c9bf3c"}, 0x38)
timer_settime(r0, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000340))
r8 = syz_open_dev$evdev(&(0x7f0000000380), 0x0, 0x842)
r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x800000, &(0x7f0000000480)=ANY=[@ANYBLOB='tr`ns=fd,Vfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00'])
socket$nl_netfilter(0x10, 0x3, 0xc)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x38ff817, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
umount2(&(0x7f00000003c0)='./file0/../file0\x00', 0x1)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x1000040, &(0x7f0000000480)={[{@nobarrier}, {@oldalloc}, {@orlov}, {@dioread_lock}]}, 0x5, 0x59c, &(0x7f00000004c0)="$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") (async)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x1000040, &(0x7f0000000480)={[{@nobarrier}, {@oldalloc}, {@orlov}, {@dioread_lock}]}, 0x5, 0x59c, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', 0xd02, 0x15)
pwrite64(r0, &(0x7f0000000ac0)='2', 0xfdef, 0xc00) (async)
pwrite64(r0, &(0x7f0000000ac0)='2', 0xfdef, 0xc00)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x92042, 0x20)
write$nci(r1, 0x0, 0x11)
write$nci(r1, &(0x7f0000000b40)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x1, 0x2, 0x1, 0x87, {0x0, 0x2, 0x2, 0x3, 0x6, 0x0, 0xc, 0x2}}, 0x11) (async)
write$nci(r1, &(0x7f0000000b40)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x1, 0x2, 0x1, 0x87, {0x0, 0x2, 0x2, 0x3, 0x6, 0x0, 0xc, 0x2}}, 0x11)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) (async)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000180001042bbd7000000000000a401400fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000000016801c00010000180101"], 0x60}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x0)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x61)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/file1\x00', 0x3220019, 0x0, 0xff, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', &(0x7f00000002c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x93e4}}}, 0x0, 0x200) (fail_nth: 5)
executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB], 0x60}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000009c0)=<r3=>0x0)
r4 = syz_open_dev$video(&(0x7f0000000a80), 0x7, 0x0)
ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000ac0)={0x3, "a8df7802997c0f0f26a793d1c00000000000000200000500", 0x2, 0x5, 0x1, 0x3200e0, 0x4000000, 0x2})
prlimit64(r3, 0xf, &(0x7f0000000a00)={0x6, 0x8}, &(0x7f0000000a40))
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
r5 = socket$inet(0x2, 0x3, 0x2f)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000940)='xfrm0\x00', 0x10)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10)
listen(r6, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffff9, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0xf4c, 0x8, 0xb9, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x3, 0x9, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x6, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x2000312, 0x78, 0xea4, 0x0, 0x401, 0x7, 0x1, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0xfffffffd, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x4008000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x3, 0x40, 0x3], [0x7, 0x40a, 0x7, 0x5, 0xfffffffe, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x89, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x1fc, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12f, 0x4, 0x1, 0xc, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x1000002, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0xb, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10002, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1538, 0x200, 0xffff3441, 0x1001]}, 0x45c)
ppoll(&(0x7f0000000680)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
executing program 37:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB], 0x60}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000009c0)=<r3=>0x0)
r4 = syz_open_dev$video(&(0x7f0000000a80), 0x7, 0x0)
ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000ac0)={0x3, "a8df7802997c0f0f26a793d1c00000000000000200000500", 0x2, 0x5, 0x1, 0x3200e0, 0x4000000, 0x2})
prlimit64(r3, 0xf, &(0x7f0000000a00)={0x6, 0x8}, &(0x7f0000000a40))
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
r5 = socket$inet(0x2, 0x3, 0x2f)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000940)='xfrm0\x00', 0x10)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10)
listen(r6, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffff9, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0xf4c, 0x8, 0xb9, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x3, 0x9, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x6, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x2000312, 0x78, 0xea4, 0x0, 0x401, 0x7, 0x1, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0xfffffffd, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x4008000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x3, 0x40, 0x3], [0x7, 0x40a, 0x7, 0x5, 0xfffffffe, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x89, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x1fc, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12f, 0x4, 0x1, 0xc, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x1000002, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0xb, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10002, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1538, 0x200, 0xffff3441, 0x1001]}, 0x45c)
ppoll(&(0x7f0000000680)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
executing program 9:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000740)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000780)=r1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r3, @ANYRES32=r3, @ANYRESHEX=r3], 0x1, 0x392, &(0x7f00000000c0)="$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")
io_uring_setup(0x2ea5, &(0x7f0000000480)={0x0, 0xfffffffb, 0x1403, 0x40, 0x7})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000c80), 0x161042, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x31c5, &(0x7f00000005c0)={0x0, 0x7978, 0x800, 0xfffffffe, 0x360}, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
executing program 9:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c900000095"], &(0x7f0000000d40)='syzkaller\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x41100, 0x40}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x108000)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f00000005c0)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000600)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdb7d, {0x0, 0x0, 0x0, r4, {0x8, 0xfff3}, {}, {0xe, 0x300}}}, 0x24}}, 0x840)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), r3)
r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x1a10c1, 0x9c37611dc13d0da3)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000780)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r8, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r9, &(0x7f0000000840)='0', 0x1)
ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000880)={0x28, 0x4, r8, r8, 0x3, 0xfffffffffffffffa, 0x3fff})
fchown(r6, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x5, 0x0, r0, 0x2, '\x00', r4, r2, 0x5, 0x4, 0x3}, 0x50)
write$nbd(r2, 0x0, 0x40)
r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
unshare(0x22020600)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r12 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x8100, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r12, 0xc0184800, &(0x7f0000000700)={0x4, <r13=>r11})
ioctl$DMA_BUF_SET_NAME_A(r13, 0x40086203, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r10, 0x5335f3fab7bb534c, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
executing program 9:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @local}], 0x1c)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f0000000640)={[], [{@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x61, 0x39, 0x37, 0x37, 0x66, 0x35, 0x31], 0x2d, [0x33, 0x34, 0x64, 0x63], 0x2d, [0x0, 0x63, 0x64, 0x61], 0x2d, [0x64, 0x39, 0x64, 0x64], 0x2d, [0x62, 0x37, 0x31, 0x36, 0x33, 0x36, 0x36]}}}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, '-'}}]}, 0x1, 0x50a, &(0x7f0000000100)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./bus\x00', 0x1c1002, 0x40)
write$P9_RRENAME(r1, &(0x7f0000000d80)={0x7, 0x15, 0x2}, 0x7)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff)
write$FUSE_NOTIFY_POLL(r1, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x100000001}}, 0x18)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
bind$packet(r0, &(0x7f00000001c0)={0x11, 0xf5, 0x0, 0x1, 0x83, 0x6, @random="3160cff86b8b"}, 0x14)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x101e01, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000340)=0x15)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0xc0384707, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x2c020400)
r2 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$rtl8150(0x2, 0xfdea, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
pread64(r2, 0x0, 0x0, 0x2de)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020)
executing program 9:
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) (async)
setpgid(r0, r0) (async)
r1 = syz_open_procfs(r0, &(0x7f0000000180)='fd/3\x00')
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = io_uring_setup(0x5101, &(0x7f00000000c0)={0x0, 0x4, 0x3000, 0xfffffffc, 0x40000}) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x716e) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) (async, rerun: 32)
mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000002200)='devtmpfs\x00', 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async)
ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000a00)={0x20, r6, 0x1, 0x0, &(0x7f0000000a40)=[{}]})
r7 = openat(0xffffffffffffff9c, &(0x7f0000002240)='./dev/mapper/control\x00', 0x240, 0x310) (async)
write(0xffffffffffffffff, &(0x7f0000002280)="240000001a005f0214f9f407000904001f000000000200000000000008fe", 0x1e)
ioctl(r7, 0xc138fd02, &(0x7f00000022c0)="0400000000000000")
io_uring_enter(r3, 0x0, 0x0, 0xf, &(0x7f0000000140), 0x18) (async, rerun: 64)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) (rerun: 64)
close(r8) (async, rerun: 64)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) (rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r9}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) (async)
write$sysctl(r1, &(0x7f0000000380)='1\x00', 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x17, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0))
clock_getres(0x3, &(0x7f00000003c0))
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00V\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r11}, &(0x7f00000006c0), &(0x7f0000000700)=r10}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 9:
sendmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000084}, 0x88c0)
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0x7, 0x4)
sendmmsg(r0, &(0x7f0000001740), 0x2e9, 0x0)
executing program 38:
sendmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000084}, 0x88c0)
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0x7, 0x4)
sendmmsg(r0, &(0x7f0000001740), 0x2e9, 0x0)
executing program 8:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x2, 0x6, 0x402f, 0xeff3})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001380), 0x40200, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000013c0)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=ANY=[@ANYBLOB="38000000540001002abd70000200000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00020200e0408d831165bfd8cc3fb9463c71000001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001440)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001480)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r6 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r6, &(0x7f0000001680)="bad386dd", 0x5dc, 0x40, &(0x7f00000016c0)={0x11, 0x8100, r5, 0x1, 0xd9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x14)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001280), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000012c0))
pwritev(r7, &(0x7f0000001300)=[{&(0x7f0000001340)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r8, &(0x7f0000000100)={0x9, {"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", 0x1000}}, 0x1006)
ioctl$TIOCGSOFTCAR(r8, 0x5419, &(0x7f0000001140))
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x4c, r10, 0x7, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x7d, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x4c}}, 0x0)
mount(0xfffffffffffffffe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='efs\x00', 0x2008000, 0x0)
executing program 8:
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x1, 0x2, 0x6, 0x2, 0xa, "ead4f5b1d89ce091b50610706f89e729cc04f8", 0x8001, 0x5})
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0xf7, 0x2, 0xdcb}) (async)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0xf7, 0x2, 0xdcb})
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=""/76, &(0x7f0000000140)=0x4c) (async)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=""/76, &(0x7f0000000140)=0x4c)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000180)={0x72, 0xb9c, 0xae, 0x8, 0xb, "fb61351986e56fe6"})
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'ip6tnl0\x00', 0x1000})
r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DM_TABLE_DEPS(r2, 0xc138fd0b, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x1e8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, "93dfbc55c1f954d8188e2a3d0347c79f067ba2f302cc9c0c74a2b4204179a3da89624656fe90d97b96ea0480b24fe2c557d7512fea70590c1b0ceaf2e3a850ac93fd2b0d73090e2ca5f8cae88e167810cc49542b7eb91965171c2e71c2e88d0a8a3db2cd323208a0bacc0542184b5c4d59c2f6402cc69fe39b26d2542e5e83fbf122bb9f9a9888b3f357185316dfedca5abe9d3f82bf4598fdec232a1f329112b79f7bb9cb2eb359488536d6dd53"}) (async)
ioctl$DM_TABLE_DEPS(r2, 0xc138fd0b, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x1e8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={<r3=>0x0, {'syz', 0x0, '0\x00'}}, "93dfbc55c1f954d8188e2a3d0347c79f067ba2f302cc9c0c74a2b4204179a3da89624656fe90d97b96ea0480b24fe2c557d7512fea70590c1b0ceaf2e3a850ac93fd2b0d73090e2ca5f8cae88e167810cc49542b7eb91965171c2e71c2e88d0a8a3db2cd323208a0bacc0542184b5c4d59c2f6402cc69fe39b26d2542e5e83fbf122bb9f9a9888b3f357185316dfedca5abe9d3f82bf4598fdec232a1f329112b79f7bb9cb2eb359488536d6dd53"})
r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8)
ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000480)={0x1, 0x81, 0x5, 0x1000, 0xb, "9a7658887657acee0f4ee28a8b1ef8c6bbe558"}) (async)
ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000480)={0x1, 0x81, 0x5, 0x1000, 0xb, "9a7658887657acee0f4ee28a8b1ef8c6bbe558"})
ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f00000004c0))
pipe2$9p(&(0x7f0000000580)={<r5=>0xffffffffffffffff}, 0x80800)
fstat(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x100000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_user}, {@version_9p2000}, {@version_9p2000}, {@cache_loose}, {@directio}], [{@appraise}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}*.'}}, {@permit_directio}, {@obj_role={'obj_role', 0x3d, '/dev/net/tun\x00'}}, {@euid_lt={'euid<', r6}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000780)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r1}, './file0\x00'})
getpeername$packet(r7, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) (async)
getpeername$packet(r7, &(0x7f0000000980)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14)
syz_btf_id_by_name$bpf_lsm(&(0x7f0000000a40)='bpf_lsm_socket_setsockopt\x00') (async)
r10 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000a40)='bpf_lsm_socket_setsockopt\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x19, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@generic={0xf9, 0x8, 0x0, 0xff05, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x7, 0xbf, &(0x7f00000008c0)=""/191, 0x41000, 0x1, '\x00', r9, @cgroup_sockopt=0x16, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x3, 0xb, 0x6, 0x20000}, 0x10, r10, 0xffffffffffffffff, 0x3, &(0x7f0000000a80)=[r8, r7, r8, r7, r8, r7], &(0x7f0000000ac0)=[{0x5, 0x5, 0xa, 0x5}, {0x1, 0x2, 0xd, 0x4}, {0x5, 0x3, 0x1, 0x6}], 0x10, 0x8}, 0x94)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000bc0)=r7, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1a, 0x1, &(0x7f0000000c00)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000c40)='GPL\x00', 0x2a455b26, 0xb8, &(0x7f0000000c80)=""/184, 0x0, 0x1c, '\x00', r9, @tracing=0x1c, r8, 0x8, &(0x7f0000000d40)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000d80)={0x0, 0x4, 0x1}, 0x10, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
ioctl$VT_OPENQRY(r7, 0x5600, &(0x7f0000000e80))
syz_btf_id_by_name$bpf_lsm(&(0x7f0000000ec0)='bpf_lsm_path_mkdir\x00')
ioctl$DM_DEV_REMOVE(r8, 0xc138fd04, &(0x7f0000000f00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x80400, 0x0, 0x0, @by_dev={r3}})
ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000001040)={0x0, 0x1, 0x20})
r11 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGPTPEER(r11, 0x5441, 0x568475a1)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r7)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x54, r12, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0x4, 0x5, 0xc, 0x1b, 0x36, 0x12, 0x18, 0x30, 0x30, 0x6c, 0x30, 0x16, 0xc, 0x1, 0x24, 0x30, 0x9, 0x6c, 0x2, 0x6, 0x4, 0x1e, 0x0, 0x60, 0x1, 0x3, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008044}, 0x20000080) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x54, r12, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0x4, 0x5, 0xc, 0x1b, 0x36, 0x12, 0x18, 0x30, 0x30, 0x6c, 0x30, 0x16, 0xc, 0x1, 0x24, 0x30, 0x9, 0x6c, 0x2, 0x6, 0x4, 0x1e, 0x0, 0x60, 0x1, 0x3, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008044}, 0x20000080)
executing program 3:
r0 = msgget$private(0x0, 0x1c0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
msgsnd(r0, &(0x7f0000006000)=ANY=[@ANYBLOB="01000700000000004ddb5035e604be595639c235103b512133a747da8da08f280f05ca0abc081efbfd69a53158034590eab7e016ca501e26994a5a94d0450f031312d2d8d439098113a83c627bfae030ad450cfbcba5ed627b06"], 0x8, 0x0)
msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001c0000000000"], 0x8, 0x0)
msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000af70f66fac49722f07675d1dfc6791f50e085e1b0f79effddf2adca1f275a71c30743f1c09c5bf575974afe79101f9d3e296af5d6aebe68e74d704a2f48aa6a30eb4ef9e82b010000000c63414941ebfb9d93d341377e7cbf44033052bb1dcdc1dfc776c5825a44f69247f7757ea054bf02503e738f3f6fe5fefb4edd0a49129b31715f19811ce875624d38a8916e38785c5c1c1890b298a393e333b0db77724bc2f94c03808617798c5dd1ce3a42ae64a48806d0f9e18e3f98e876b92c0fa775ed2a68bdaf88b1d8aabce6622a1c77e33a698f2518346647ef0b8483e3784b8b03874a52edeee720e0906ed3c435dac43b8ee7f5813ff61234572301e1e881e55d71adf2dbe01e516c048bd53086f8d41e32bed598db37edaab4f33d9935d59c2a7017950709b39"], 0x9e, 0x0)
msgctl$IPC_RMID(r0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x1000000, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x1, 0x0, 0x0)
read$FUSE(r1, &(0x7f00000003c0)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000002400)={0x50, 0x0, r2, {0x7, 0x2b, 0x7, 0x800, 0x101, 0x2, 0x2, 0x3ff, 0x0, 0x0, 0x1}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000002480)="7183c1654c792752d2252c111505954b0b2d4062f31328bea54f310d5dcf627fa7f8f45e484f7bbd0c20f5de909f0c29f7418403b0a343182340147475653be9aec286f773355d274454a71a5eb1afafccb166cd4b995af5b23ea89439fd58f9d4b07fac9ffde1c16f9ec644e02386c4c879fb7495d65b6cd2bda928253538ab5c7061572b7be5483b6fa86968358b4b537fa0b95fc63d8631b1084611daee62ad3bcd2cb9f53a59416985d77f219e29f289a45fbb1ae3ebb4e046d6a9633ec25ea3156f36effa0491e125047e7948e3f889f713abc9474f577d84e8cafe011ee3eec12b43270d728146e2ff22d74bdb0694e93b7f977fa1952ab5b9a69cde45ec4d22047e785794c827c42173a26930b088520677246ac55b5bac5574325eb6aa71b5f67e151efab73f7582588be5eede94b20c257eec7cffb6d6c898f2a525ab0fe9fd0a1fa480137eae2905a932e175ffbba70f1dc7cde443abcfdc2e1fc12b1bf444e65b802eb4859b62a06ff813611a6ea1d8d35bde0348c02af3b8c70fe172d899ff191850604b2786e06cedc28de58093cb585b49a5c1d4c8669e8a59f95ff3bb4287a56d19de4c65d18ae9335cf1cfedc47e6741fdc6a6ca45290cda457a87162fd6868d80e26bbad4657db5214f98e89240c27b071bba6dfc206308a078593c7b7b1d20d64291b7dae4ed3303c5d90d0df3e1be68c47f99baa2cacab4f87878e4a497fe5bd4f9f0bd4e7253dda9a951d1906a6da9e4def5e6fb8df7dcc085957c59b0b725deb104dfa0e38f5d3f4bb6e55d0af541348cfe50f17fcbded2419d939196a349ff139a1545765379442078676ef2287d9a07eeb2758ca36536640820366f99f31155c1d571792bef6c7ee7570f1a267ee692f93203efa00b5678b6f1549068fff92651c9ffe1be516575883c42313c9175bf9dec1c559c8414dcf3c928809f9d4cdc3279164d570b5f2c3f549d7c57acc17286622983bde3db9e6eeaa53fd6dfc30b87edcceed4543eef1ced8a43584a2a0b90ef0c11d92682a7c3647888fdebaf8522a3886cb6874032b803b9024fd2df89a291c8479b6fd1f29202484d2227ee9cfebb58cbbc5459583392c78f4cdea2aaa353fc10d0f6f219e041cb95fc4fcfe95d6e2fdf8680d4d4315ec4a90735aac77c02e0bec67e1f6b8edef2cf8c3b2334aed69bcd855fc70ec13412322bcdfeb9ba36f48b62a19c489ff0be02bb5042bb7b911ba53c2cb73cdc2c8afbcaf4a067c9f33427249ca462fcfc760ad265f468ea8417f1cd35be629d35ddd0901ed6c1be436f248dce3a6280a8e0c245bb409fc4461efdca9b3fbbeb1090f665e2491cb86198d87973ffa4129bd5cc31dd472313f55b3ce5d7517d76414684431ea0eefe3fb4dbcf462cd8ee3605daa4a372b0ecfcddcf9fbea616721cbfc12dbfbf77ebc02de165157bfc7540a8271c2d1f445a2c7afba38c3ebeb61169894ae9ceb8e228c7331137db6f870a19550f2f495c7f08d0b131208fdbab2003479d18093ce57ed13780fed91050ac7be47f4ac661a160f014c18b572c7982c0b03851babdee50a066827ed740f265cc118effc7ef7608a947680c4bee1a305b2cac9f2f37a2771f1382fdb24cb936dc4220a9a6a44669d7c48564e85b475a076c4b06f1f2b8dc04e2d0a0775bf52fcb811a903270d704bac39ed1eeb3caee9b0940e0c22f513ad3c262000047db217f2aea76370af22adbc3c8e6f1e6fc22b5fb4b176f405517e5fc483c50076ecbd2af833c45f1b7fe21722d35bbb5153068426c1a630f9d08517953b39b9adf9b9c5f5f7a9bf2f0020e84edc541bb5112bd00d3dda0a5a784b038de7f2bada95b5040690ef556a5ae169b874f26f85c114e71a0393bda4c8c1aaad8b4c7523f24a901324c9d2cdf6deb88bfc03092130aafcbb75ed469f269a78b83937dea2fc1d0e3d826edb978471c5cbadbd60bd3b9f418ef30aa6a437319793d5b252b30e6c6587b7c888da6d257a59356d2e3aa7ddfe477cb7122a727289d42a5d0773a3a2a93a76e3ba0c854a98a4297ae388f0861f64f1949eda7cb8f1d643b1a8ea488f1565a829c3dc06ddf10ef193ddc74661d4a1e8ade01fe2652ff606d48eee3732c88603f8059c56d08b231069eee3c4c9b62ce59fd03352723ae4068983c5ef5f3aefdacb92756bc051c15936f86ab70910141a897545489da87f8ec6a545626dfeedd1a01b39b03c0961030fca2eef0e0935f0afcf495598ae5e1b428152e62ecf21512ea27d7295bb9697eca3a6fffe5d7c1f1c389ec0d4f509d3bbda5d3bc31cbf8d6a32f966d654b18c25134fb994b1acca6ded0e13f7a2d94964b5e16ec0e0448398c297314254a9acd36d14c342d637084b96e0b770ad7a46d67238f26625e2f3e2c1283983bea299ad149fafaea62e4622c29f168ba2b091ad8a19e5c19f0f51608c0f55012f829af2934bf00b59ef689b93fb5e080620da166f61251a83ef4c52f246bd5ead76449c99048eadf778e52313935ca50d953a962941d07cdb5f201cad408efeac1802f1b622bf9ff338ec0dc0b61297e681c15db4ba82b9a7c7879b2897e2f4da36de9d366770c222a064d5b56ca800009d260376a6dc19f63d0a5fbb4f2b7ccb71b9d693d4596a4580d7822872f29a3af6d0419aad50b5e44515ce4b48bfb923c16dff60eb890bc04a8997b4bb347a643ca436ffb8f4cdab529c2fc847ef8db017dbb8ea76f645eaf3d8314d8b68ebefdff622076f5f5365fb00db199dcf6ffc998d4007a2d3ff11abd03a71f7c2b23bf7da785010acaddc388d21ca5700ec57407e025ab5a93750820a0814b330fca50534edb5a1b8658301a7f175f110c8513b9e0841074f135200965e8d74c93732c7c34c003cb727e86e6caf3fa8ddf54927001e1f29c7ffe1cce3cee719f980d4ffc9abebfeb1c5059b52afe9c78413a6e825af24fb1c675b906577bb1afd02fae10b6d7b6d9a394826987a621c3d332320f714e74b709236dbdcda930db15650d1fb3dac7333944a205c69f78433545b942dc8bc41a670da0ede8b0383e66838a2980344d35977e9a1fa94c164f73ddb673c7e65eeb70df39bf25b692dd09ddbdb6a5d0bd0a5b5773c128abeb021147277cca9c8f76dacdf75174969ea62b479d05557ad3365f0aeaf061323d8de1773c81cfdb809a55e5aa6967a3fde5eb3b590a523e3b986997bd42adcaf55f5859641d8a20288e48eac8b5d3ee23d71be3298120031437d650645e36786b6f887d9dc74e7dbbfdb6d463e912f3e462480b5dac49a2804eb56ff333d7fce4c1b29036ff26cf7ebfa0bb46e36f6ab37cf8a4480fe85004a05a046a7e367ce78699a893f7d9471fa1b81b23d59bc1dcec14ac85db72056c7c84be166e87a2b120c6d7e53d3b1505c1336cd362e1d101a2c29d62ce1e2733efb4e4861a9f712f678b09f174fce6ab5957c185e77b0017964f7caf17ab31531f8ad3afdebadaa949aac1f85b1fe31553afb464ece3b0db14a5c0b42b9574729bd41f1e543529219939685e7dfc643263f363b3836cace58433244180f1ca6bcc740a0e6c66ec22f5c0edb91599faad9ff618d541568680831e5659c73d01151dc4a89ad6666cca1ad7e57bfe819a305328f00d680555f4979348fb444c508785db795d3505b764f328bd123dd2f4fd13c3be9094b5232ff38b02e485da80ea0418d1d6c6facf7bbf020c5d2894f8c4f6d67a0ecf660dc87af9c625c7b8dc12921f3f01edc8954fbc40a61d87bd64a1eb7aa18d525df842492d16d380fbfa0022118c22fe617e4a43dc311fbcc06ed9fa656deadd965021ff973a19a84bb2c04eeeda2b0d8e9dc4ebc9818c21661fe95c42f8917d88ebb5beafb7e0ac35e7174e9851ba2a8c5cf4115a5e0391b65a8fdaa9750c07046e67881cc491dfb14999cae28e835dd083fb5962ea9809664fb5dbacaec93423f9ca2bd37da35fe5560409f76adafded418891cb45d22363cd77f0eabbf90e6c0413f56175ead17954d18f5e13e16f9a43e3d50ecfcaca20cdeadc6a85e3c5d8039d502e82c8657b0d8d67aa81003d5eab83884df0206fa5020e32eee186aab41da797a32c8e7d2ba8309b463bd84447d27d51f8978d744474dac867822814e1adf897c79e53662a3db2575a6ed5654e41baf4da6415fa4f79baa0dd5870916814fb42e72441080dc50f33fed0ec215931f3ef6b53786911afc7ce6b89d8984f5dfe26d29c6d1b59671820390b7c9695f51bc13aa84abb6bb49cfc8dfeb7aebc2d21b9ea4a44be2f90ac7934d6f3910d388dc65ca3f18c6875ff5ee81a4bd61202443bb96e40af5c8d840ecc4374ecccd8c242fbaab3bd5b57beadc8562e5280716898d6684c0f09102f378e9e4c5dc0f2e735acb8c5f312974e1c80c817fa504fbb948c9a5fe779f249b1faf95d3de797615f29ad83807fc357c3de2fa1dea6b75d70bb20d3db88b7ed167e377e7c1f2b0f185cfc598c54a3de9a3c6a1099f3dbdac4ccf9b541c5b82ecc46a02054dadc255b27507615ea028b887e3446f7bfe9f07a397ed271b31f6b61e4d4fe4f444dd501d1bbe5ad0d9f532f22f7d181cdf2eacf02fe73b86bff775c1d27c97fb5d61a62c7bd160fa9abc411628339926915f016c15cb9d7dd6a161a46d0dbe8ce79ee8f92e4b0b1a90d26fd9a336d2dabb6844086ab91ccb875039c22d3e3cd623369642416b13940da156fc38bf22ccd790eaa594a43057886e31aa1d9b08d551128c227b111d11c11149e9f17ba10ef9fa330cf779b53777067d118d92a029359b60a4967460db0ad15437c26cddbe0467cb86332a4ee5a7db0994c70fae7b0c91b2be8ab0b8fd59724f22a7499f367f0a564eaec5a6c6ec33e217d1179e063bdfca7aea8643b258a91326996cea21c3f5833e88ffaf7162760360b068136172e8ff3896c6cb3f85ed389087b782bddc2787d316d02218651e726ac74f0680f41375eaacb65f5e07fe02554b4ef68d21c0057151f1885e40efa06cc575d9da764646ad1623a12476fd22a1689b80029d686b49fc5e3809ecb67a3d455db985f9fa5ef94ff15a37b7f436e25fb6b332a61593b0091320aa059fa4e7b40218721e93a4852a305afb91482711959886dba77ca130d6b704152c88a497492a8c8497d6500d4c00303c976ce4feb63af3c04d79470798916a39a35bbe286f0139ab4a389776216f0ff45192b78ef7bc37a591961f29334bb159f05cfb29077d25ae64e25511cb0e06d04bce0bee9940cc9301e5188410d90de2e6f3c8b2bc7d3b63a7e9e81e06c0f7aba6deb3f65ade427ee759f4a145d48f46be57452c186f79756eddbd57a8afa56c464ec2390bd0de443e9050358600d2aae0f4c26c57509ca44f87828a78b3402877097793a124f1d8797df9ee8a3d4ee31b2d0b6ff15d9fd4dfed8576f8473f11ff1fa8a9ba5d6a98b496fa8ee07b780a2f3db6096ef7a210944c421f917a1dbb6656b5dd1b5d28b9c12fffca50c7ae219cf2fc942f44157e6a9075df8bd1d1a4e78c5257de2c0547ecdbdecab658dbb78cd12f123cf30126f6d3bb9862ac2577dafa57f6d781de013c24de2c1a61b68852933cd52a008188c81db89a3a5f6d726b4a36ec94b88c1f9897ff4c8b70357dd6b8df89814979f23e6299bef881b418b43b2b8b2f9a2b4fdb63602b4855b6af76a0738b05f9595f109a087f51fec1d8c8fd89fc65a7a5e87fb51c6c1d5f7681a03866935099d71a14090b4acbd9b32b53f41b5bd941825099d2b60b8a2824b2ae8a6a280bb49664b168b680b5557cd4c043cd8317740b7bfc67c09c572a6f9430717a7fe8c0de6eac2a8197353fd98008318301586574d3d0a9bd940119c86eab16c37b52f5279ef017dd05ee01ec251ecfa4552faf56b2e6c5da623db3dbbe5b61c997b587a1ff324bd52ebc009083abc3b38ec8e025a74c9a93b4ab93563b077fe21bf8e003ec94d0ba086c755d57d089a4d26da0dc3905794e9f514e6489fb1fd17017214d13e5f8953b5ccbbcdceabbb795c47509b77b856a325062bb576472639a9c5945758862e9919a585a08323e3f6b373daeeae53fc34bcb0348c225b42681698b560adad4d6e76a142fb24fac16ffe41d3ce90f3c8d2c23c9bc9a1f1cb6d7d914a52a4a81e0bcdc81c3db916280b5064e337dbeb609fc55349c3b3c157fd5f290f96a49b9bf793bfc86a5e2f2aa8640b7051cfefc60079807daba74caadda51e509c45b6334364751424f6812aa649044cda11ce9f667433ce507521a2fa5b2bf7426a06c4cd2b96cd5daddf40b83f5201066962ccab5aa240abfc161cd22767af0c9f38eaa353ec94ebc91cd5d0d692199c51c94ab0ad01a96fa5acd1dc426732f46c97b48ca6122e35c165d67af9c1c7939efc4b34b94287339ae19dde488d5ac009b271ddcde85ea9651bc793b1c6a6a71aa569f03f350e0bc9b7f03697bc8c676f8adca0dab2885b40c5ca0cb39f5aafea2ca215267af81f67b1f3598395e1f7b4b98fb85add7d260d53aa7d6720454809daabd390283214a8c04fd86be5fad5417c7256beb270d6528b611d57d9889792f6615ccc8b27e36de49960b2027c12915fa472bd15b233eae9026771be4459397016ebe5e7c03f0c9c24aa62936a98f09c37aabbcc001b55b1fad4729be3b708e70f893fd1901064c5863e444c38ecc8127c40fe573a412f154731587fb4ed173a112ab5ef727f9d35538a00280b099dce9aa990cbc3fb5ba0f224d637d26060c93dd768e4ce14ecdeff52d374e1bbb75b4e36f5c24bc2efd619896d4ae7ce89b3eebc96024c0f20643c8722b20570f52546f0b7950a8b1364041611a57f1cbf0473d1b4c0fb270c3eddcb7ec770990e738057e1e147c7cb222a4fa1d43159b00a5cb4bf8693f46e338c5342fb779dcf3774c47916c9b6378bb7024c46d3a9283db02f06f33e923194f377b60d3a3544df65d7fd0e864bdd2f5498a186d00c055a3266ae58df5324b5577ff8bc10e802587ce4b40224795634a8740f46ca4684513bfdfd058fb3dcacae59fd81328752a4dea349073bee3f8f6deb4ab49d07dc8e12f5c07c03e18dd9f3ed50a81cfaa34b7d76a0ca136800c7dc9d8e4d031dd83d350fdc5f1c381dfe9a4d50ce7a3d672497686e36417bf42c963ea4d57b4a1e8406a8d8366e48d90ca841f11d578707745642a92bee162bf53413193c4f56393fd6f3f16104b037e540467e4399ebb474911ae4e3f6bd8de3b8d78d465a0f965aa83a9a6915e1a8680173dcfc943b0b22e72a9c1e2ff91035c73e1ae8a391433927b4f98721926e27c24ebfd9ae433305de8ae18e4f7e58fba0a71711bc2462e6f58b52f62eedfdd188d82e837d84c695128c442c7feca7cf33bf9f3e0419c2ad2c0d0ce716cd3aa50d14590a1b0cc3f7a7faaf6edbe23f3dca06328618c47eb300aa2e70eaa9d3d9ef1fedc7c62f678001d00b73afedcb904064ab9402556bba36635d6009200524723e30f9e5f3ba0fe7f0dcdd7a71e917d20ce83385832477aed639ff46a6407b6bda8adcc1445c9ac5050012779d5d203e01c1a60a6ec1189e0c311baa8b4b7f80353c2545ed25d4e967bfb55d60502909177e51a4fab5f14bfafeb2f8e29b8c358c4c6e01126ae4909dfce62c05b7c1f26ebec4ca1eeffadf7e2de92d505d4dbce9f01f5898b78a29df49041334f7723ed3f33ef66d47a7d7934bddb65bbc35c61f6f87aaca98e33ed76d99bdf91028202aac5fdc2e8f2349d213d720ed20342275ba17dbd4513771a523d59d4e58f1a85a5b2db3444a7426aeeeee000c7732b580136dbb5da4e38bfeb9b4bcc8d8277191a6bdd3cc8999e7b029eac6d4a3230f3921bb7c05aee79eeb6582da5f55ae988284fb406944f60ce5f56c91571d9871d08e1abbd727021af7de75ed8636ae66b58e28e49ed26f90858103f40477500d8ea9dda0aeb93f8f3ed64584aa53281c0e823f421d2a5ae4c5c6dbed7a5eea7759e5f88e0b1e4c5aba30402eec0f31cad961c7b91f97718d69d36b2e05116003e48b154bd192463c88a91bff59469260d5253f7592d88d7d1b404eb44a1a37b9bc168d2aaae1d9c1bc76429b443e750c5465c9964024401dd840827b6562119bfd26419be851774ee6f042d03023e8733d5e5da81f0d79eb6b2d44680c761a4067340a70e64928ff083d3d6d580818dacc91cf911e43996fdef4e7a2b99961ff9f1524429a619c262bdca9d66ea3d6e2af7726d53fb2daf4aad27c4f140463c2f28ca0080361ebf1bc53d04ed095e79ea456a7df398b27ac4968c91fc05f25ce547c55584b1fd4409bf831f1c094b7b5b922ac320b68f0a2ed9fdf6589cec5664d086832fd2d124ac0a3414cd79231f7608d6a7bb282cd2294b976e76f677a0c55b6230b16ba5c778e7c4b098b254f61c48a96840dea31526ea453a64bd8c6c79cfa6b2d9b67c1f43dd09dae0474234e370dbb87e09c2dd3c06f6e2537d0730258c267dc0125b5de1abf6c873327558059c1f15f8ae330f57bd01e922e7ddfd1645cb7f65fa93758346f40795f7fb4ee34a52a77b88e21bb4ae5f3992a8ecf3749543c9a29018270dc78b2e1b2e2ba8cabfff252d2beab6f3a03fd97f7a3c64c9dc653fa2776247f18806fcaa806adbd1e1f40e452778799dfaa54ddc5034b68b1111204831d172666fe2491f8e7d1b774125021e1e506846a85bf0595e3a4f1d6749fb1e0f307db076f793fbb376748eb4848d277f339f8402c34996a6f0402867b4842a2b49dc5000aa7fd1d1ece309a7d9ac2de864be2f891714f80dc33de0ba12b443d4c797028b428fefa73f4d449db3d8857f54b87bb18be180defec7d342f9bc6a62cf7e803019d5b34699b4d641f7b877473b31eb285ed7298942b390c6f0dc3f2d020b99e97cf77d9c0deb5f7a4d24acfed27529983238a9396387004c1d0d559914fdd328d8138d8a09a239d13ea7cbe6a1e5bb15ef31744c47db7b2ed9adba3490c925f7cd32ebadf1703abfb6f7208a0618fac5ce87c41c34614f12890262e7b768fd61d18ade5dddd17f981a331481d8cf51a4ea0de2b5ae771cd9854eb837e0c3161135c2ea96bc65368fd4ade64bbe8b1ad83bf8e441efa5ad58b504b3363e4f64b107a052e520da8592d5a82cdca61e62dc929675d43ec22adf0d5e6e1b2c6e6da2a8331e43891ec01b8d437ad2eef660f0819b1cdc0da41dcb10e3ab569400b2bfc6596aa3fe74c0a9eab4d49734f8ba17ae80dc2af75f003872b9242d0ea419bfd8f7998e8f5efc3a3f31aae23228f5df23e1a4f9f887aaf62d16db191e16423363228ffb7e5707dbf48b0718664104ca1b3b8094ca2f2e505efeca17449391a1de5273f9945d778a44d25bed43e88627e0f02ac99b17b6062f1cf1c3ff896ffedd647fbf5b17bba1c9f48b44f37c175cab7423bb515266c351bcd32cb8e686dcc2f53c0e6e69370bfeb26a92eed46345faa54d16fb8631abbf87155893a00321d4e6895f1db18791570a3c3bafdc4a0a0ee400879babfb96c32de9fe4f0c7e5525b214f2efa6134fd11b7cce737306c9a2f181589296861a069b52ab409f6d68947d4e93408c58a2583852eef6180386095cf05af416dc753e04d01e63850954877052b91e0106e9e4a09188db2e3d20c4d0f55cbc70191eee8306627934b4385f0388d4473d255edeb2863fd199c7de24e4017eb3419a01986efdd686e6811eafce821a4990612618c635f5493fbbf078f7ebb6ad2524685673ff6de8ddd1f31f5e8c38a4ea82032acc1bc4492921a227869de3465b63c8af1f9da042d6a4ff6038fe2d5d8b33957b2da3751263fc761e474183e9d98800b9a8f70b6c14dc3088e6433e873635e892e0011b619e75d1a9a8f2cdb05cd400a3c9e1e3a49d3e2b94dd31ee691b3405c9d7afc2cd90b158630877b369fc7fa89e99436d8199844c9c8d983dcdc9265ac7fce701366b77a96188bf3e38edd51db71b6e812e5ad91b365c42113579a9a21d6ae1763cd661abeb0d44818b48d0044852bbbde748d0d553e3248e6b8c8b96626955e558ea3545d37bdf8678650846328a192a3094499e278f97ffe373fb84b66cf632cf310e2f9f7bf9796949d8e3df3ce3449962ef94e802866b15a96f639a01563196eebcf5d4c44874b04fe0af19f5e529da8b5c84c4a7720c4a4e376853a62803f147a0b02af0cdb84c8beb82943544e818a405dac88240d5d16163dcd305863ae3e23cbd30a3afee464d3c650584b3f0a4d18d433629584de57bfeae052f0ee56fcbe9e99fb8889330cfde95c2acf458a9547d845d9f16d61c91086e6b093c3231f4ef8ee1d9a483b3ff64e5e1dd458ab1498d5c9ffad7dcffc08f3c17e3471e5d7864d7ff46e3edbd31006cc007692082ab2b876e00003437ae98a12fb5113f30fe0273d6e54bb724e1a68231b514a684c652d9b3221f1002d107607e95690f42441a42fb27ea8c06bff93989868b69b7d89595aff235177a7033cd8460b5ce72d693a465ed5f32db2eb84de6a073df764b171bf95d989fb1d5aecf51a035b6b3a2598178c626355dd45fcfd7418cbefa7266408ead0b0758bdb20458ca2a9e17c4948ed2b448ee0b05c9ca40d2737f18b5d55c1bbcdc54d8d84057211148fd29c673a4d9d40c9ea95934adbd92cf51bc04bb5a129de5e61e745549c3661216cc95ca8bdbaf1300afa4a1b217520498471e25786535183bc9f9e807d5e2f8a719371b36f582b89829c3d122f609d6fbab9ba3f9b531254cf8f136da347fca26c134038e9fe5c37a20a747273a6312a2c8c54a9ef16f1309704b4c6e8f28c64b120c7fc4527250580de7febe7bed26976a2b5f50af3d391005b06216946b0cb83029848092f473b0504a747c10302ead0743abf7879a6bcacf66c51ab74c85dcc9ab80ea97c8e410f4ca2be1496ada764b0d40710110b609b94959063cdd744bfff8a205cc78267451319181314c1ec3f0f7698c91592f5e876a6953cba7040a5dd5abba1064319ca4c9776a5d164b2378765b385c4bd046ece0c19853e5a6b0a95cc4e64ad056327209f6f98f085e2abad270930e1c74f462137184c7ad9cf88a73db662c15235e79065eed8c89e3ad88a68a51505dd09e042871d65204ef36b7958543b23dc4661cd796f98738d8638b3ec8612da6bbd01b3915a23076a55497b8442c6895f2d708e5212e3bc4a377849f690fbf2a4f40189d1416a1c30b841fdf035e97832af641162d221dfd9b9f636ba0e280a338bb5ee8fb9421216f6fab09b782dcc34190bc65f906dfcbf31a932c85440ca6e8e6f20c2a9a76a27a2cba65403ba8ebacccc9a282e29cb8373c24858e51f7f19fa0f484ff15f1f70a819a84abdf69f09c0a8d4fb84ff43f867a4574e1a517b8f3f3724388d90a82dd0ec5d207d40e72812e2b3cb098e9d0a491330fad438355e7bee0240e4fc3b99675ff5f51434746fa700a2bddc2573b2cb5ae6fdfe7130869fc26c95d800ec5870d63fc5b54256cec89f738d62f7921569b4b72ffa7d19823d2da72215a6f994f950945c00", 0x2000, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004540)={0x78, 0x0, 0x6, {0x3ff, 0x200100, 0x0, {0x4, 0x8000000000000001, 0xfffffffffffffc01, 0x2000000000000, 0xf, 0x3ff, 0xaa62, 0x6, 0xbfb, 0x1000, 0x0, r3, r4, 0x3ff, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_io_uring_setup(0x214c, &(0x7f0000004740)={0x0, 0x50ab, 0x0, 0x2, 0xfd}, &(0x7f00000047c0)=<r5=>0x0, &(0x7f0000004800), &(0x7f0000004840))
syz_io_uring_setup(0xf00, &(0x7f0000004880)={0x0, 0x5961, 0x10000, 0x0, 0x51}, &(0x7f0000004900)=<r6=>0x0, &(0x7f0000004940)=<r7=>0x0, &(0x7f0000004980)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f00000049c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004a40)=[{&(0x7f0000004a80)=""/4096, 0x1000}, {0x0}], 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
syz_io_uring_submit(r5, r7, 0x0, &(0x7f0000005b00)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000005a80)={0x480, 0x10, 0x4}, &(0x7f0000005ac0)='./file0\x00', 0x18, 0x0, 0x23456})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000045c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, <r9=>0xee00}}, './file0\x00'})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$kcm(0x11, 0x200000000000002, 0x300)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000005b80)=@base={0x6, 0x4, 0x8, 0x100, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000005c00)={0x1, 0xb, &(0x7f0000005cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@map_fd={0x18, 0x1, 0x1, 0x0, r12}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x80000000}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000005d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000005d80)=r13, 0x4)
sendmsg$nl_generic(r10, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000005e40)={0x14, 0x26, 0x101, 0x70bda3, 0xfffffffc, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x8015}, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000004600)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
r15 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r16 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r16, &(0x7f0000005e80)={0x0, 0x0, &(0x7f0000005ec0)={&(0x7f0000005f00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0xc4}}, 0x0)
ptrace(0x10, r15)
ptrace$poke(0x5, r15, &(0x7f0000004680), 0x6)
r17 = fcntl$getown(0xffffffffffffffff, 0x9)
msgctl$IPC_SET(r0, 0x1, &(0x7f00000046c0)={{0x1, r3, r9, 0xee00, r14, 0x0, 0x9910}, 0x0, 0x0, 0x4a, 0x8, 0x5, 0x3ff, 0xc, 0xcb5a, 0x8, 0xee2c, r15, r17})
executing program 3:
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000400)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x6})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
syz_ublk_setup_io_uring(0x3b51, &(0x7f0000000000)={0x0, 0xcf7b, 0x20, 0x3, 0x1c9}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x4, 0x10, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000e13436fba139a76f000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b7"], 0x2c}}, 0x0)
mmap$IORING_OFF_SQES(0x0, 0x4, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000)
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2211080, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grouq_wd=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,dont_measure,seclabel,rootcontext=system_u,smackfsroot=-)((!,defcontext=user_u,\x00'], 0x0, 0x0, &(0x7f0000000440)="20bdf339850f2081fd293a10e25a4b9c20f3b64b317a7377b97a73eb824fb0f44c5d8ec341223d4e0bb833fc2dce8b2a32e6d43d12d5acfd88c74cdecd010cd7122629a51a79b4b2d8abc7e8634dbeda4f2ff453244aeb5da1663587e5d83631168e1aef1a86b0106de7c65e66971812a77c20fa6c34f178214d7665ceb0d457b19850378f36725f9644f75ad7fda669f39fded67ac7d8b85cb5f18c33e034edd4d8e775ed5be94ec5f8155fce61c5ad8e857f13059f4c7855becf3ef347b99c1cc89a0aafe573e284d83233a3060f23446f441ffe274000a484e6f8")
openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x404002, 0x81)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000340), 0x0}, 0x20)
syz_open_procfs(0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000680)={0x9, {"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", 0x1061}}, 0x1006)
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff}, 0x800)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000001f40))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001700)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
syz_mount_image$ext4(&(0x7f0000001800)='ext4\x00', &(0x7f0000001840)='./file2\x00', 0x28180bf, &(0x7f0000000580), 0xff, 0x52f, &(0x7f0000001f80)="$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")
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
executing program 8:
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000200)={0x2, 0x0, 0x2, 0x84800})
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000300)={0x3, 0x8, 0x7, 0x3, 0x2, [0x5, 0xfd24, 0x8, 0x4]})
r2 = syz_open_dev$video(&(0x7f0000000140), 0x101, 0xab02)
ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000180)={0xa, {0xf8000002, 0x4, 0x27, 0xfffffffa}})
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8810, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@dax_inode}]}, 0x1, 0xbf2, &(0x7f0000001e80)="$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")
pipe2(&(0x7f0000000280)={<r3=>0xffffffffffffffff}, 0x0)
splice(r3, &(0x7f00000002c0)=0x100000001, r3, 0x0, 0xa, 0x4)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200000, &(0x7f0000000040)='\x8f]\x80\xa4Y\xddr\x9a\a\xc5a\x1f\x8c\xed\x92\x85\x91\xc1\x00E\xdf\xd0\x9b\x01w\x8d\xd6\x90\xc9\xe2\xa2\x1e\xd5\x8f\xe3\xac\xbb\x05Z+\x97$\xf6\x14\xa5\x8f\xce\x9c\v\xe4\x99^h\x9e\xe6\xf0)/\xd4\xe8\xfc\xa5\x96|)^H(\x14\xb7C\x15p\x16\xe8\xe2\xe1)\xca\x89T\x9ff*\x13\x94\x8eh\xfe\xb6\xbaN\xf5i\x01,\xf7I\xc5\xaeL\xfc;\xee\xda\xb1\x9b\xc1\xcd\x0ep\xc4\xe0Dy\xf5+f\x02\xd2\xb8\x1a\xfb\xd1&\x93Q\x87\xbf \xa8MP\x14\xea\x0fI\xc3\xfc\xf8D\x1c+\xf2\x88\xe8w^\x89\xd7\xae\xd1IY\x1f#\xd3\x14\xcd\x14Y\x04\xac\t3C\x8f\xbc\x02i[\x8d+\xb04+U2VK\xd8\xa2\xd1\x02-\xef7\x0f\x19V\x19*\xcf\xcd`\x87\x9fRz\x86\xa5\xa2\xec\xf8')
r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "0fddbba9c4dc1060a974f59447920f35cb98c40f28b65df19728c4bca8e03b435fba5df5ca799607fd6cf7bebb89645da58f1b0eebc2cb7e03097f57bb786b36", 0x34}, 0x48, r4)
executing program 3:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/sockcreate\x00')
r1 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}, 0x1, 0x0, 0x0, 0x4040041}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000880)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/16, 0x10}, 0x81}], 0x1, 0x820b, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000940)=0x8, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000980)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c)
sendto$inet6(r3, &(0x7f00000009c0), 0x3000, 0x0, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000840)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
readlinkat(r0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)=""/72, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000003c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00')
pwritev(r6, &(0x7f0000000240)=[{&(0x7f0000000280)='0', 0x1}, {0x0, 0xa00}], 0x2, 0x0, 0x0)
renameat2(r6, &(0x7f00000002c0)='./mnt\x00', r0, &(0x7f0000000300)='./mnt\x00', 0x1)
sendmsg$NFT_BATCH(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a010400000000000000000200ffff540004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180fffffffd140001800c0001006e6f747261636b00040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}}, 0x0)
pipe2(&(0x7f0000000a00), 0x80000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000bc0)={&(0x7f0000510000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000117000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000083f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c4a000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68)
brk(0x20000001)
openat$zero(0xffffffffffffff9c, &(0x7f0000000c40), 0x80002, 0x0)
r7 = syz_io_uring_setup(0xf00, &(0x7f0000000c80)={0x0, 0x595f, 0x400, 0x0, 0x51}, &(0x7f0000000d00)=<r8=>0x0, &(0x7f0000000d40)=<r9=>0x0, &(0x7f0000000d80)=<r10=>0x0)
syz_io_uring_submit(r8, r9, r10, &(0x7f0000000dc0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000000e40)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r7, 0x7c65, 0xa334, 0x1, 0x0, 0x0)
executing program 8:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000d80), 0x82084, 0x0)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000dc0)={0x1, 0x0, 0x2, 0x9d9, 0x87, "5c71060f000000000100020000002000000400", 0x0, 0x3})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000e00)=0x2)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200ffff48000480440001800b000100657874686472000034000280050002009400000008000340000000f508000440000000010800064000000001080001400000001308000540000000010900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x50000)
r3 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x800, &(0x7f00000004c0), 0x26, 0x75d, &(0x7f0000000500)="$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")
r4 = openat(r3, &(0x7f0000000c80)='./file0\x00', 0x0, 0x2)
ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000cc0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000d40)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800010301000d00000000000a410000ff0300060000000014000100fe"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, 0xffffffffffffffff)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x501480, 0xa, 0x20}, 0x18)
openat(r6, &(0x7f00000001c0)='./file0\x00', 0x448100, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000d80), 0x82084, 0x0) (async)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000dc0)={0x1, 0x0, 0x2, 0x9d9, 0x87, "5c71060f000000000100020000002000000400", 0x0, 0x3}) (async)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000e00)=0x2) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200ffff48000480440001800b000100657874686472000034000280050002009400000008000340000000f508000440000000010800064000000001080001400000001308000540000000010900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async)
syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x50000) (async)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x800, &(0x7f00000004c0), 0x26, 0x75d, &(0x7f0000000500)="$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") (async)
openat(r3, &(0x7f0000000c80)='./file0\x00', 0x0, 0x2) (async)
ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000cc0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000d40)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800010301000d00000000000a410000ff0300060000000014000100fe"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, 0xffffffffffffffff) (async)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x501480, 0xa, 0x20}, 0x18) (async)
openat(r6, &(0x7f00000001c0)='./file0\x00', 0x448100, 0x1) (async)
executing program 8:
r0 = socket$netlink(0x10, 0x3, 0x10) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000239000/0x1000)=nil)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000b40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000c40), 0x366, 0x10, &(0x7f0000000c80), 0x1dd}, 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000d00)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="05"], 0x10)
close(r4) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{r5}, &(0x7f0000000dc0), &(0x7f0000000e00)=r4}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{r5}, &(0x7f0000000e80), &(0x7f0000000ec0)=r6}, 0x20)
r8 = syz_mount_image$ext4(&(0x7f0000000f00)='ext4\x00', &(0x7f0000000f40)='./bus\x00', 0x321081a, &(0x7f0000000f80)={[{@acl}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000fc0)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0xc0406618, &(0x7f0000001440)={@desc={0x1, 0x0, @desc2}}) (async)
ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000340)={<r9=>0xffffffffffffffff})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="100000000b0000fb600000000000225d0000d5bc7c850d44bec304c40b70239500080000000000180000000200a0cb072c4f2739b809c800"/65, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x9e, &(0x7f0000000400)=""/158, 0x41100, 0x50, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xe, 0x4, 0x69}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x5, 0x3, 0xa, 0x4}], 0x10, 0x400}, 0x94)
r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680), 0x4)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0xc3b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x14}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r10}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r11}]}]}, 0x4c}}, 0x40080c0)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
unshare(0x400)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2})
executing program 1:
listen(0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000a40)=[{{&(0x7f0000000dc0)={0xa, 0x0, 0x400000, @private2}, 0x1c, &(0x7f0000001f00)=[{&(0x7f0000001f40)="9220", 0x2}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_EVENT(r1, 0x84, 0x7f, &(0x7f0000001f80)={0x0, 0x800a}, &(0x7f0000001fc0)=0x8)
connect$unix(r0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000b00)={0x2, 0x4e20, @multicast1}, 0x10)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e00, 0x400, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x2}, 0x1c)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x41}, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x2a5, 0xfffffffffffffffd}, {0x0, 0x1, 0xcc}, {0xf6}, 0x70bd2c, 0x0, 0xa, 0x1, 0x9}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "6373d35c068802b64119bede480ee04af6f4885d384d5f660fe922"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x8000, @local}, 0x1c)
connect$inet(r2, &(0x7f0000000b40)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0), 0x1, 0x4bc, &(0x7f0000000500)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00), &(0x7f0000000a40)=ANY=[], 0x361, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0), &(0x7f0000000d80), 0x2, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000080)={0x8d, 0x100000, 0xa0000, {r6}}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000bc0)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xb0b, 0x49, 0x66c1, 0x9, 0x31ba, 0x7207}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0x400, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r8, {}, {0xfff2, 0x2}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x9, 0x9, 0xd, 0x8000, 0xfffffffe, 0x0, 0x100, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c5}, 0xc091)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='cmdline\x00')
exit(0xffff)
preadv(r9, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76)
sendmsg$inet(r2, &(0x7f0000000e00)={0x0, 0x14, &(0x7f0000000e40)=[{&(0x7f0000000e80)=' ', 0xffffff1f}], 0x1}, 0x0)
executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0xffff20a9, 0x3}]}, 0xc, 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'batadv_slave_1\x00', &(0x7f0000002fc0)=@ethtool_stats={0x4b, 0xf}})
executing program 3:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x185e0b12a06f626e}, 0xc)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000240)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)="9c", 0x1}], 0x1}}], 0x1, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000340)=@assoc_value={<r3=>0x0}, &(0x7f0000000380)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000003c0)={r3, 0x9}, 0x8)
r4 = getpgid(0x0)
ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000580)={&(0x7f0000000500)=""/89, 0x59})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='cmdline\x00')
exit(0xffff)
preadv(r5, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000400)={0x7, 0x8, 0x1f, 0x0, r3}, &(0x7f0000000440)=0x10)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x7, 0x4)
r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000100)={0x0, @win={{0x0, 0x900, 0x9, 0x7}, 0x4, 0xd4, 0x0, 0x8a7, 0x0, 0x9}})
r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xe1, &(0x7f00000004c0)={0x0, 0x3, 0x1, 0x2}, 0x8, 0x200, 0x8, 0x0, 0x0, 0x8000, 0x0})
executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x320, 0x168, 0x10, 0x0, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x128, 0x150, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x5, 0x10000, 0x80000001, 0x82}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x3cd}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) (async)
r1 = getpid()
syz_clone3(&(0x7f0000000500)={0x124000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r1], 0x1}, 0x58)
executing program 0:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x8)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0xd1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x5}}, './file0\x00'})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r3=>0x0})
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00')
syz_fuse_handle_req(r4, &(0x7f0000000280)="f773091228a43a58c864f1e0366b07de21fe64fbd0bf85a894f8d30ff6cc5256c4d3abd726c119dbebd0ddca6ad62fdbc55f46668ec0858ba96bf6733f0be147e9108ebf89278ca74e07fed107889459c0a5e30616db71c6973818d14e3571c410aef47e6e54ba02e48ec733ebc921795a1f431faeecbc65696ffb9e08760f45650f650d24af651d9986b956d8dd66017f17012f2358b5f69dd63f9aa5fad2ab7ee6df7c99f0b5601e1dab2ed5ca6aa237c52a838d7d51293628dde608fc4ec691b6e2023ff6a6813c505fc81bd0a0de800a5bd701a401ed07139dfa917e524c7d8fd47094122e9acb0382682d0b2adc54ab61c2d9aac6b5b0d50623187e31ca089585dab35411759db09bc44178011883cd0d5ab3fc6f8be3d0e71f083fb911a229995801eeab83581aa5bde0db85ff5c77aa311fdc9f9b4b4de0a96d371b6371ace3923e5557c7e911f522e132bae799ec6d11a43ff7420d4833d306f261ab6636b1f7d250829700456e3aa69bdfa28f24acd27b4df16cf417a7bbb852fe7b50e3841708110ab82af1e1145c542afb83cd7b542c6e310a86cdb76d492955312ae6665c95f36a0683bd12a394d6a45a0f38fcde7d665c4afbb329f3486e1b21af321b3f933d585d885485e6d9448b35e0f8d825365ce26af6cb8fb7466b66491e34b5313019beb3b2934b369daaa16b73734d3f787dcbe3115a3da3804aca82335ac9b20823728a6ee0d292dbcebb103ecdec0d27ae3a3ad5e0040cb78abfddfe16f98397c5f1f910372454722a612a0cc91ea8f709544f22c4e3bd70840745638d83b74197c0b22331e3b107af26097a37c8dd2b91e5156af1a33e06846eb15aa2fe95b6df98bfa7fe28693e0ed082aacb3181b657f81790d4556506f8f2a3753bfbd2949429dc3cd1e11291e82dc3db974a13d88d9cb4242165201f3d9b130c128d057bb9167f12859fbef6de8216d70eec7d3706b9013f9b8f61d8059ab50904b66a32376840d8c3e714bd6ae87640f352ca2b4fa2c1cd83f28d5de889f1454605fdd49c7a7cf1af226895ad6ce6612063d88ae60f5b8af22ef1306f55205152f0e72f2edee901bd89136eebed01475edd572f5a4da8b34bc6db8f29944cc720cf2b03cd2f768a34a81fdd58693fe859edfb2799b3f90cae32b6d2c577dfb9e03ab2bb25a41f53a42c11c89a615bf1c44f5c61084c70882a55fb3039792e9fff127b323c0783c506b6e4b7079cf27f67fdb191256b7c908e1e30a8f72072ac4323337062da5132369135408bf74e1b1f6c1bae332f75291d7a4f4aad4b9f70be298868305486c519434652da2535ff7924324472fb23c84558a5b1578ae94c8805becdb99eba47add535fcb7a72ad9b5d631b824a35d58807ea066bbe53859c50b5adb3508ccb3ae974ee187e40dbfc09a326b06a6004aa81c6c91eadf97ccc77cf9ccf4ed92199d95c2c8d5c965594e306d4e8b78d99d2ab0d282890c9d34639d719488b8d5fd3832a01f1a5f75449f460688e63825421aecef8a43a187739d8b1e14e54c658d57e4cf607430ea530720b3308609b57a9148ad5b921d94b6bb775880d492bb515bbd30caeb4ab8fc8b0c392a6c76dc63ca136d6e76e49a0878ea9577831e7bb3b4e3915b09222d3ccbec1b3dc4b1fd1515f302ba48d15adb9fd7aeb26fe553a60dcf82ff70b6c5d7389c54194e46bf7768584acbc18c7fd7fe0fdb11dd32a322f0ae97b481da34b47d0abc16c6d12f8e9d12db2dee5a1d66d5876bc6e100e02f3a921088947fc1d0a4d8e4e878e92cee18ceb78c7d9bf0204cc515eb8185b985e967134a1400b6a5b945b3ff86f62c2da8fe6dc8628ad36910b863a4b7cc519d853e6e3c6aff4d91862dc8c1364a8559f0c58f88a90ca4bc4a9d1aa2026229d46482819df72902a8d77615042340d758bb49153eb695823d43ef50e10e700a7303a4b798499464f39412a7b2cd7c460717364c595f3711d9ccb710075ae301100ce9f0c5d8b6ccf4f673112e2a7c2b29e56ab556d3e9dc0e777da840e1e304a24227bc9d1ba3c31f2bfc39b6ffe06e7dfc08ffbb799f56c5e9b4ce9120d10bc52d4d105167b30be7d4afa0007c59c3324121568fd4f48778d7b17a1ef117036520d25367253d763dd2f1369ef6562afeaa89dcbdd433ef80f92c41143cfeaf46325f2191b1b29b6a457e0a88e7a54dfede8e186ad4fd4d3eab77136d9e403dda03ddfb24708d648840427087481424d21b25a52922a359129ce109fec903fd33f03ea6176cb7cb64567d08204902acd1f1d0146c7c8ef5ca24d04209f2b55974ed7e11eb081beed06eb03ddb5ae80e3424d52741a5e7c8c89006a62f6ba37a7e39b75566b8d57cb11fd23ff73f7f251bfcfb74336760296a801488f77a8f0a830eb4ca2987be3ce42e2aad2f4a975d95eaf0834fbab05a7e97837c0d49ba31c93b2cd3ea05319ce1d223df3a08fc35d6d99bbc863602bc84d26926241ff70d7715d27d60b201315264f2ee3ed0ee2d1959228d9b388019151580a4a68449fd37cd2c894d749a0a281c4e458f5bfc76189e7c2ae21e318a99792090e7bb8bc73ead76439a4408b2ca49678ed93ececfdaedde0bea7f8df33910ab08518829435e642bad3aa9e373fdeb80c981e8f6f11602a8cb23b25dd718296c698aa602889638041b286c3234ae10d7d0c8ff1fe301735a467475db85fe88d155f4a8ac86937392129141f2784ff559c7dc79f0fc6a43c940fe735d91c74e3975415969548a9d7e996b5d6a0801e09519ab3852e8c5cc23f380be09fb7fd37e0cbc9f540a613aa289cce31fa3ee913e364a8a8fc1490087863222160b6899e32a391e090d41bfc961943d03f7b2f8e49750a04a20f2e2ca2951498e0fa8cf0d33d022d490704015c0a83ffb9f44114e37a386f2c7f940cce802edca5ff4ddeae0666167c2a466aecd919629185f491a210d407ebd09600406178ecc818a7cc4867ff14234efad41453027f6cbc62b4649fea7b227ede841e9816d98636c2a2c950680983d2375233a7dd64dc71c9733f5502ff4016724506ff026ba71df2623446f083df9e6df6e7fb701da63c640f8599e09cd7ea1b818bc34349a051430fe5791df7724eda9eae0adb53ec1e844565abe44063a465bb2ea15fa53342cd1229f0b6092c7d544dd0ffb9cadda6930115a66a5ae892f3661e32eb3ace734f4386da1ed040dfb0155ee3f079ec72a3bd8da69b943250a3d33fdc8f4666d77c680db12e0aacd2ea7adf4b00f86733ed27d3c7d677f6a7b60c3657a599a7a36c88e5c805eb7bc022613b6ed3489ac3217bc25e862973d9b3f2235049452aeeac96f3e40044df6d2dbde64b819bf1ee67c6a03566e1e5c8d123adc7eb0410be047cfecce48a5eaf41a718f5d1b78c17fbb6fbcf003f6b1dba0a00558ae60e6413c271bb0dbf733aedd68eab4f8d884bb46b5fd833dd718e6c4ea58ff44f4137372494ae1c74d2ce3cd66526518a798f095fa804088d18d2695740e930b8d57eb55ade001c1cc9c734b77da57482e024503a1ea9e2a43943a308b5285d622ab623b860603122b41fcc249f224212cfbdc8dbc15e791ea6f51c44154619c98661664b11a34d20ecec388d69f5b32fc674d0ddf2b1365c8709a529b2eb3ba0a0547bdde3adcd272e0a41de9904999fd890b75fed8e60f1f00bc8aac46d8043ff2451541f644f270d9fc65a0b772078b05a6ce60c0df8b2540d89d052fae472867edf3b03a252bfe8e9ca3d2e31c7950851d2e7e7273c0109f2ac002747d277b6c9e6a9bd51d57c59b178a6e329c81c7bf2f5c5d345b2e990093b2e47f79807a62017fcd34efc671c7c6270a1a80f60fba3fbabb48f294ee3b1425b6e8c0fe7b14c31c2b0100d8c5f50349cff1e4e0d3aaee1f4afe10f5c234c1c4ba670111ba0d29694811f3dc242a73a9b042535f3ae8ec5b94240fd091cdfa157e7d27bf26412cdbe54ef55eb5d7183ca5ef0a9f5e81aa6dbf705e3a0d542a7573ec99ae67293970aceb8ca52c9eb5786196cb61947436581745df8a5ca11706001844f581317d43e29fc6eb1d1b011278eb4d77cc6a2e1defabaf87177a162f6269abd97503cc26aa73a18a5954e88692b63e34ba673a6b302ea2a59679ef60094c3db6f3874dab8affd12a7d12c53e77efa807d3ad845b908438b59461da39c072c6ef2fb1889f9a9e39a9256bdc71179c98399e60df6b8224a30e22ffd9010488cbc101ef020ea78a90977fe35586b4140339bffbcf32d81b04f789a195a44f289f44c714e6163afada072871122aaf6f60da967554de66cc4ecbf50aef5d02af874873ae5a36a576eb5dfd749b6168e395ce5817d6275b25d6c6ecdc6d8c4a39fa98f749d6584ec0312bd781a0a14fca35c8b0ac2cdb5a4b15d03966ce40cae66ded0cf7afbc5f1a580bcc596360f9253a70f05ebf3a58ca30b05b6edf4367d988e6dde2cedf37237ebd56da02edcebd9ba841c210ab52bdd869fbf3a783b44670483a012419a50c0114863a97d9f152e63a3ffffc4c83710ef02a3a9c718450f4e8f918c2c551d477a88e91c67bf1337a52f4d680e9607a295feafe09e1a0c5e3c1a18c5390a6a84fa19dbfa2abe421021b471f1e80811a4ba036a9a457fa323b7fa65e666a08f673ca92a02c03d6eba96604f770444b96297307bc23f6a928f0da3d97f522125592c092bb32f97882a59603b268167e970bda981299524929e111e31b3301285cfd9bbbf0263d7e2e19cd42e56920565eb5f45f99455b0851dcefd6d91575ec4e273afaad0f7e831d46a8d5f95244e06febe9d9c76fe2de20e561b11d39a4884d29e68773aa85327279e667884f8d4f965e8b12815076da686c02d17a32bc97de630508b06b091a7fa705bd705a3b5e85975db69d4198f23547686cbd42dfeb495d2c0c2c4c155dd1c8c0522836b271015c8f23a5c129e49c0def56c0fd2a5d010583b4d2849b97dffa9d28dbf783be484de51b8c1facf821d8f6a295caa97f5245c8b3fbe71b47a3390f2c2ab9f6ee41ab082c6ddaed769ddbd9188c970be2843f4fdfe32d3b9242628e3a1d037746b564b4bf6cbc37824444a78605c010a00f2f8abded984e664c63a10cb24e0c1d2d53873d519475651d73e1e228fba31b3165de6572c3f4ca692b73652bb77c423a191d45e90b122e0a66b956302ff7bacccce85e7428d8c574ef3d78884495c95f1416c3f500f5be2c0a70303ee19d4e81c1360db322a0400f311caffe568d07adaf9d6bd6f136f0886db4fc6c2cb956b79064b61afe3abd2ca638c62bf89ba91cfab89aeb6fb4eee6b8a6a321076ed5efbeb369259390e780454eb1666c4fe8366b00765b5639e20827349f4df49c90bf5dd320b36510fedf5c18f59ee14e1a8e436f02506d6c6c3c8c3328eff00bcb66ea3a99f2e9cb20f0efcfb09876f7860ce4294de8c5ce007604031a8dadaa20955701736218a159845f8cc7a485412bebaf653462459380a2cb0900721d570391f8e62869546a610e8478d9536d473945a46d9a89686d1dba43690a5a4dcad2d4fbacd877e38495d4a1696bbf46ae8fc6a764faf7c67101a785d259ac8a6df1c7fbd006e9327e24d8fa4c569a5e37fc047521cf520e2bf11dff07f6c47442db2fe7a94a7b557454363043ad4fb00d2842a16a2b25fcdd5aa38d585600cf81e9d202822c4571a12668cc202ef3af5704337bd134b99c6df8538316c9e423032e4c3b73b1e26571b9890ee5a5f9885321281c1371614b57464647c8d5387dcc9878ba4f9c4f65cb3d34fcde5b5fa1610c28f50ddf5a1ccd682ddf4590adc3d3f98b8f98fcd1845dadfb142dde12116bf36d7b738d930e10c3317a0222914e059370b463611c7e8d37bab1f834ba690c98af9924540256cb073ce89d05715e50cb79948451c8c4fbb07f497e860ed293803689ba1895af65c8d97c276e2cd0e7bdbe50655293462dbe64499184a7b8a89a454e38219b5e979c98badc75513d7a6862e2db939347d9941d906432ae41b67df54c2c92568d847fbaef8773dd466bdaf52bffde53fdc2514ae006e19a9599e0fde9c5772c3b30ce30d8fd5e0f91fdd8c66a8884575adc7d2970321520722ab1ddeaa64aa21855f9263d0b51d2b2df0ab28cd32d709c0984ed7f0ef4ced427e99230553a0b0453b1f6daa0ff63cd7750cbdb5f3373ea044ead7c91acfcfdac09648c06f4520a6766d530b37ad2aea22b50419b26f3a40df01f4970a104df6893d6e0b6b3cf88eac9c3edd9e724c5357283e933173dce77bbf70c99367b68e55cb0a3e16d1696c571b483640c33b9f229d837fd1d303608ea286643ccf46dfbd26d2484c79827c6cf896e4904a1febc39932c76a17606c0a62010932fe29877c00dcf7d65fb006594d8869bbe7f78138a78a125a475da225920235b47ba8bd631815926f7a5c4ff69d61c39b26b078760dbceefaea9aa5f08c97d2e97bd478d014ee739db93824bfa7d3167f789624e5a98873422a0176c8b2a69eb5a01dfdb22ac1cb7f9294df6ac1245d50ec44fbdfaeb145c9bacad2abc7e160993afbad2abcb9c1019cfe0e358d1c44676cf002cf844d83de959c3c3f074bad5ac0326d0ca4864b2fd724beb5338e81fa81fd178e14e267c06189ac51fc6a248398986d25d6791c98d330b37a59b3d9c46f94e6170ec499fb3f27443c185e261761d9fac5fa44bc4912c41f93a642b89d51afa016c87d086a145255e808082a2036ead976bd2b78079f8410dfd8fbd15048e3264f15491204529f6b0e5dd560caa9113f9491433b9ba54dba2fcd648928717a1499582e6acba3dd28364b368a1e16b13a2cdaf13ef8b0d4046f8c2a5f280d538b0efe3297bcc226c17688be16315383fe043a7c51a8bb02497277bb1dcc9a16db9d04dabfb0bf6eb9f408d18266fa45d2fbbe3b18b89d6dc7c5b947b741925ac93991554216773ac5e0dc903d966e8fab10ae2eb22e002aebdea2d800ba75fe33082561b9222997bcfd8d246dcee7c46ba0a12a361880b6c4bbcf966a2ac0600d69d39c6c43c783859e5212dea9944a658c6fcf33df2be59da18f1385d3425bfcafda04071b83539311884d4cc8db5838dd84c3d8355292fee226e5a69c6c9a31f1b5406cebd486ffd050928f3916d748f159436fe37dbef68656842624063833cd1811151e9f05dc5ca63191587f51274b6ba07ad44e104a20dd2fc6d43e0274c35f926b56591cee7670856d5d5194df8bdbf608f77cd8701f0ef26a0e38e4cca58e4cc699065d27eb74bd6f89755779f3b2a73a3a0d0f655755dc7cb91772bbe0b89d360353335e545d8c3133260b2ade1814e2fb4e9bea7db3e30fb62c936544a91170ec2f86e3ae75319da0d873a05dc9f0e14bc709028e11da854a03d3941a51e6f3e0d363528c9d203fa5166d9aba23a49df941d5c902aaa68a3b99a709e9d9e3adc96b581494fd2c7e4605af5891261533ee403218c6901a37dec5e2d65dcfec9449cefef4eb4c4b793f34c9b0187ac1e9302c880149843a66feddfcfe47c5e33eaf1ab1eb0ed48cab980df0fe3e11c46a27d2be9972af5ecef3081f77ffb8640a8f3694085228f7400dbf177931fed7a9fada79fcb76251e5b64087e3e4d4fe0a5b86d7e6ddf47fcd131f68796de8c9e86bd6b08cf54ffdd5e10389e0d2122d72de173535a09defea837a519f96e1e795e6e767a2ea7ebcb44e96a11a2910bfc1b5221012732bca14534a2a97afb0faca2bee78f96b59930e27b7b410b53889a190ba70fd1b5fa4418f8fe6df52457a9f814eab291bd45471c20fdf973c0f75bb052417b69592e83cf8cb34b7b8189c01ade45736c77cfde6f44448b78e02ef376d75fd2f95fb0dd91f9321837777f5f514f083bab481b66639af323383a4d715a0c3a216536c52d3fb3933895e1709b25a84a8637a125a5fede40a90d84218efed8b65c021bffc279a4b30fd0cb390a95d1225862f37df93bc97f1192e725bc38e81ca4a4d59f18afc9d89793d3834e1781a8d5e4d521aa3c34b4335817f0dd88771a31d3336e14645323ad54c728cf1b0fe515602c064b41885ff14ff394d4deef3c5de136fec1a05e3662cf61f29a74e9da23f116585d85d3806d015fc8783c08916546e18c92c737f31a7d35c72b3bea01fd852e7dc6d68f24bc787ef7b7df2c4acff86981597a7dd2aadbf40e26109a10e856a78929e698c308960d999783134d7f5abf90a9ecf67e496818ee42afe66888b41707047ecf3374be56e6be6d878531057d4b16b7ca749ec672842c057868ca4c0f9e69e6d92432d6331c4c32db2a93d50a690a0659d4c9bc6fd75f7201f943c603bf7caed8d218ebcf947ea685c0710c26aa11ec886480983e06b9be0168313de87b0e068f98bd14f2066e3fc3a058c32ca0da2a1b449814755e935ab360b15bc91f5d44e54ba2a8db07d1c3854f6b38efa006263300f2113c6d3481868e08d406545a25a8dc75b01e429853e26747023913298e7b5b174c8dfd4e36a81061ba46beeaa200d6003b9f0cf50caf3d5b06632d25fe7ba91d2a97f7562555a67876e334c642e48e753ce6f12a78329c381a1349cf5d89413d04a6b93c566aa2e335f4f0732567388a9df0b3084d57f6393eaf5c20fd7c3c29981500dfd3573a16ee4bc56836b5c3e75ebdce347e46f3d1247a936df69a259fb35ff4372b774f960aa4e8d84e4ae54caaea634d37d2d4f3a276e15176e1f00a906b2fe6ceaec16cba278d0eacdfac9dbbe5af60c5f923ce670315bbc29ac72e9f848d2c168949d7fae8d19fb86ac5511c36035c6c101063cd5b8b9902f8f51b6de2e59da3e5ddb25eb6e9dcd0a64492da36f8a61c9e2b33dd731f0423fd407048346d5a19fbb84c1d23e34f5e43afb32f3c6b85c550dae394285b233ec5ae2ac8646e2804f2c59e870caf6fae5d6df810bf6bd64562b288af75a5d42478475dd72e81651453558e4f7370cea3def6439ccc1ff644e7d0e9c5c286b8aa1881b5bf641ceef24f557b68bb7532af2139b5a890cddf0b1e26328070a43fe509609fdc6de4dfcf8f2f4a79ada37a05b9a2bcac4df7774a79f6aa569b4dd4cfcd944d64982c13349f5a880baa7b5f20aa55af6077299c6d53e0c6ea063d45d8217d72104012b5d82ec46fde056dfc94e6cc9d61bbd1bf08401d1ee163f3d7f88d3481c0f395765e6653d6678dd73a71d411e0ea02608b226357ead909c8d5643527dcd1e0f0b7a785cf691b59812593bcba54624fa2ad1db9547b78bdfe0d6ba2dbc3298dd0c539260235adb385a00989685705cf3631ae545dfd8e2813d5a2ae507f357ef3ed5dd46a868e04cfca7d01edf77c19c6d4477b9a57c7629dff4afef542d19a1b559e55488a3083ad29b98019bc54cc59299e30aa5cdf96e073ae593f644ca0e7f334b1979d16b436e624747e9c86cd985d126bc7495dc27d010347f7a76266894de2ec5d2c9e460e723b0857313e17a17a6a2ad9983867cb78dc5dd3eec56056fcf4a76acf11af6e74fa9c08dc30df7590fccc00e8e972736397ba8680fd56f2fd3758d628c3c93c4222ded9de6b2341cd49325af64d48de4e1c62dea24b19e82f3ae3cf1212671774b510d2e2c18141b5b0ca54376d311443bf5bea59d9f07cb83767904e644a5cb77830f4f7f92de93dd6498ad091384d8899fea4d539ea6dd9178b07bcb47704e37ce6412ab52e24108c890848f9ae08f3c7bd72362cea73dfd0ffc8b77baab1fb43f9b2247f3c20e1a67839ddb28ba7ebef67abe121c3f55d1b63cf32698e068ed11b514f23b8762d55e6394613bb895b5f6bd256ca0732acb067f916bdce9120dffa8a9473815ccd35b3d622ee25ffb98bbdbd17955a0694cac0a64254ae997a9a15137b7f923f611a1adaea3fb6ef547d5a3be44a14be44202b1679968ded791d3a7632cdf4cd3c762d022cc3109e0b10b62b3e779836756ca3bb65a1c8a7fff871113f1975b556831aaaba1850acf0953383e223d3371ae4753a323dda2ea9298cf94c15abb084f8548672b257225544adb2b5eb8fa348a32a20f15d6873bf5dabde8fd89a76903d6f75e0c57c4d6918a3c3120ba5e5cb955cf224a17bd49bb08212d585ce979199247a40757ab81d9e1fbddbb14f015908a9aee690382cb07557beb1b157f5a3b279615d5b7c64a83d229a87cd16a6d401c06dc84ae286075c4d634e6f91dc7a284bbfc1795acedb1fd43c5c2e8ed6fa237e3d06a69b4fb83aa47a12e4ef83a5c5741d85d8342247d4d979601b66867313b1b8f19f769d13c9fbf6c1b2e272d0b0e875743c138ef0c014e1d8985642b029d35aa073d283da1367e869561913a1a0463cf3cc6c41835dcb60d69f6f71aafeede9bc6987c4a68c9e0fb3c1986433e6e45d23a5b03ec664b00cf6a207a8e7dccf7d493bee9a44331e8c1ed92d5cec7afd206d3a3cb78f213b4d2aa8c1c9b0730d818747ddf1027aeb8684944c5b9696ea935f55b5be94f69bdcecc50186cff82a73de8bd231314d9217b6089b8cd8a292793f1fdec1c5af1a2df89c1e300d2fb93516d56060e08f7e4c50b5f227325d0908677653d64dc5cf838f39e271ad79f0033b6b2a5611d5d1f9bb984e6f7d735c5bf0924d873e20e5869bd6d94d9f0994a78614dec3f36325299d189293dc5a4df8cbad29d1fd7f9b51c1c9e48e2238aaff3243cd346deb4ba8545af524776300f648c6728b0f97d17f7ec45daddd62478890a166e7db997047df69ded08cc4d9d8297259dc4100c88359c880dc855ffd5ef3b0922a5b00dae3daeb70441e15dffb415adafaaafb5f5c03b610a3c9903662c236e23baf01337a669f5e174cca1ec79ad7f3cd8635fdcea958cb67400bd01dd03a845fe820f0e7f19776867f247e9c2536ad2776de00480246ace33002c284d7a8929d1e708da9059212ae6d7da49afb9222c97983529158f69bbdbd8f502daae24aef87d0d8a4085dd0740ad1f33178b52447f43192acab0b9aa777262142ec29befefc95de9637f3cb7dff186af2020378870015feadf7b4bf66959cc81543ae33312e4ae3e9c152a65eb76df86b788d11a8534227a8d7e330ef48f5a1069ce4152bc6b311e4636d480272527fcc60c5c3aebbb513d06246ef52e33e7cca789f106ca53df689353c3a518c6dd4719a073f83ea70e1b37c312d216ef26f806f13ddb40e12e3c8b31ccab1440fcd2a2f2f7766997a610a1ad51108163ab4da30219c9a5a2545b19041bdff4e2569f3c281784ac3982de68af9405d634ea1c8d814d0f15b946a1e2130a2995e2d2330be135f21bf5abeb851c65cc3227aff2ce2d88325436409d725a5523253a722af8360a0dee622adc4690ae49f6c3445d2bc4ae75595874849b54798724a0a9f6161caeb83ad17c2d7325524d9acb94e80c7626458167e624f62e9dbf2c49ea52f8c978481f6fdce7222a4c353d8a77034d7a3e3237d253ce3402553ae63a4519298e96b534bab3aadba3dbae70c07fa06e03f89b711e1deb0e9f4dacbad30374777a2710dec408fb8531acb5d89376c07b5673cac6e361935", 0x2000, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lseek(r4, 0xffffffffffffffff, 0x1)
ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f00000000c0)={0x28, 0x4, r3, 0x0, 0x6, 0x2})
executing program 1:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/unix\x00') (async)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/unix\x00')
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x2208810, &(0x7f0000000b00)={[{@auto_da_alloc}, {@usrquota}, {@nodioread_nolock}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}, {@grpjquota}]}, 0xfe, 0x572, &(0x7f0000000380)="$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")
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) (async)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10)
bind$inet6(r1, &(0x7f0000000b80)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b)
syz_emit_ethernet(0x6e, &(0x7f0000000bc0)={@broadcast, @random="b4cdded7d4e2", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @private1, @mcast2, {[], @time_exceed={0x4, 0x2, 0x0, 0x7, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @private2, @rand_addr=' \x01\x00', [@dstopts={0x84}]}}}}}}}, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x0)
r2 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x9c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x20000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8, 0x8000}, {0xc, 0x2, 0x5, 0xfffc, 0x44, 0x8}, 0x78, 0xfffffffe, 0x6}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xc}}]}, 0x9c}}, 0x24040084)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000340)={'bond0\x00', 0x2}) (async)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000340)={'bond0\x00', 0x2})
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f00000009c0)=[{{&(0x7f0000000a00)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000a80)="92", 0x1}], 0x1}}], 0x1, 0x20000800)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000ac0)={0xec, 0x3, 0x3, 0x3, 0xbd, 0x3, 0x4, 0x4, 0x5, 0x2, 0xa0, 0x1f, 0x2, 0x4}, 0xe)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4)
write(r0, 0x0, 0x0)
executing program 0:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000380)='./bus\x00', 0x800804, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x275, &(0x7f00000003c0)="$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")
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000009c0)="7638b66a65585578f830e9000000ba", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x101042, 0x15)
pwrite64(r3, &(0x7f0000000a40)='2', 0xfdef, 0xc00)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a80)={<r4=>0xffffffffffffffff})
pipe2(0x0, 0x80000)
write(r4, &(0x7f0000000ac0), 0xffffff4a)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2a, &(0x7f0000000640)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000680)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
close(r6)
pipe2$watch_queue(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
sendfile(r8, r7, 0x0, 0x0)
executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000100000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x69f, r1}, 0x38) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000140)=0x10) (async)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040f0400040408"], 0x7) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x400, @private2, 0x4}}, 0x5b, 0x7fff}, 0x90)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x9, r1}, 0x38) (async)
sendmsg$nl_generic(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4) (async)
recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000d40)=""/4081, 0xe5c}, {&(0x7f0000001d40)=""/36, 0x24}, {&(0x7f0000001dc0)=""/141, 0x8d}], 0x3}, 0x3}], 0x1, 0x40000042, 0x0)
executing program 8:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x3b, @local, 0xb}, 0x1c)
listen(r0, 0x402)
syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @random="0b475173ddd4", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x3, 0xf}, @mptcp=@mp_fclose={0x1e, 0xc, 0x6c, 0x0, 0x9}]}}}}}}}}, 0x0)
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='3', 0x4e)
setsockopt(r1, 0x8, 0x7, &(0x7f0000000380)="ddecbcb8b9c9efbbaf72be9c3517e1ea80f6fd765e81559e77a3ef76e64ecae06834835b5c5c6acb4d081657136cdee8e2890a6094d01810e74f17b75d41b10a5a76d4e39543ebafb1d346459f568e72bb995ec9635ff3917f0f2b8cf4efba7cea09b92b2d9aa58fb5ec6f517e84663288ab8628f629a27f161615b08d36f746e1016420d68239d54d2a16ac5f137a849cdbdc6928f38c3291fb273f689e10be983b52a6c9a03e73f145e1", 0xab)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000340)=""/3, 0x26, 0x3, 0x1, 0x9}, 0x28)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
executing program 0:
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={<r1=>r0})
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000b, 0x40010, r1, 0xa7b8e000) (async)
getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r0, 0x84, 0x85, &(0x7f0000000180)={<r2=>0x1, @in={{0x2, 0x4e22, @local}}, 0xfffffffe}, &(0x7f0000000240)=0x90)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000280)={<r3=>r2, 0x100}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={<r4=>r3, 0x2}, &(0x7f0000000340)=0x8) (async)
r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder-control\x00', 0x2, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f00000003c0)) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r6, 0x84, 0x25, &(0x7f0000000400)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0x9, 0x7}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000004c0)={r2, 0x7}, 0x8) (async)
close_range(r5, r5, 0x0)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r6, 0x4018f514, &(0x7f0000000500)={0x1, 0x2, 0x3}) (async)
r7 = socket(0x31, 0x6, 0xfffffffd)
r8 = geteuid()
quotactl_fd$Q_GETINFO(r5, 0xffffffff80000501, r8, &(0x7f0000000540)) (async)
r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000580)='/dev/comedi3\x00', 0x602, 0x0)
ioctl$COMEDI_BUFCONFIG(r9, 0x8020640d, &(0x7f00000005c0)={0x4, 0x376e188b, 0x8, 0x5})
getsockopt$inet_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000600)=""/156, &(0x7f00000006c0)=0x9c) (async)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000700)={r3, 0x3, 0x3, 0x0, 0x5, 0x1a7}, &(0x7f0000000740)=0x14) (async)
r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000780), 0x100, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000007c0)={<r11=>r10, 0x7, 0x7, 0x7})
pselect6(0x40, &(0x7f0000000800)={0x100, 0x9, 0x662b, 0x8000000000000001, 0x1000, 0x8, 0x8, 0x5}, &(0x7f0000000840)={0x6, 0x7, 0x4909deaa, 0x8000000000000000, 0x4, 0x98d, 0x7, 0x7}, &(0x7f0000000880)={0xf, 0x80000000, 0x9, 0x1, 0xa, 0x2, 0x81}, &(0x7f00000008c0), &(0x7f0000000940)={&(0x7f0000000900)={[0x771]}, 0x8})
getsockopt$inet_mreqsrc(r11, 0x0, 0xe, &(0x7f0000000980)={@rand_addr, @private, @private}, &(0x7f00000009c0)=0xc)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000a00)={0x6, 'ipvlan0\x00', {0xa7e3}, 0x8})
getsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r6, 0x84, 0x80, &(0x7f0000000a40)={<r12=>r2, 0xfffffffe}, &(0x7f0000000a80)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000ac0)={r12, 0xa8}, &(0x7f0000000b00)=0x8)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xf0, r13, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff324}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfb8d}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x18}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x61d0}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xc}}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x20008002)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x3, 0x3c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, 0x0, &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x66, 0x88e7, 'gre0\x00', 'erspan0\x00', 'macvlan0\x00', 'bond_slave_1\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0x70, 0x118, 0x190, [], [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x1ff, 0xd, 0x0, 0x0, "b59f6fd912dce39009762c84135c6d72b24abbcd0f15e79f747b1e87ecbaa3541349c5feffedb3f9e407d72cadcd11107a2ca122e4d02fc163c28ada8396b6f9"}}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0x6, 0x6, 0x0, 0x0, "13b40914207702df565b4465fa4d6c2d43a862c5a650ed18416a3c311dc178259b2c7055f6f8c4ca9f9a271e521d355026a161be2d6446f81619f82e2d8ec341"}}}}, {0x11, 0x5, 0x8848, 'ip6gre0\x00', 'caif0\x00', 'nr0\x00', 'ip6gre0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@log={'log\x00', 0x28, {{0x1, "051e832ec629b77459e4130f7823bdea303f8be25555d6617c03742e8d27", 0x4}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x3, 0x30, 0x6003, 'syz_tun\x00', 'pimreg0\x00', '\x00', 'ip6gretap0\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@nflog={'nflog\x00', 0x50, {{0xffffff46, 0x9, 0x0, 0x0, 0x0, "56cc7179567ff6bd19e520e252b06465218350729af0c8c333f004c914da57367a93eb4ce784aea2ee1a2e32e9bdce18e60ff54e04b49a37c1a1937799979f4b"}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x440)
unshare(0x6a040000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1010, 0xffffffffffffffff, 0x2000) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_LINK={0x8, 0x5, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
executing program 2:
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280), 0x4c00}], 0x1}, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4122, 0x101a}], 0x1}, 0x406)
prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000000))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060100000000000000000000000000000000000000000000000800030076783000240012800a00010076786c616e00000014000280080001006400000008000300"], 0x4c}}, 0x0)
executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000ac0)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r4 = dup3(r2, r3, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(r5, 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x8880, 0x85)
getdents64(r6, 0x0, 0x4f)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x72, 0x0, 0x7fff0004}]})
close_range(r7, 0xffffffffffffffff, 0x0)
executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6, 0x400, 0x7}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$cgroup_pid(r0, &(0x7f0000000440), 0x12)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x1, 0x8001, {0x0, 0x0, 0x0, 0x0, 0x8002, 0x8}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x852f, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffb3bf, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x100}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000001}, 0x0)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: WARNING: refcount bug in put_dev
bisect: bisecting 67 programs
bisect: split chunks (needed=false): <66>
bisect: split chunk #0 of len 66 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 30, 30, 30, 30, 30, 9, 23, 30, 24, 5, 20, 20, 17, 30, 7, 20, 30, 6, 6, 26, 40, 30, 30, 12, 30, 36, 26, 29, 4, 19, 4, 10, 25, 25, 10, 4, 11, 30, 7, 8, 5, 30, 13, 7]
detailed listing:
executing program 7:
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000180))
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040))
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x5)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef)
executing program 7:
r0 = syz_clone(0x100000, &(0x7f0000000000)="8690063087d5081e89c925b80550991e83cac1912dcd52a97697770a697b", 0x1e, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="f713708f91d03a129737c90cd70619c87ee1f8fdc3d933fcefc9dcf0cf98e47d0d84a7cc7b00f8c38446584ddb4130fc31bfc71640073ca3fc5d7a5e17cd269ca08a8ae85ee9679092a5e063a0cac01111bae685b30af7a7736a47e169daded9b0a135720d09499caeac9220c7524f52385bfe862077caf42f1c1f7e0aa03d1b61c6f9f8a125379a1dbb75d826ae96f89569c19d131dac7dd79b37aedec851f04abe1ecbad4df49cb6251d76406a4779e0b22502f57a5c6956fb27fc1c0156e30d9602c4962de2fd6bd59bfab051538e0e0641ea11298b5ab6")
ioprio_set$pid(0x2a4fbd8f164d6d22, r0, 0x6000)
r1 = syz_create_resource$futex(&(0x7f00000001c0))
r2 = syz_create_resource$futex(&(0x7f0000000240)=0x1)
futex(r1, 0x2, 0x2, &(0x7f0000000200)={0x77359400}, r2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
ftruncate(r3, 0x2)
futex$unlock_pi_list32(r2, 0x687, 0x4, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)=0x80, 0x4)
r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000380))
futex$unlock_wake_list32(r1, 0x681, 0x7, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)=0x9, 0x7)
r5 = accept4$nfc_llcp(r3, &(0x7f0000000440), &(0x7f00000004c0)=0x60, 0x81000)
ioctl$XFS_IOC_ERROR_CLEARALL(r5, 0x40085875)
futex$unlock_pi_list64(r2, 0x287, 0x8, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)=0x4, 0x40)
ioctl$DVB_DVR_DMX_EXPBUF(r3, 0xc00c6f3e, &(0x7f0000000580)={0x1000, 0x0, <r6=>r3})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0, <r7=>0x0, <r8=>0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, <r9=>0x0, 0x0, 0x0, <r10=>0x0], &(0x7f0000000640)=[<r11=>0x0, <r12=>0x0, <r13=>0x0], &(0x7f0000000680)=[0x0], 0x4, 0x7, 0x3, 0x1})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000700)={r7, 0x2, 0x2, 0x6, 0x3, [], [0x8, 0x8, 0x7, 0xffffff80], [0xa, 0x6, 0x4, 0x5], [0x0, 0x4, 0x0, 0x400]})
connect$inet(r3, &(0x7f0000000780)={0x2, 0x4e23, @remote}, 0x10)
r14 = syz_open_dev$loop(&(0x7f00000007c0), 0x4, 0x4000)
ioctl$LOOP_SET_BLOCK_SIZE(r14, 0x4c09, 0x8)
r15 = fsmount(r3, 0x1, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000800)=0xa0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r15, 0xc02064b6, &(0x7f00000008c0)={0x0, <r16=>r9, r7, 0x0, 0x0, 0x7, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000900)={&(0x7f0000000840)=[0x0, 0x0, 0x0], 0x3, r16})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r15, 0xc04064a0, &(0x7f0000000a80)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[<r17=>0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x2, 0x5})
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000b00)={&(0x7f0000000ac0)=[r17, r12, r11, r13], 0x4, r10, r8, 0xfffff306, 0x2, 0x1, 0x3, {0x21d32075, 0x3, 0x3, 0xb45, 0x400, 0x1, 0xe08b, 0x5, 0x7, 0x4, 0x4, 0x5a, 0x7ff, 0x0, "9f3322bde99fd49a0e42ea5fe29fdf7f3259ce1283cafe4506b94dd0ea871a13"}})
ioctl$XFS_IOC_EXCHANGE_RANGE(r5, 0x40285881, &(0x7f0000000b80)={r6, 0x0, 0x8, 0x6, 0x0, 0x8})
syz_genetlink_get_family_id$smc(&(0x7f0000000bc0), r15)
futex$unlock_pi_list32(r1, 0x607, 0x3, 0xffffffffffffffff, &(0x7f0000000c00)=0xffffdbc2, 0xa7)
epoll_pwait2(r15, &(0x7f0000000c40)=[{}, {}], 0x2, &(0x7f0000000c80)={0x0, 0x3938700}, &(0x7f0000000cc0)={[0x4]}, 0x8)
executing program 35:
r0 = syz_clone(0x100000, &(0x7f0000000000)="8690063087d5081e89c925b80550991e83cac1912dcd52a97697770a697b", 0x1e, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="f713708f91d03a129737c90cd70619c87ee1f8fdc3d933fcefc9dcf0cf98e47d0d84a7cc7b00f8c38446584ddb4130fc31bfc71640073ca3fc5d7a5e17cd269ca08a8ae85ee9679092a5e063a0cac01111bae685b30af7a7736a47e169daded9b0a135720d09499caeac9220c7524f52385bfe862077caf42f1c1f7e0aa03d1b61c6f9f8a125379a1dbb75d826ae96f89569c19d131dac7dd79b37aedec851f04abe1ecbad4df49cb6251d76406a4779e0b22502f57a5c6956fb27fc1c0156e30d9602c4962de2fd6bd59bfab051538e0e0641ea11298b5ab6")
ioprio_set$pid(0x2a4fbd8f164d6d22, r0, 0x6000)
r1 = syz_create_resource$futex(&(0x7f00000001c0))
r2 = syz_create_resource$futex(&(0x7f0000000240)=0x1)
futex(r1, 0x2, 0x2, &(0x7f0000000200)={0x77359400}, r2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
ftruncate(r3, 0x2)
futex$unlock_pi_list32(r2, 0x687, 0x4, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)=0x80, 0x4)
r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000380))
futex$unlock_wake_list32(r1, 0x681, 0x7, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)=0x9, 0x7)
r5 = accept4$nfc_llcp(r3, &(0x7f0000000440), &(0x7f00000004c0)=0x60, 0x81000)
ioctl$XFS_IOC_ERROR_CLEARALL(r5, 0x40085875)
futex$unlock_pi_list64(r2, 0x287, 0x8, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)=0x4, 0x40)
ioctl$DVB_DVR_DMX_EXPBUF(r3, 0xc00c6f3e, &(0x7f0000000580)={0x1000, 0x0, <r6=>r3})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0, <r7=>0x0, <r8=>0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, <r9=>0x0, 0x0, 0x0, <r10=>0x0], &(0x7f0000000640)=[<r11=>0x0, <r12=>0x0, <r13=>0x0], &(0x7f0000000680)=[0x0], 0x4, 0x7, 0x3, 0x1})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000700)={r7, 0x2, 0x2, 0x6, 0x3, [], [0x8, 0x8, 0x7, 0xffffff80], [0xa, 0x6, 0x4, 0x5], [0x0, 0x4, 0x0, 0x400]})
connect$inet(r3, &(0x7f0000000780)={0x2, 0x4e23, @remote}, 0x10)
r14 = syz_open_dev$loop(&(0x7f00000007c0), 0x4, 0x4000)
ioctl$LOOP_SET_BLOCK_SIZE(r14, 0x4c09, 0x8)
r15 = fsmount(r3, 0x1, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000800)=0xa0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r15, 0xc02064b6, &(0x7f00000008c0)={0x0, <r16=>r9, r7, 0x0, 0x0, 0x7, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000900)={&(0x7f0000000840)=[0x0, 0x0, 0x0], 0x3, r16})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r15, 0xc04064a0, &(0x7f0000000a80)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[<r17=>0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x2, 0x5})
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000b00)={&(0x7f0000000ac0)=[r17, r12, r11, r13], 0x4, r10, r8, 0xfffff306, 0x2, 0x1, 0x3, {0x21d32075, 0x3, 0x3, 0xb45, 0x400, 0x1, 0xe08b, 0x5, 0x7, 0x4, 0x4, 0x5a, 0x7ff, 0x0, "9f3322bde99fd49a0e42ea5fe29fdf7f3259ce1283cafe4506b94dd0ea871a13"}})
ioctl$XFS_IOC_EXCHANGE_RANGE(r5, 0x40285881, &(0x7f0000000b80)={r6, 0x0, 0x8, 0x6, 0x0, 0x8})
syz_genetlink_get_family_id$smc(&(0x7f0000000bc0), r15)
futex$unlock_pi_list32(r1, 0x607, 0x3, 0xffffffffffffffff, &(0x7f0000000c00)=0xffffdbc2, 0xa7)
epoll_pwait2(r15, &(0x7f0000000c40)=[{}, {}], 0x2, &(0x7f0000000c80)={0x0, 0x3938700}, &(0x7f0000000cc0)={[0x4]}, 0x8)
executing program 4:
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget\x00', 0x930aa59063c1a109)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000007, 0x3b071, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000687000/0x3000)=nil, 0x3000, 0x64)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r1}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x9, r2, 0x4}, 0x38)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x12, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x10000, &(0x7f0000000780)={[{@resgid}, {}, {@grpquota}, {@nobh}, {@journal_checksum}, {@orlov}, {@dioread_nolock}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000800)="$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")
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000d80), 0x2, 0x0)
readv(r3, &(0x7f0000000dc0)=[{&(0x7f0000000e00)=""/14, 0xe}, {0x0}, {&(0x7f0000000e40)=""/90, 0x5a}], 0x3)
write$input_event(r3, &(0x7f0000000ec0)={{0x77359400}, 0x15}, 0xfe4f)
io_uring_setup(0x6c69, &(0x7f0000000f00)={0x0, 0x4641, 0x4000, 0x2, 0x74})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@local, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x19, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x781eece4fc9ea1c5, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x3, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x7ff, 0x918a, 0x10000, 'snmp\x00', 'syz1\x00', {0x405}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0)
syz_mount_image$fuse(&(0x7f00000019c0), 0x0, 0x84406d, &(0x7f0000001a00)=ANY=[], 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x1}, 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, r5, 0x25, 0xb, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20)
mount(0x0, &(0x7f0000000040)='./gadget\x00', &(0x7f00000000c0)='gadgetfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget/dummy_udc\x00', 0x2, 0x4b)
write(r7, &(0x7f0000000140)="0000000008020900010100800112fbfd020000004000800000000000000001", 0x1f)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x200004, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=")
ioprio_set$pid(0x3, 0x0, 0x0)
r8 = openat(r7, &(0x7f0000000280)='./file1\x00', 0x0, 0x54)
sendfile(r8, r8, 0x0, 0x7a680000)
executing program 4:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, <r0=>0x0})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000)
getsockname$packet(r1, &(0x7f0000001c00)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c40)=0x14)
sendmsg$nl_route(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket(0x10, 0x803, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000001e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001ec0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x20040000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001fc0), r5)
getsockname$packet(r5, &(0x7f0000002000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xfffffffffffffd7a)
sendmsg$inet(r4, &(0x7f0000002080)={&(0x7f00000020c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r10 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000600)=<r11=>0x0, &(0x7f0000001940)=<r12=>0x0, &(0x7f0000001980)=<r13=>0x0)
syz_io_uring_submit(r11, r12, r13, &(0x7f00000019c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000001a40)=@xdp={0x2c, 0x2, 0x0, 0x20}})
syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000001ac0)={0x2e, 0xd, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8000000000000c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
timer_create(0x4, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300))
r14 = socket$nl_audit(0x10, 0x3, 0x9)
r15 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_opts(r15, 0x84, 0x1e, 0xfffffffffffffffe, &(0x7f0000000540)=0x5a)
sendmsg(r14, &(0x7f0000001900)={&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x4e23, @remote}, 0x4, 0x2, 0x3, 0x4}}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1290}, 0x1)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
executing program 36:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, <r0=>0x0})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000)
getsockname$packet(r1, &(0x7f0000001c00)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c40)=0x14)
sendmsg$nl_route(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket(0x10, 0x803, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000001e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001ec0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x20040000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001fc0), r5)
getsockname$packet(r5, &(0x7f0000002000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xfffffffffffffd7a)
sendmsg$inet(r4, &(0x7f0000002080)={&(0x7f00000020c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r10 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000600)=<r11=>0x0, &(0x7f0000001940)=<r12=>0x0, &(0x7f0000001980)=<r13=>0x0)
syz_io_uring_submit(r11, r12, r13, &(0x7f00000019c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000001a40)=@xdp={0x2c, 0x2, 0x0, 0x20}})
syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000001ac0)={0x2e, 0xd, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8000000000000c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
timer_create(0x4, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300))
r14 = socket$nl_audit(0x10, 0x3, 0x9)
r15 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_opts(r15, 0x84, 0x1e, 0xfffffffffffffffe, &(0x7f0000000540)=0x5a)
sendmsg(r14, &(0x7f0000001900)={&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x4e23, @remote}, 0x4, 0x2, 0x3, 0x4}}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1290}, 0x1)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={<r2=>0x2, 0xe9, "52bbb5cbb243dcc4a697193b7a4bcd430787c2a0c1ea25b01adc461b2063f9a0649ea577983149ee37ebde63e5cd1c715e94620d55d33f8e9ffc4c74da29b90678140c1e8be2921f536aa10995ab75f16d8621bb0efb1daf6bf203fe0a38c2285a9c36d59a0b1635becdcb2ad8236ca3c8a9057ad0e8cfdf07691fbc4a33f079bd375fcd550709c76128d9d16134fc7646c1bfeb229e8c1c8eee2c9eaf86aa62640312094b1868deb14cba3f0c0c596906e5ccd4f4f5156233435f79aa064f954de6ce3dd0d89178a2e48f746aa3f15b426dc4b480e890b6ea44056a64f5fd251e778948a7302e7d59"}, &(0x7f0000000340)=0xf1)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e24, 0x7fffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}, 0x84)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x6400, 0x11223}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}, @IFLA_MTU={0x8, 0x4, 0x44fc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004050}, 0x20048040)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10)
executing program 6:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x8}, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x246}], 0x1, 0x40002162, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x10, 0x4, &(0x7f0000000900)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200a, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x10}]}, &(0x7f0000000940)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000300)={r5, 0x0, &(0x7f0000000340)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r6 = socket$kcm(0x11, 0x2, 0x300)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r7, 0x4)
r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000980)={0x1, 0x2, 0x1})
r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x389181, 0x0)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r9, 0x3309)
r10 = syz_open_dev$vim2m(&(0x7f00000009c0), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000a00)={0xf0f022})
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r11, 0x5, 0xb68, 0x739, &(0x7f0000000800)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x40000)
executing program 6:
timer_create(0x0, 0x0, &(0x7f00000001c0)=<r0=>0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x66}, 0x28)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000580)=0x1, 0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000640)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000740), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000000780), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048885}, 0x2004c0c4)
r7 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000140)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "e5fad343e15e00deffffffff0500", "0000f8f88813da00"}, 0x3eb3, 0x2})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000180)={0x80, 0x0, 0x0, 0x48})
bind$inet(r1, &(0x7f0000000880)={0x2, 0x4e24, @multicast1}, 0x10)
sendmmsg$inet(r1, &(0x7f00000008c0)=[{{&(0x7f0000000900)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000980)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000009c0)=@gcm_256={{}, "b8155244614427c8", "6120cc39c039a8222816358a7d0637f0dd5d60d0d3ec50524456c96e4db1b2f7", "75223cec", "ae1b8a64b7c9bf3c"}, 0x38)
timer_settime(r0, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000340))
r8 = syz_open_dev$evdev(&(0x7f0000000380), 0x0, 0x842)
r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x800000, &(0x7f0000000480)=ANY=[@ANYBLOB='tr`ns=fd,Vfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00'])
socket$nl_netfilter(0x10, 0x3, 0xc)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x38ff817, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
umount2(&(0x7f00000003c0)='./file0/../file0\x00', 0x1)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x1000040, &(0x7f0000000480)={[{@nobarrier}, {@oldalloc}, {@orlov}, {@dioread_lock}]}, 0x5, 0x59c, &(0x7f00000004c0)="$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") (async)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x1000040, &(0x7f0000000480)={[{@nobarrier}, {@oldalloc}, {@orlov}, {@dioread_lock}]}, 0x5, 0x59c, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', 0xd02, 0x15)
pwrite64(r0, &(0x7f0000000ac0)='2', 0xfdef, 0xc00) (async)
pwrite64(r0, &(0x7f0000000ac0)='2', 0xfdef, 0xc00)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x92042, 0x20)
write$nci(r1, 0x0, 0x11)
write$nci(r1, &(0x7f0000000b40)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x1, 0x2, 0x1, 0x87, {0x0, 0x2, 0x2, 0x3, 0x6, 0x0, 0xc, 0x2}}, 0x11) (async)
write$nci(r1, &(0x7f0000000b40)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x1, 0x2, 0x1, 0x87, {0x0, 0x2, 0x2, 0x3, 0x6, 0x0, 0xc, 0x2}}, 0x11)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) (async)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000180001042bbd7000000000000a401400fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000000016801c00010000180101"], 0x60}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x0)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x61)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/file1\x00', 0x3220019, 0x0, 0xff, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', &(0x7f00000002c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x93e4}}}, 0x0, 0x200) (fail_nth: 5)
executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB], 0x60}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000009c0)=<r3=>0x0)
r4 = syz_open_dev$video(&(0x7f0000000a80), 0x7, 0x0)
ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000ac0)={0x3, "a8df7802997c0f0f26a793d1c00000000000000200000500", 0x2, 0x5, 0x1, 0x3200e0, 0x4000000, 0x2})
prlimit64(r3, 0xf, &(0x7f0000000a00)={0x6, 0x8}, &(0x7f0000000a40))
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
r5 = socket$inet(0x2, 0x3, 0x2f)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000940)='xfrm0\x00', 0x10)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10)
listen(r6, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffff9, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0xf4c, 0x8, 0xb9, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x3, 0x9, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x6, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x2000312, 0x78, 0xea4, 0x0, 0x401, 0x7, 0x1, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0xfffffffd, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x4008000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x3, 0x40, 0x3], [0x7, 0x40a, 0x7, 0x5, 0xfffffffe, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x89, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x1fc, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12f, 0x4, 0x1, 0xc, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x1000002, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0xb, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10002, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1538, 0x200, 0xffff3441, 0x1001]}, 0x45c)
ppoll(&(0x7f0000000680)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
executing program 37:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB], 0x60}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000009c0)=<r3=>0x0)
r4 = syz_open_dev$video(&(0x7f0000000a80), 0x7, 0x0)
ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000ac0)={0x3, "a8df7802997c0f0f26a793d1c00000000000000200000500", 0x2, 0x5, 0x1, 0x3200e0, 0x4000000, 0x2})
prlimit64(r3, 0xf, &(0x7f0000000a00)={0x6, 0x8}, &(0x7f0000000a40))
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
r5 = socket$inet(0x2, 0x3, 0x2f)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000940)='xfrm0\x00', 0x10)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10)
listen(r6, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffff9, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0xf4c, 0x8, 0xb9, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x3, 0x9, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x6, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x2000312, 0x78, 0xea4, 0x0, 0x401, 0x7, 0x1, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0xfffffffd, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x4008000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x3, 0x40, 0x3], [0x7, 0x40a, 0x7, 0x5, 0xfffffffe, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x89, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x1fc, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12f, 0x4, 0x1, 0xc, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x1000002, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0xb, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10002, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1538, 0x200, 0xffff3441, 0x1001]}, 0x45c)
ppoll(&(0x7f0000000680)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
executing program 9:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000740)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000780)=r1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r3, @ANYRES32=r3, @ANYRESHEX=r3], 0x1, 0x392, &(0x7f00000000c0)="$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")
io_uring_setup(0x2ea5, &(0x7f0000000480)={0x0, 0xfffffffb, 0x1403, 0x40, 0x7})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000c80), 0x161042, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x31c5, &(0x7f00000005c0)={0x0, 0x7978, 0x800, 0xfffffffe, 0x360}, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
executing program 9:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c900000095"], &(0x7f0000000d40)='syzkaller\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x41100, 0x40}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x108000)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f00000005c0)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000600)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdb7d, {0x0, 0x0, 0x0, r4, {0x8, 0xfff3}, {}, {0xe, 0x300}}}, 0x24}}, 0x840)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), r3)
r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x1a10c1, 0x9c37611dc13d0da3)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000780)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r8, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r9, &(0x7f0000000840)='0', 0x1)
ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000880)={0x28, 0x4, r8, r8, 0x3, 0xfffffffffffffffa, 0x3fff})
fchown(r6, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x5, 0x0, r0, 0x2, '\x00', r4, r2, 0x5, 0x4, 0x3}, 0x50)
write$nbd(r2, 0x0, 0x40)
r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
unshare(0x22020600)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r12 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x8100, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r12, 0xc0184800, &(0x7f0000000700)={0x4, <r13=>r11})
ioctl$DMA_BUF_SET_NAME_A(r13, 0x40086203, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r10, 0x5335f3fab7bb534c, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
executing program 9:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @local}], 0x1c)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f0000000640)={[], [{@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x61, 0x39, 0x37, 0x37, 0x66, 0x35, 0x31], 0x2d, [0x33, 0x34, 0x64, 0x63], 0x2d, [0x0, 0x63, 0x64, 0x61], 0x2d, [0x64, 0x39, 0x64, 0x64], 0x2d, [0x62, 0x37, 0x31, 0x36, 0x33, 0x36, 0x36]}}}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, '-'}}]}, 0x1, 0x50a, &(0x7f0000000100)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./bus\x00', 0x1c1002, 0x40)
write$P9_RRENAME(r1, &(0x7f0000000d80)={0x7, 0x15, 0x2}, 0x7)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff)
write$FUSE_NOTIFY_POLL(r1, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x100000001}}, 0x18)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
bind$packet(r0, &(0x7f00000001c0)={0x11, 0xf5, 0x0, 0x1, 0x83, 0x6, @random="3160cff86b8b"}, 0x14)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x101e01, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000340)=0x15)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0xc0384707, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x2c020400)
r2 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$rtl8150(0x2, 0xfdea, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
pread64(r2, 0x0, 0x0, 0x2de)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020)
executing program 9:
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) (async)
setpgid(r0, r0) (async)
r1 = syz_open_procfs(r0, &(0x7f0000000180)='fd/3\x00')
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = io_uring_setup(0x5101, &(0x7f00000000c0)={0x0, 0x4, 0x3000, 0xfffffffc, 0x40000}) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x716e) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) (async, rerun: 32)
mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000002200)='devtmpfs\x00', 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async)
ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000a00)={0x20, r6, 0x1, 0x0, &(0x7f0000000a40)=[{}]})
r7 = openat(0xffffffffffffff9c, &(0x7f0000002240)='./dev/mapper/control\x00', 0x240, 0x310) (async)
write(0xffffffffffffffff, &(0x7f0000002280)="240000001a005f0214f9f407000904001f000000000200000000000008fe", 0x1e)
ioctl(r7, 0xc138fd02, &(0x7f00000022c0)="0400000000000000")
io_uring_enter(r3, 0x0, 0x0, 0xf, &(0x7f0000000140), 0x18) (async, rerun: 64)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) (rerun: 64)
close(r8) (async, rerun: 64)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) (rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r9}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) (async)
write$sysctl(r1, &(0x7f0000000380)='1\x00', 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x17, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0))
clock_getres(0x3, &(0x7f00000003c0))
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00V\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r11}, &(0x7f00000006c0), &(0x7f0000000700)=r10}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 9:
sendmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000084}, 0x88c0)
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0x7, 0x4)
sendmmsg(r0, &(0x7f0000001740), 0x2e9, 0x0)
executing program 38:
sendmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000084}, 0x88c0)
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0x7, 0x4)
sendmmsg(r0, &(0x7f0000001740), 0x2e9, 0x0)
executing program 8:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x2, 0x6, 0x402f, 0xeff3})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001380), 0x40200, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000013c0)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=ANY=[@ANYBLOB="38000000540001002abd70000200000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00020200e0408d831165bfd8cc3fb9463c71000001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001440)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001480)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r6 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r6, &(0x7f0000001680)="bad386dd", 0x5dc, 0x40, &(0x7f00000016c0)={0x11, 0x8100, r5, 0x1, 0xd9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x14)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001280), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000012c0))
pwritev(r7, &(0x7f0000001300)=[{&(0x7f0000001340)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r8, &(0x7f0000000100)={0x9, {"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", 0x1000}}, 0x1006)
ioctl$TIOCGSOFTCAR(r8, 0x5419, &(0x7f0000001140))
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x4c, r10, 0x7, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x7d, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x4c}}, 0x0)
mount(0xfffffffffffffffe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='efs\x00', 0x2008000, 0x0)
executing program 8:
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x1, 0x2, 0x6, 0x2, 0xa, "ead4f5b1d89ce091b50610706f89e729cc04f8", 0x8001, 0x5})
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0xf7, 0x2, 0xdcb}) (async)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0xf7, 0x2, 0xdcb})
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=""/76, &(0x7f0000000140)=0x4c) (async)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)=""/76, &(0x7f0000000140)=0x4c)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000180)={0x72, 0xb9c, 0xae, 0x8, 0xb, "fb61351986e56fe6"})
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'ip6tnl0\x00', 0x1000})
r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DM_TABLE_DEPS(r2, 0xc138fd0b, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x1e8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, "93dfbc55c1f954d8188e2a3d0347c79f067ba2f302cc9c0c74a2b4204179a3da89624656fe90d97b96ea0480b24fe2c557d7512fea70590c1b0ceaf2e3a850ac93fd2b0d73090e2ca5f8cae88e167810cc49542b7eb91965171c2e71c2e88d0a8a3db2cd323208a0bacc0542184b5c4d59c2f6402cc69fe39b26d2542e5e83fbf122bb9f9a9888b3f357185316dfedca5abe9d3f82bf4598fdec232a1f329112b79f7bb9cb2eb359488536d6dd53"}) (async)
ioctl$DM_TABLE_DEPS(r2, 0xc138fd0b, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x1e8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={<r3=>0x0, {'syz', 0x0, '0\x00'}}, "93dfbc55c1f954d8188e2a3d0347c79f067ba2f302cc9c0c74a2b4204179a3da89624656fe90d97b96ea0480b24fe2c557d7512fea70590c1b0ceaf2e3a850ac93fd2b0d73090e2ca5f8cae88e167810cc49542b7eb91965171c2e71c2e88d0a8a3db2cd323208a0bacc0542184b5c4d59c2f6402cc69fe39b26d2542e5e83fbf122bb9f9a9888b3f357185316dfedca5abe9d3f82bf4598fdec232a1f329112b79f7bb9cb2eb359488536d6dd53"})
r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8)
ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000480)={0x1, 0x81, 0x5, 0x1000, 0xb, "9a7658887657acee0f4ee28a8b1ef8c6bbe558"}) (async)
ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000480)={0x1, 0x81, 0x5, 0x1000, 0xb, "9a7658887657acee0f4ee28a8b1ef8c6bbe558"})
ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f00000004c0))
pipe2$9p(&(0x7f0000000580)={<r5=>0xffffffffffffffff}, 0x80800)
fstat(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x100000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_user}, {@version_9p2000}, {@version_9p2000}, {@cache_loose}, {@directio}], [{@appraise}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}*.'}}, {@permit_directio}, {@obj_role={'obj_role', 0x3d, '/dev/net/tun\x00'}}, {@euid_lt={'euid<', r6}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000780)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r8=>r1}, './file0\x00'})
getpeername$packet(r7, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) (async)
getpeername$packet(r7, &(0x7f0000000980)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14)
syz_btf_id_by_name$bpf_lsm(&(0x7f0000000a40)='bpf_lsm_socket_setsockopt\x00') (async)
r10 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000a40)='bpf_lsm_socket_setsockopt\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x19, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@generic={0xf9, 0x8, 0x0, 0xff05, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x7, 0xbf, &(0x7f00000008c0)=""/191, 0x41000, 0x1, '\x00', r9, @cgroup_sockopt=0x16, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x3, 0xb, 0x6, 0x20000}, 0x10, r10, 0xffffffffffffffff, 0x3, &(0x7f0000000a80)=[r8, r7, r8, r7, r8, r7], &(0x7f0000000ac0)=[{0x5, 0x5, 0xa, 0x5}, {0x1, 0x2, 0xd, 0x4}, {0x5, 0x3, 0x1, 0x6}], 0x10, 0x8}, 0x94)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000bc0)=r7, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1a, 0x1, &(0x7f0000000c00)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000c40)='GPL\x00', 0x2a455b26, 0xb8, &(0x7f0000000c80)=""/184, 0x0, 0x1c, '\x00', r9, @tracing=0x1c, r8, 0x8, &(0x7f0000000d40)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000d80)={0x0, 0x4, 0x1}, 0x10, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
ioctl$VT_OPENQRY(r7, 0x5600, &(0x7f0000000e80))
syz_btf_id_by_name$bpf_lsm(&(0x7f0000000ec0)='bpf_lsm_path_mkdir\x00')
ioctl$DM_DEV_REMOVE(r8, 0xc138fd04, &(0x7f0000000f00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x80400, 0x0, 0x0, @by_dev={r3}})
ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000001040)={0x0, 0x1, 0x20})
r11 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGPTPEER(r11, 0x5441, 0x568475a1)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r7)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x54, r12, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0x4, 0x5, 0xc, 0x1b, 0x36, 0x12, 0x18, 0x30, 0x30, 0x6c, 0x30, 0x16, 0xc, 0x1, 0x24, 0x30, 0x9, 0x6c, 0x2, 0x6, 0x4, 0x1e, 0x0, 0x60, 0x1, 0x3, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008044}, 0x20000080) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x54, r12, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0x4, 0x5, 0xc, 0x1b, 0x36, 0x12, 0x18, 0x30, 0x30, 0x6c, 0x30, 0x16, 0xc, 0x1, 0x24, 0x30, 0x9, 0x6c, 0x2, 0x6, 0x4, 0x1e, 0x0, 0x60, 0x1, 0x3, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008044}, 0x20000080)
executing program 3:
r0 = msgget$private(0x0, 0x1c0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
msgsnd(r0, &(0x7f0000006000)=ANY=[@ANYBLOB="01000700000000004ddb5035e604be595639c235103b512133a747da8da08f280f05ca0abc081efbfd69a53158034590eab7e016ca501e26994a5a94d0450f031312d2d8d439098113a83c627bfae030ad450cfbcba5ed627b06"], 0x8, 0x0)
msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001c0000000000"], 0x8, 0x0)
msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x9e, 0x0)
msgctl$IPC_RMID(r0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x1000000, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x1, 0x0, 0x0)
read$FUSE(r1, &(0x7f00000003c0)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000002400)={0x50, 0x0, r2, {0x7, 0x2b, 0x7, 0x800, 0x101, 0x2, 0x2, 0x3ff, 0x0, 0x0, 0x1}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000002480)="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", 0x2000, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004540)={0x78, 0x0, 0x6, {0x3ff, 0x200100, 0x0, {0x4, 0x8000000000000001, 0xfffffffffffffc01, 0x2000000000000, 0xf, 0x3ff, 0xaa62, 0x6, 0xbfb, 0x1000, 0x0, r3, r4, 0x3ff, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_io_uring_setup(0x214c, &(0x7f0000004740)={0x0, 0x50ab, 0x0, 0x2, 0xfd}, &(0x7f00000047c0)=<r5=>0x0, &(0x7f0000004800), &(0x7f0000004840))
syz_io_uring_setup(0xf00, &(0x7f0000004880)={0x0, 0x5961, 0x10000, 0x0, 0x51}, &(0x7f0000004900)=<r6=>0x0, &(0x7f0000004940)=<r7=>0x0, &(0x7f0000004980)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f00000049c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004a40)=[{&(0x7f0000004a80)=""/4096, 0x1000}, {0x0}], 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
syz_io_uring_submit(r5, r7, 0x0, &(0x7f0000005b00)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000005a80)={0x480, 0x10, 0x4}, &(0x7f0000005ac0)='./file0\x00', 0x18, 0x0, 0x23456})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000045c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, <r9=>0xee00}}, './file0\x00'})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$kcm(0x11, 0x200000000000002, 0x300)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000005b80)=@base={0x6, 0x4, 0x8, 0x100, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000005c00)={0x1, 0xb, &(0x7f0000005cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@map_fd={0x18, 0x1, 0x1, 0x0, r12}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x80000000}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000005d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000005d80)=r13, 0x4)
sendmsg$nl_generic(r10, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000005e40)={0x14, 0x26, 0x101, 0x70bda3, 0xfffffffc, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x8015}, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000004600)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
r15 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r16 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r16, &(0x7f0000005e80)={0x0, 0x0, &(0x7f0000005ec0)={&(0x7f0000005f00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0xc4}}, 0x0)
ptrace(0x10, r15)
ptrace$poke(0x5, r15, &(0x7f0000004680), 0x6)
r17 = fcntl$getown(0xffffffffffffffff, 0x9)
msgctl$IPC_SET(r0, 0x1, &(0x7f00000046c0)={{0x1, r3, r9, 0xee00, r14, 0x0, 0x9910}, 0x0, 0x0, 0x4a, 0x8, 0x5, 0x3ff, 0xc, 0xcb5a, 0x8, 0xee2c, r15, r17})
executing program 3:
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000400)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x6})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
syz_ublk_setup_io_uring(0x3b51, &(0x7f0000000000)={0x0, 0xcf7b, 0x20, 0x3, 0x1c9}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x4, 0x10, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000e13436fba139a76f000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b7"], 0x2c}}, 0x0)
mmap$IORING_OFF_SQES(0x0, 0x4, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000)
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2211080, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grouq_wd=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,dont_measure,seclabel,rootcontext=system_u,smackfsroot=-)((!,defcontext=user_u,\x00'], 0x0, 0x0, &(0x7f0000000440)="20bdf339850f2081fd293a10e25a4b9c20f3b64b317a7377b97a73eb824fb0f44c5d8ec341223d4e0bb833fc2dce8b2a32e6d43d12d5acfd88c74cdecd010cd7122629a51a79b4b2d8abc7e8634dbeda4f2ff453244aeb5da1663587e5d83631168e1aef1a86b0106de7c65e66971812a77c20fa6c34f178214d7665ceb0d457b19850378f36725f9644f75ad7fda669f39fded67ac7d8b85cb5f18c33e034edd4d8e775ed5be94ec5f8155fce61c5ad8e857f13059f4c7855becf3ef347b99c1cc89a0aafe573e284d83233a3060f23446f441ffe274000a484e6f8")
openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x404002, 0x81)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000340), 0x0}, 0x20)
syz_open_procfs(0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000680)={0x9, {"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", 0x1061}}, 0x1006)
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff}, 0x800)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000001f40))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001700)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
syz_mount_image$ext4(&(0x7f0000001800)='ext4\x00', &(0x7f0000001840)='./file2\x00', 0x28180bf, &(0x7f0000000580), 0xff, 0x52f, &(0x7f0000001f80)="$eJzs3U9vG2kZAPBnJvZu0mbXWeAAK7G7YhelFdRJNnQ34rALEuK2Emi5l5C4URQnrhJn20QVpOIDICEElbjAiQsSHwAJ9SMgpEr0jgCBELRwAKkwyPa4dRI7cRUn7sa/nzTxO388z/PGM+P3nRl5AhhZb0TEpYjIsiy7HBGlfHqaD7HXGhrLPXp4e6kxJJFlH/49iSSf1l7Xi/nrxfxt4/n4d5LDcbd2dtcWq9XKZj4+U19PHmfZ7pXV9cWVykplY35+7p2FdxeuLswOpJ5TEfHe1/784x/84uvv/eaLN/9w7a+XvtuqYEtnPaIj95NqVb24b32FiNgc0PqfB4VmDVuuDjkXAACO1mjvfyIiPhcRl6MUY83WXB8G1UAGAAAATl32/mQ8TlrX/wAAAIDzKY2IyUjScn6/72Skabncuof3U3Ehrda26l/ISk/OF0xFMb2+Wq3M5vcOTEUxaYzP5ffYtsffPjA+HxGvRMSPShPN8fJSrbo81DMfAAAAMDouHuj//6vU6v8DAAAA58zUsBMAAAAATp3+PwAAAJx/+v8AAABwrn3jgw8aQ9Z+/vXyRzvba7WPrixXttbK69tLY1HbvFFeqdVWmr/Zt37c+qq12o0vxcb2rZl6Zas+s7Wze229tr1Rv7bqiYEAAAAwLK+8fu9BEhF7X55IIyJLOuYVI7KxzoULZ58fcHrSZ1n4T6eXB3D2xoadADA0mvQwuorDTgAYuuOOAz1v3vnt4HMBAABOx/Rn7j2I1vX/5tDwQj4vGWZiwKnLr/8n9nUYPa7/w+hy/Q9GV/GoFoBOAZx7aR+7+smv/2fZMyUFAAAM3GRzSNJy3g+YjDQtlyNeaj4WoJhcX61WZiPi5Yj4fan4YmN8rvnOxOkBAAAAAAAAAAAAAAAAAAAAAAAAAOhTliWR9TCRPx2s13wAAADg4yEi/UuSP/9ruvTW5MHzAy8k/y41XyPi5k8//MmtxXp9c64x/R9Pptfv5tPf3vfWu+lZncQAAAAA9mn309v9eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpEcPby+1h7OM+7evRsRUR/wk8viFGG++jkcxIi78M4lCx/uSiBgbQPy9OxHx6W71TxppxVSexcH4aURMDDn+xQHEh1F2r3H8+Uq3/S+NN5qv3fe/Qj6c1KHjX0f89vFvrMfx76VuK0wPT3r1/q9mesa/E/Fqofvxpx0/6RH/zT7r+O1v7e72mpf9PGK66/dPsi/WTFK4MbO1s3tldX1xpbJS2Zifn3tn4d2FqwuzM9dXq5X8b9cYP/zsr/93VP0vRIz3Ov4eVf+3+qz/f+/fevjJVrF4YFYxfpZll958Wv80nn7/tv7/8f7B+O3vvs/nH3djfLpd3muVO732y9+99nqP3CbuRCz3+P8f8/l32dK6u/zN7/+x32UBgNO3tbO7tlitVja7Flpti31Tkp4Ldyu0mwx9LdxXIQa0nnNUSPaeizSOKEwMcAM4trAYRy3T3iLPIJ/vDXzjP7bwn6znrMKz7mgAAMA587TRP+xMAAAAAAAAAAAAAAAAAAAAYHQd9zNgceKfJXv5UMy9odQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBo/w8AAP//LXK++w==")
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
executing program 8:
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000200)={0x2, 0x0, 0x2, 0x84800})
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000300)={0x3, 0x8, 0x7, 0x3, 0x2, [0x5, 0xfd24, 0x8, 0x4]})
r2 = syz_open_dev$video(&(0x7f0000000140), 0x101, 0xab02)
ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000180)={0xa, {0xf8000002, 0x4, 0x27, 0xfffffffa}})
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8810, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@dax_inode}]}, 0x1, 0xbf2, &(0x7f0000001e80)="$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")
pipe2(&(0x7f0000000280)={<r3=>0xffffffffffffffff}, 0x0)
splice(r3, &(0x7f00000002c0)=0x100000001, r3, 0x0, 0xa, 0x4)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200000, &(0x7f0000000040)='\x8f]\x80\xa4Y\xddr\x9a\a\xc5a\x1f\x8c\xed\x92\x85\x91\xc1\x00E\xdf\xd0\x9b\x01w\x8d\xd6\x90\xc9\xe2\xa2\x1e\xd5\x8f\xe3\xac\xbb\x05Z+\x97$\xf6\x14\xa5\x8f\xce\x9c\v\xe4\x99^h\x9e\xe6\xf0)/\xd4\xe8\xfc\xa5\x96|)^H(\x14\xb7C\x15p\x16\xe8\xe2\xe1)\xca\x89T\x9ff*\x13\x94\x8eh\xfe\xb6\xbaN\xf5i\x01,\xf7I\xc5\xaeL\xfc;\xee\xda\xb1\x9b\xc1\xcd\x0ep\xc4\xe0Dy\xf5+f\x02\xd2\xb8\x1a\xfb\xd1&\x93Q\x87\xbf \xa8MP\x14\xea\x0fI\xc3\xfc\xf8D\x1c+\xf2\x88\xe8w^\x89\xd7\xae\xd1IY\x1f#\xd3\x14\xcd\x14Y\x04\xac\t3C\x8f\xbc\x02i[\x8d+\xb04+U2VK\xd8\xa2\xd1\x02-\xef7\x0f\x19V\x19*\xcf\xcd`\x87\x9fRz\x86\xa5\xa2\xec\xf8')
r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "0fddbba9c4dc1060a974f59447920f35cb98c40f28b65df19728c4bca8e03b435fba5df5ca799607fd6cf7bebb89645da58f1b0eebc2cb7e03097f57bb786b36", 0x34}, 0x48, r4)
executing program 3:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/sockcreate\x00')
r1 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}, 0x1, 0x0, 0x0, 0x4040041}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000880)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/16, 0x10}, 0x81}], 0x1, 0x820b, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000940)=0x8, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000980)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c)
sendto$inet6(r3, &(0x7f00000009c0), 0x3000, 0x0, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000840)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
readlinkat(r0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)=""/72, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000003c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00')
pwritev(r6, &(0x7f0000000240)=[{&(0x7f0000000280)='0', 0x1}, {0x0, 0xa00}], 0x2, 0x0, 0x0)
renameat2(r6, &(0x7f00000002c0)='./mnt\x00', r0, &(0x7f0000000300)='./mnt\x00', 0x1)
sendmsg$NFT_BATCH(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a010400000000000000000200ffff540004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180fffffffd140001800c0001006e6f747261636b00040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}}, 0x0)
pipe2(&(0x7f0000000a00), 0x80000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000bc0)={&(0x7f0000510000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000117000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000083f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c4a000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68)
brk(0x20000001)
openat$zero(0xffffffffffffff9c, &(0x7f0000000c40), 0x80002, 0x0)
r7 = syz_io_uring_setup(0xf00, &(0x7f0000000c80)={0x0, 0x595f, 0x400, 0x0, 0x51}, &(0x7f0000000d00)=<r8=>0x0, &(0x7f0000000d40)=<r9=>0x0, &(0x7f0000000d80)=<r10=>0x0)
syz_io_uring_submit(r8, r9, r10, &(0x7f0000000dc0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000000e40)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r7, 0x7c65, 0xa334, 0x1, 0x0, 0x0)
executing program 8:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000d80), 0x82084, 0x0)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000dc0)={0x1, 0x0, 0x2, 0x9d9, 0x87, "5c71060f000000000100020000002000000400", 0x0, 0x3})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000e00)=0x2)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200ffff48000480440001800b000100657874686472000034000280050002009400000008000340000000f508000440000000010800064000000001080001400000001308000540000000010900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x50000)
r3 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x800, &(0x7f00000004c0), 0x26, 0x75d, &(0x7f0000000500)="$eJzs3M9rHOUbAPBnptmmP/L9bgTBHwcRWmihdJM0l/bUePFWKBS81pBsQsgkG7Kb2o0FW89CbS4Kgqhnj16FUv8A8SIFBe+CaI0H8bIym01s193ttkm6kn4+MJ3nfXfmfd6nGd7sQGYCeG69nv+TRIxExOWIKLb604g43IyORNzcOm7zwY2ZfEui0bjya5KfFpuN4s5YSWt/PJqnxMsRca8Qceb9f+et1tcXp7OsvNpqj9WWVsaq9fWzC0vT8+X58vLE5IXx85OT58cnH1vDS33WevKtC0fvfPvmxsb3X9VuvzZ0NompZt3Rqq3PYZ7I1v9JIaba+pf3I9kAJYOeAAAAfcm/5x+KiKHmt9RiHGpGAAAAwEHSGG4AAAAAB14Sg54BAAAAsL+2/w5g+9ne/XoOtptf3oiI0U75h5rPEEcciUJEHNtMHnkyIdk6DXbl5q2IuDvVfv19kV9hN3c59nhb+9FnpA/vcnT2wt18/ZnqtP6kO+tPdFh/hrbfnbBLXda/5OH8h7qsf5f7zPH1p68Uuua/FfHqUKf6k538SZf8b3ce8rv2jtsbH9zplr/xecSpjr9/kkdy9Xg/xNTcQtbz9QP3/jp9v1f9x7rlT3rXv9Ir6UPe3fx9sdNakrbynz7R+/rrlD+/Jj5szSMf505rn7c32vKcWPrhm171z0Y0nubn/1mf9f/05fD1Pg8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACApjQiRiJJSztxmpZKEccj4sU4lmaVau3MXGVteTb/LGI0CuncQlYej4jiVjvJ2xPN+J/2ubb2ZES88OPRraQLWbk0U8lmB108AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO45HxEgkaSki0oj4o5impVLEUB/nDj+D+QEAAAB7ZHTQEwAAAAD2nft/AAAAOPie9v4/2eN5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfa5UuX8q2x+eDGTN6evVZfW6xcOztbri6WltZmSjOV1ZXSfKUyn5VLM5Wlx42XVSorExdi7fpYrVytjVXr61eXKmvLtasLS9Pz5avlwjOpCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCc10tyStBQRaTNO01Ip4n8RMRqFZG4hK49HxP8j4n6xMJy3JwY9aQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPZctb6+OJ1l5VWBQPDMgvci4j8wjR7BoFcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGoVpfX5zOsvJqddAzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLDSn5OIyLdTxZMj7Z8eTv4sNvcR8c4nVz66Pl2rrU7k/b/t9Nc+bvWfG8T8AQAA4Llw8UkO3r5P376PBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Fe1vr44nWXl1d0FF6O+3ki6HDPoGgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKfzdwAAAP//j0rIDA==")
r4 = openat(r3, &(0x7f0000000c80)='./file0\x00', 0x0, 0x2)
ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000cc0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000d40)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800010301000d00000000000a410000ff0300060000000014000100fe"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, 0xffffffffffffffff)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x501480, 0xa, 0x20}, 0x18)
openat(r6, &(0x7f00000001c0)='./file0\x00', 0x448100, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000d80), 0x82084, 0x0) (async)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000dc0)={0x1, 0x0, 0x2, 0x9d9, 0x87, "5c71060f000000000100020000002000000400", 0x0, 0x3}) (async)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000e00)=0x2) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200ffff48000480440001800b000100657874686472000034000280050002009400000008000340000000f508000440000000010800064000000001080001400000001308000540000000010900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async)
syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x50000) (async)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x800, &(0x7f00000004c0), 0x26, 0x75d, &(0x7f0000000500)="$eJzs3M9rHOUbAPBnptmmP/L9bgTBHwcRWmihdJM0l/bUePFWKBS81pBsQsgkG7Kb2o0FW89CbS4Kgqhnj16FUv8A8SIFBe+CaI0H8bIym01s193ttkm6kn4+MJ3nfXfmfd6nGd7sQGYCeG69nv+TRIxExOWIKLb604g43IyORNzcOm7zwY2ZfEui0bjya5KfFpuN4s5YSWt/PJqnxMsRca8Qceb9f+et1tcXp7OsvNpqj9WWVsaq9fWzC0vT8+X58vLE5IXx85OT58cnH1vDS33WevKtC0fvfPvmxsb3X9VuvzZ0NompZt3Rqq3PYZ7I1v9JIaba+pf3I9kAJYOeAAAAfcm/5x+KiKHmt9RiHGpGAAAAwEHSGG4AAAAAB14Sg54BAAAAsL+2/w5g+9ne/XoOtptf3oiI0U75h5rPEEcciUJEHNtMHnkyIdk6DXbl5q2IuDvVfv19kV9hN3c59nhb+9FnpA/vcnT2wt18/ZnqtP6kO+tPdFh/hrbfnbBLXda/5OH8h7qsf5f7zPH1p68Uuua/FfHqUKf6k538SZf8b3ce8rv2jtsbH9zplr/xecSpjr9/kkdy9Xg/xNTcQtbz9QP3/jp9v1f9x7rlT3rXv9Ir6UPe3fx9sdNakrbynz7R+/rrlD+/Jj5szSMf505rn7c32vKcWPrhm171z0Y0nubn/1mf9f/05fD1Pg8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACApjQiRiJJSztxmpZKEccj4sU4lmaVau3MXGVteTb/LGI0CuncQlYej4jiVjvJ2xPN+J/2ubb2ZES88OPRraQLWbk0U8lmB108AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO45HxEgkaSki0oj4o5impVLEUB/nDj+D+QEAAAB7ZHTQEwAAAAD2nft/AAAAOPie9v4/2eN5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfa5UuX8q2x+eDGTN6evVZfW6xcOztbri6WltZmSjOV1ZXSfKUyn5VLM5Wlx42XVSorExdi7fpYrVytjVXr61eXKmvLtasLS9Pz5avlwjOpCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCc10tyStBQRaTNO01Ip4n8RMRqFZG4hK49HxP8j4n6xMJy3JwY9aQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPZctb6+OJ1l5VWBQPDMgvci4j8wjR7BoFcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGoVpfX5zOsvJqddAzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLDSn5OIyLdTxZMj7Z8eTv4sNvcR8c4nVz66Pl2rrU7k/b/t9Nc+bvWfG8T8AQAA4Llw8UkO3r5P376PBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Fe1vr44nWXl1d0FF6O+3ki6HDPoGgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKfzdwAAAP//j0rIDA==") (async)
openat(r3, &(0x7f0000000c80)='./file0\x00', 0x0, 0x2) (async)
ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000cc0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000d40)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800010301000d00000000000a410000ff0300060000000014000100fe"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, 0xffffffffffffffff) (async)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x501480, 0xa, 0x20}, 0x18) (async)
openat(r6, &(0x7f00000001c0)='./file0\x00', 0x448100, 0x1) (async)
executing program 8:
r0 = socket$netlink(0x10, 0x3, 0x10) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000239000/0x1000)=nil)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000000b00)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000b40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000c40), 0x366, 0x10, &(0x7f0000000c80), 0x1dd}, 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000d00)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="05"], 0x10)
close(r4) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{r5}, &(0x7f0000000dc0), &(0x7f0000000e00)=r4}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{r5}, &(0x7f0000000e80), &(0x7f0000000ec0)=r6}, 0x20)
r8 = syz_mount_image$ext4(&(0x7f0000000f00)='ext4\x00', &(0x7f0000000f40)='./bus\x00', 0x321081a, &(0x7f0000000f80)={[{@acl}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000fc0)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0xc0406618, &(0x7f0000001440)={@desc={0x1, 0x0, @desc2}}) (async)
ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000340)={<r9=>0xffffffffffffffff})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="100000000b0000fb600000000000225d0000d5bc7c850d44bec304c40b70239500080000000000180000000200a0cb072c4f2739b809c800"/65, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x9e, &(0x7f0000000400)=""/158, 0x41100, 0x50, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xe, 0x4, 0x69}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x5, 0x3, 0xa, 0x4}], 0x10, 0x400}, 0x94)
r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680), 0x4)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0xc3b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x14}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r10}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r11}]}]}, 0x4c}}, 0x40080c0)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
unshare(0x400)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2})
executing program 1:
listen(0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000a40)=[{{&(0x7f0000000dc0)={0xa, 0x0, 0x400000, @private2}, 0x1c, &(0x7f0000001f00)=[{&(0x7f0000001f40)="9220", 0x2}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_EVENT(r1, 0x84, 0x7f, &(0x7f0000001f80)={0x0, 0x800a}, &(0x7f0000001fc0)=0x8)
connect$unix(r0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000b00)={0x2, 0x4e20, @multicast1}, 0x10)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e00, 0x400, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x2}, 0x1c)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x41}, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x2a5, 0xfffffffffffffffd}, {0x0, 0x1, 0xcc}, {0xf6}, 0x70bd2c, 0x0, 0xa, 0x1, 0x9}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "6373d35c068802b64119bede480ee04af6f4885d384d5f660fe922"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x8000, @local}, 0x1c)
connect$inet(r2, &(0x7f0000000b40)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0), 0x1, 0x4bc, &(0x7f0000000500)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00), &(0x7f0000000a40)=ANY=[], 0x361, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0), &(0x7f0000000d80), 0x2, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000080)={0x8d, 0x100000, 0xa0000, {r6}}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000bc0)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xb0b, 0x49, 0x66c1, 0x9, 0x31ba, 0x7207}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0x400, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r8, {}, {0xfff2, 0x2}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x9, 0x9, 0xd, 0x8000, 0xfffffffe, 0x0, 0x100, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c5}, 0xc091)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='cmdline\x00')
exit(0xffff)
preadv(r9, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76)
sendmsg$inet(r2, &(0x7f0000000e00)={0x0, 0x14, &(0x7f0000000e40)=[{&(0x7f0000000e80)=' ', 0xffffff1f}], 0x1}, 0x0)
executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0xffff20a9, 0x3}]}, 0xc, 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'batadv_slave_1\x00', &(0x7f0000002fc0)=@ethtool_stats={0x4b, 0xf}})
executing program 3:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x185e0b12a06f626e}, 0xc)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000240)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)="9c", 0x1}], 0x1}}], 0x1, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000340)=@assoc_value={<r3=>0x0}, &(0x7f0000000380)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000003c0)={r3, 0x9}, 0x8)
r4 = getpgid(0x0)
ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000580)={&(0x7f0000000500)=""/89, 0x59})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='cmdline\x00')
exit(0xffff)
preadv(r5, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000400)={0x7, 0x8, 0x1f, 0x0, r3}, &(0x7f0000000440)=0x10)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x7, 0x4)
r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000100)={0x0, @win={{0x0, 0x900, 0x9, 0x7}, 0x4, 0xd4, 0x0, 0x8a7, 0x0, 0x9}})
r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xe1, &(0x7f00000004c0)={0x0, 0x3, 0x1, 0x2}, 0x8, 0x200, 0x8, 0x0, 0x0, 0x8000, 0x0})
executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x320, 0x168, 0x10, 0x0, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x128, 0x150, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x5, 0x10000, 0x80000001, 0x82}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x3cd}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) (async)
r1 = getpid()
syz_clone3(&(0x7f0000000500)={0x124000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r1], 0x1}, 0x58)
executing program 0:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x8)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0xd1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x5}}, './file0\x00'})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r3=>0x0})
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00')
syz_fuse_handle_req(r4, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lseek(r4, 0xffffffffffffffff, 0x1)
ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f00000000c0)={0x28, 0x4, r3, 0x0, 0x6, 0x2})
executing program 1:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/unix\x00') (async)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/unix\x00')
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x2208810, &(0x7f0000000b00)={[{@auto_da_alloc}, {@usrquota}, {@nodioread_nolock}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}, {@grpjquota}]}, 0xfe, 0x572, &(0x7f0000000380)="$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")
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) (async)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10)
bind$inet6(r1, &(0x7f0000000b80)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b)
syz_emit_ethernet(0x6e, &(0x7f0000000bc0)={@broadcast, @random="b4cdded7d4e2", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @private1, @mcast2, {[], @time_exceed={0x4, 0x2, 0x0, 0x7, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @private2, @rand_addr=' \x01\x00', [@dstopts={0x84}]}}}}}}}, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x0)
r2 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x9c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x20000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8, 0x8000}, {0xc, 0x2, 0x5, 0xfffc, 0x44, 0x8}, 0x78, 0xfffffffe, 0x6}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xc}}]}, 0x9c}}, 0x24040084)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000340)={'bond0\x00', 0x2}) (async)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000340)={'bond0\x00', 0x2})
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f00000009c0)=[{{&(0x7f0000000a00)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000a80)="92", 0x1}], 0x1}}], 0x1, 0x20000800)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000ac0)={0xec, 0x3, 0x3, 0x3, 0xbd, 0x3, 0x4, 0x4, 0x5, 0x2, 0xa0, 0x1f, 0x2, 0x4}, 0xe)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4)
write(r0, 0x0, 0x0)
executing program 0:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000380)='./bus\x00', 0x800804, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x275, &(0x7f00000003c0)="$eJzs3U9qG1ccB/DfWJIttQtp0VUpeKBddGXsnsCmuFBqKLRo0XbRmNiGYAmDDYL8IYpXOUFOkPNkE3KBHCAhu3hhMkGekayEkY0S2TLJ57PR4733nfd7M4O0mtGtH7r7OwdHe8cPXka9nsTCeqzHSRKtWIihR1HqxevyfgDghjvJsniT5ZZKZ9QmJKsLV1oYAHBlxn//510LAHA9/v7n3z82trY2/0rTekT3ca+dRP6Zj2/sxZ3oxG6sRjNOI7KRvP3b71ubUU0HWvFTt99rD5Ld/58Vx994FXGWX4tmtMrza2luLN/vtWvxzXD9JOLPp9GM78rzv5Tko70YP/84Vv9KNOP57TiITuwUtQ3zD9fS9Nfsydv7/w16B/mk32svjeYVsyvXemEAAAAAAAAAAAAAAAAAAAAAAPiiraQjrQ/fv1M5PRtfmTSe5ye9H6g/9n6e1TRNsySff56vxvfVqM5z7wAAAAAAAAAAAAAAAAAAAHBTHN29t7/d6ewezrQxfKy/ZCjezXKt5WlTUSlK6yQR061VK5KXT65MuYvGoJ7dw6Qas7sEyainMT60HPlag55G3hjr+ezV63HWGN5d+9tJXJKql90kM2hkJbdfZWJq8eOeRrGDksmNC1Zf/PaTas6aE4aSiKiNTubFx6nN9hxe1zcQAAAAAAAAAAAAAAAAAAAwdP7Qb8ng8RwKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA5OP///yka/SI8aU5WGTSqUfTMeYsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8Bd4HAAD//4qtaNI=")
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000009c0)="7638b66a65585578f830e9000000ba", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x101042, 0x15)
pwrite64(r3, &(0x7f0000000a40)='2', 0xfdef, 0xc00)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a80)={<r4=>0xffffffffffffffff})
pipe2(0x0, 0x80000)
write(r4, &(0x7f0000000ac0), 0xffffff4a)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2a, &(0x7f0000000640)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000680)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
close(r6)
pipe2$watch_queue(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
sendfile(r8, r7, 0x0, 0x0)
executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000100000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x69f, r1}, 0x38) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000140)=0x10) (async)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040f0400040408"], 0x7) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x400, @private2, 0x4}}, 0x5b, 0x7fff}, 0x90)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x9, r1}, 0x38) (async)
sendmsg$nl_generic(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4) (async)
recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000d40)=""/4081, 0xe5c}, {&(0x7f0000001d40)=""/36, 0x24}, {&(0x7f0000001dc0)=""/141, 0x8d}], 0x3}, 0x3}], 0x1, 0x40000042, 0x0)
executing program 8:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x3b, @local, 0xb}, 0x1c)
listen(r0, 0x402)
syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @random="0b475173ddd4", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x3, 0xf}, @mptcp=@mp_fclose={0x1e, 0xc, 0x6c, 0x0, 0x9}]}}}}}}}}, 0x0)
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='3', 0x4e)
setsockopt(r1, 0x8, 0x7, &(0x7f0000000380)="ddecbcb8b9c9efbbaf72be9c3517e1ea80f6fd765e81559e77a3ef76e64ecae06834835b5c5c6acb4d081657136cdee8e2890a6094d01810e74f17b75d41b10a5a76d4e39543ebafb1d346459f568e72bb995ec9635ff3917f0f2b8cf4efba7cea09b92b2d9aa58fb5ec6f517e84663288ab8628f629a27f161615b08d36f746e1016420d68239d54d2a16ac5f137a849cdbdc6928f38c3291fb273f689e10be983b52a6c9a03e73f145e1", 0xab)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000340)=""/3, 0x26, 0x3, 0x1, 0x9}, 0x28)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
executing program 0:
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={<r1=>r0})
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000b, 0x40010, r1, 0xa7b8e000) (async)
getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r0, 0x84, 0x85, &(0x7f0000000180)={<r2=>0x1, @in={{0x2, 0x4e22, @local}}, 0xfffffffe}, &(0x7f0000000240)=0x90)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000280)={<r3=>r2, 0x100}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={<r4=>r3, 0x2}, &(0x7f0000000340)=0x8) (async)
r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder-control\x00', 0x2, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f00000003c0)) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r6, 0x84, 0x25, &(0x7f0000000400)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0x9, 0x7}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000004c0)={r2, 0x7}, 0x8) (async)
close_range(r5, r5, 0x0)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r6, 0x4018f514, &(0x7f0000000500)={0x1, 0x2, 0x3}) (async)
r7 = socket(0x31, 0x6, 0xfffffffd)
r8 = geteuid()
quotactl_fd$Q_GETINFO(r5, 0xffffffff80000501, r8, &(0x7f0000000540)) (async)
r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000580)='/dev/comedi3\x00', 0x602, 0x0)
ioctl$COMEDI_BUFCONFIG(r9, 0x8020640d, &(0x7f00000005c0)={0x4, 0x376e188b, 0x8, 0x5})
getsockopt$inet_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000600)=""/156, &(0x7f00000006c0)=0x9c) (async)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000700)={r3, 0x3, 0x3, 0x0, 0x5, 0x1a7}, &(0x7f0000000740)=0x14) (async)
r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000780), 0x100, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000007c0)={<r11=>r10, 0x7, 0x7, 0x7})
pselect6(0x40, &(0x7f0000000800)={0x100, 0x9, 0x662b, 0x8000000000000001, 0x1000, 0x8, 0x8, 0x5}, &(0x7f0000000840)={0x6, 0x7, 0x4909deaa, 0x8000000000000000, 0x4, 0x98d, 0x7, 0x7}, &(0x7f0000000880)={0xf, 0x80000000, 0x9, 0x1, 0xa, 0x2, 0x81}, &(0x7f00000008c0), &(0x7f0000000940)={&(0x7f0000000900)={[0x771]}, 0x8})
getsockopt$inet_mreqsrc(r11, 0x0, 0xe, &(0x7f0000000980)={@rand_addr, @private, @private}, &(0x7f00000009c0)=0xc)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000a00)={0x6, 'ipvlan0\x00', {0xa7e3}, 0x8})
getsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r6, 0x84, 0x80, &(0x7f0000000a40)={<r12=>r2, 0xfffffffe}, &(0x7f0000000a80)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000ac0)={r12, 0xa8}, &(0x7f0000000b00)=0x8)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xf0, r13, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff324}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfb8d}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x18}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x61d0}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xc}}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x20008002)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x3, 0x3c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, 0x0, &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x66, 0x88e7, 'gre0\x00', 'erspan0\x00', 'macvlan0\x00', 'bond_slave_1\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0x70, 0x118, 0x190, [], [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x1ff, 0xd, 0x0, 0x0, "b59f6fd912dce39009762c84135c6d72b24abbcd0f15e79f747b1e87ecbaa3541349c5feffedb3f9e407d72cadcd11107a2ca122e4d02fc163c28ada8396b6f9"}}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0x6, 0x6, 0x0, 0x0, "13b40914207702df565b4465fa4d6c2d43a862c5a650ed18416a3c311dc178259b2c7055f6f8c4ca9f9a271e521d355026a161be2d6446f81619f82e2d8ec341"}}}}, {0x11, 0x5, 0x8848, 'ip6gre0\x00', 'caif0\x00', 'nr0\x00', 'ip6gre0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@log={'log\x00', 0x28, {{0x1, "051e832ec629b77459e4130f7823bdea303f8be25555d6617c03742e8d27", 0x4}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x3, 0x30, 0x6003, 'syz_tun\x00', 'pimreg0\x00', '\x00', 'ip6gretap0\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@nflog={'nflog\x00', 0x50, {{0xffffff46, 0x9, 0x0, 0x0, 0x0, "56cc7179567ff6bd19e520e252b06465218350729af0c8c333f004c914da57367a93eb4ce784aea2ee1a2e32e9bdce18e60ff54e04b49a37c1a1937799979f4b"}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x440)
unshare(0x6a040000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1010, 0xffffffffffffffff, 0x2000) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_LINK={0x8, 0x5, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
executing program 2:
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280), 0x4c00}], 0x1}, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4122, 0x101a}], 0x1}, 0x406)
prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000000))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060100000000000000000000000000000000000000000000000800030076783000240012800a00010076786c616e00000014000280080001006400000008000300"], 0x4c}}, 0x0)
executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000ac0)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r4 = dup3(r2, r3, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(r5, 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x8880, 0x85)
getdents64(r6, 0x0, 0x4f)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x72, 0x0, 0x7fff0004}]})
close_range(r7, 0xffffffffffffffff, 0x0)
executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6, 0x400, 0x7}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$cgroup_pid(r0, &(0x7f0000000440), 0x12)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x1, 0x8001, {0x0, 0x0, 0x0, 0x0, 0x8002, 0x8}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x852f, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffb3bf, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x100}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000001}, 0x0)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 12, 30, 36, 26, 29, 4, 19, 4, 10, 25, 25, 10, 4, 11, 30, 7, 8, 5, 30, 13, 7]
detailed listing:
executing program 3:
r0 = msgget$private(0x0, 0x1c0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
msgsnd(r0, &(0x7f0000006000)=ANY=[@ANYBLOB="01000700000000004ddb5035e604be595639c235103b512133a747da8da08f280f05ca0abc081efbfd69a53158034590eab7e016ca501e26994a5a94d0450f031312d2d8d439098113a83c627bfae030ad450cfbcba5ed627b06"], 0x8, 0x0)
msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001c0000000000"], 0x8, 0x0)
msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x9e, 0x0)
msgctl$IPC_RMID(r0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x1000000, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x1, 0x0, 0x0)
read$FUSE(r1, &(0x7f00000003c0)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000002400)={0x50, 0x0, r2, {0x7, 0x2b, 0x7, 0x800, 0x101, 0x2, 0x2, 0x3ff, 0x0, 0x0, 0x1}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000002480)="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", 0x2000, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004540)={0x78, 0x0, 0x6, {0x3ff, 0x200100, 0x0, {0x4, 0x8000000000000001, 0xfffffffffffffc01, 0x2000000000000, 0xf, 0x3ff, 0xaa62, 0x6, 0xbfb, 0x1000, 0x0, r3, r4, 0x3ff, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_io_uring_setup(0x214c, &(0x7f0000004740)={0x0, 0x50ab, 0x0, 0x2, 0xfd}, &(0x7f00000047c0)=<r5=>0x0, &(0x7f0000004800), &(0x7f0000004840))
syz_io_uring_setup(0xf00, &(0x7f0000004880)={0x0, 0x5961, 0x10000, 0x0, 0x51}, &(0x7f0000004900)=<r6=>0x0, &(0x7f0000004940)=<r7=>0x0, &(0x7f0000004980)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f00000049c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004a40)=[{&(0x7f0000004a80)=""/4096, 0x1000}, {0x0}], 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
syz_io_uring_submit(r5, r7, 0x0, &(0x7f0000005b00)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000005a80)={0x480, 0x10, 0x4}, &(0x7f0000005ac0)='./file0\x00', 0x18, 0x0, 0x23456})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000045c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, <r9=>0xee00}}, './file0\x00'})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$kcm(0x11, 0x200000000000002, 0x300)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000005b80)=@base={0x6, 0x4, 0x8, 0x100, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000005c00)={0x1, 0xb, &(0x7f0000005cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@map_fd={0x18, 0x1, 0x1, 0x0, r12}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x80000000}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000005d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000005d80)=r13, 0x4)
sendmsg$nl_generic(r10, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000005e40)={0x14, 0x26, 0x101, 0x70bda3, 0xfffffffc, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x8015}, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000004600)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
r15 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r16 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r16, &(0x7f0000005e80)={0x0, 0x0, &(0x7f0000005ec0)={&(0x7f0000005f00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0xc4}}, 0x0)
ptrace(0x10, r15)
ptrace$poke(0x5, r15, &(0x7f0000004680), 0x6)
r17 = fcntl$getown(0xffffffffffffffff, 0x9)
msgctl$IPC_SET(r0, 0x1, &(0x7f00000046c0)={{0x1, r3, r9, 0xee00, r14, 0x0, 0x9910}, 0x0, 0x0, 0x4a, 0x8, 0x5, 0x3ff, 0xc, 0xcb5a, 0x8, 0xee2c, r15, r17})
executing program 3:
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000400)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x6})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
syz_ublk_setup_io_uring(0x3b51, &(0x7f0000000000)={0x0, 0xcf7b, 0x20, 0x3, 0x1c9}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x4, 0x10, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000e13436fba139a76f000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b7"], 0x2c}}, 0x0)
mmap$IORING_OFF_SQES(0x0, 0x4, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000)
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2211080, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grouq_wd=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,dont_measure,seclabel,rootcontext=system_u,smackfsroot=-)((!,defcontext=user_u,\x00'], 0x0, 0x0, &(0x7f0000000440)="20bdf339850f2081fd293a10e25a4b9c20f3b64b317a7377b97a73eb824fb0f44c5d8ec341223d4e0bb833fc2dce8b2a32e6d43d12d5acfd88c74cdecd010cd7122629a51a79b4b2d8abc7e8634dbeda4f2ff453244aeb5da1663587e5d83631168e1aef1a86b0106de7c65e66971812a77c20fa6c34f178214d7665ceb0d457b19850378f36725f9644f75ad7fda669f39fded67ac7d8b85cb5f18c33e034edd4d8e775ed5be94ec5f8155fce61c5ad8e857f13059f4c7855becf3ef347b99c1cc89a0aafe573e284d83233a3060f23446f441ffe274000a484e6f8")
openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x404002, 0x81)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000340), 0x0}, 0x20)
syz_open_procfs(0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000680)={0x9, {"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", 0x1061}}, 0x1006)
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff}, 0x800)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000001f40))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001700)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
syz_mount_image$ext4(&(0x7f0000001800)='ext4\x00', &(0x7f0000001840)='./file2\x00', 0x28180bf, &(0x7f0000000580), 0xff, 0x52f, &(0x7f0000001f80)="$eJzs3U9vG2kZAPBnJvZu0mbXWeAAK7G7YhelFdRJNnQ34rALEuK2Emi5l5C4URQnrhJn20QVpOIDICEElbjAiQsSHwAJ9SMgpEr0jgCBELRwAKkwyPa4dRI7cRUn7sa/nzTxO388z/PGM+P3nRl5AhhZb0TEpYjIsiy7HBGlfHqaD7HXGhrLPXp4e6kxJJFlH/49iSSf1l7Xi/nrxfxt4/n4d5LDcbd2dtcWq9XKZj4+U19PHmfZ7pXV9cWVykplY35+7p2FdxeuLswOpJ5TEfHe1/784x/84uvv/eaLN/9w7a+XvtuqYEtnPaIj95NqVb24b32FiNgc0PqfB4VmDVuuDjkXAACO1mjvfyIiPhcRl6MUY83WXB8G1UAGAAAATl32/mQ8TlrX/wAAAIDzKY2IyUjScn6/72Skabncuof3U3Ehrda26l/ISk/OF0xFMb2+Wq3M5vcOTEUxaYzP5ffYtsffPjA+HxGvRMSPShPN8fJSrbo81DMfAAAAMDouHuj//6vU6v8DAAAA58zUsBMAAAAATp3+PwAAAJx/+v8AAABwrn3jgw8aQ9Z+/vXyRzvba7WPrixXttbK69tLY1HbvFFeqdVWmr/Zt37c+qq12o0vxcb2rZl6Zas+s7Wze229tr1Rv7bqiYEAAAAwLK+8fu9BEhF7X55IIyJLOuYVI7KxzoULZ58fcHrSZ1n4T6eXB3D2xoadADA0mvQwuorDTgAYuuOOAz1v3vnt4HMBAABOx/Rn7j2I1vX/5tDwQj4vGWZiwKnLr/8n9nUYPa7/w+hy/Q9GV/GoFoBOAZx7aR+7+smv/2fZMyUFAAAM3GRzSNJy3g+YjDQtlyNeaj4WoJhcX61WZiPi5Yj4fan4YmN8rvnOxOkBAAAAAAAAAAAAAAAAAAAAAAAAAOhTliWR9TCRPx2s13wAAADg4yEi/UuSP/9ruvTW5MHzAy8k/y41XyPi5k8//MmtxXp9c64x/R9Pptfv5tPf3vfWu+lZncQAAAAA9mn309v9eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpEcPby+1h7OM+7evRsRUR/wk8viFGG++jkcxIi78M4lCx/uSiBgbQPy9OxHx6W71TxppxVSexcH4aURMDDn+xQHEh1F2r3H8+Uq3/S+NN5qv3fe/Qj6c1KHjX0f89vFvrMfx76VuK0wPT3r1/q9mesa/E/Fqofvxpx0/6RH/zT7r+O1v7e72mpf9PGK66/dPsi/WTFK4MbO1s3tldX1xpbJS2Zifn3tn4d2FqwuzM9dXq5X8b9cYP/zsr/93VP0vRIz3Ov4eVf+3+qz/f+/fevjJVrF4YFYxfpZll958Wv80nn7/tv7/8f7B+O3vvs/nH3djfLpd3muVO732y9+99nqP3CbuRCz3+P8f8/l32dK6u/zN7/+x32UBgNO3tbO7tlitVja7Flpti31Tkp4Ldyu0mwx9LdxXIQa0nnNUSPaeizSOKEwMcAM4trAYRy3T3iLPIJ/vDXzjP7bwn6znrMKz7mgAAMA587TRP+xMAAAAAAAAAAAAAAAAAAAAYHQd9zNgceKfJXv5UMy9odQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBo/w8AAP//LXK++w==")
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
executing program 8:
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000200)={0x2, 0x0, 0x2, 0x84800})
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000300)={0x3, 0x8, 0x7, 0x3, 0x2, [0x5, 0xfd24, 0x8, 0x4]})
r2 = syz_open_dev$video(&(0x7f0000000140), 0x101, 0xab02)
ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000180)={0xa, {0xf8000002, 0x4, 0x27, 0xfffffffa}})
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8810, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@dax_inode}]}, 0x1, 0xbf2, &(0x7f0000001e80)="$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")
pipe2(&(0x7f0000000280)={<r3=>0xffffffffffffffff}, 0x0)
splice(r3, &(0x7f00000002c0)=0x100000001, r3, 0x0, 0xa, 0x4)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200000, &(0x7f0000000040)='\x8f]\x80\xa4Y\xddr\x9a\a\xc5a\x1f\x8c\xed\x92\x85\x91\xc1\x00E\xdf\xd0\x9b\x01w\x8d\xd6\x90\xc9\xe2\xa2\x1e\xd5\x8f\xe3\xac\xbb\x05Z+\x97$\xf6\x14\xa5\x8f\xce\x9c\v\xe4\x99^h\x9e\xe6\xf0)/\xd4\xe8\xfc\xa5\x96|)^H(\x14\xb7C\x15p\x16\xe8\xe2\xe1)\xca\x89T\x9ff*\x13\x94\x8eh\xfe\xb6\xbaN\xf5i\x01,\xf7I\xc5\xaeL\xfc;\xee\xda\xb1\x9b\xc1\xcd\x0ep\xc4\xe0Dy\xf5+f\x02\xd2\xb8\x1a\xfb\xd1&\x93Q\x87\xbf \xa8MP\x14\xea\x0fI\xc3\xfc\xf8D\x1c+\xf2\x88\xe8w^\x89\xd7\xae\xd1IY\x1f#\xd3\x14\xcd\x14Y\x04\xac\t3C\x8f\xbc\x02i[\x8d+\xb04+U2VK\xd8\xa2\xd1\x02-\xef7\x0f\x19V\x19*\xcf\xcd`\x87\x9fRz\x86\xa5\xa2\xec\xf8')
r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "0fddbba9c4dc1060a974f59447920f35cb98c40f28b65df19728c4bca8e03b435fba5df5ca799607fd6cf7bebb89645da58f1b0eebc2cb7e03097f57bb786b36", 0x34}, 0x48, r4)
executing program 3:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/sockcreate\x00')
r1 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}, 0x1, 0x0, 0x0, 0x4040041}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000880)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/16, 0x10}, 0x81}], 0x1, 0x820b, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000940)=0x8, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000980)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c)
sendto$inet6(r3, &(0x7f00000009c0), 0x3000, 0x0, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000840)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
readlinkat(r0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)=""/72, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000003c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00')
pwritev(r6, &(0x7f0000000240)=[{&(0x7f0000000280)='0', 0x1}, {0x0, 0xa00}], 0x2, 0x0, 0x0)
renameat2(r6, &(0x7f00000002c0)='./mnt\x00', r0, &(0x7f0000000300)='./mnt\x00', 0x1)
sendmsg$NFT_BATCH(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a010400000000000000000200ffff540004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180fffffffd140001800c0001006e6f747261636b00040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}}, 0x0)
pipe2(&(0x7f0000000a00), 0x80000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000bc0)={&(0x7f0000510000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000117000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000083f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c4a000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68)
brk(0x20000001)
openat$zero(0xffffffffffffff9c, &(0x7f0000000c40), 0x80002, 0x0)
r7 = syz_io_uring_setup(0xf00, &(0x7f0000000c80)={0x0, 0x595f, 0x400, 0x0, 0x51}, &(0x7f0000000d00)=<r8=>0x0, &(0x7f0000000d40)=<r9=>0x0, &(0x7f0000000d80)=<r10=>0x0)
syz_io_uring_submit(r8, r9, r10, &(0x7f0000000dc0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000000e40)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r7, 0x7c65, 0xa334, 0x1, 0x0, 0x0)
executing program 8:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000d80), 0x82084, 0x0)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000dc0)={0x1, 0x0, 0x2, 0x9d9, 0x87, "5c71060f000000000100020000002000000400", 0x0, 0x3})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000e00)=0x2)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200ffff48000480440001800b000100657874686472000034000280050002009400000008000340000000f508000440000000010800064000000001080001400000001308000540000000010900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x50000)
r3 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x800, &(0x7f00000004c0), 0x26, 0x75d, &(0x7f0000000500)="$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")
r4 = openat(r3, &(0x7f0000000c80)='./file0\x00', 0x0, 0x2)
ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000cc0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000d40)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800010301000d00000000000a410000ff0300060000000014000100fe"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, 0xffffffffffffffff)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x501480, 0xa, 0x20}, 0x18)
openat(r6, &(0x7f00000001c0)='./file0\x00', 0x448100, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000d80), 0x82084, 0x0) (async)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000dc0)={0x1, 0x0, 0x2, 0x9d9, 0x87, "5c71060f000000000100020000002000000400", 0x0, 0x3}) (async)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000e00)=0x2) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200ffff48000480440001800b000100657874686472000034000280050002009400000008000340000000f508000440000000010800064000000001080001400000001308000540000000010900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async)
syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x50000) (async)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x800, &(0x7f00000004c0), 0x26, 0x75d, &(0x7f0000000500)="$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") (async)
openat(r3, &(0x7f0000000c80)='./file0\x00', 0x0, 0x2) (async)
ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000cc0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000d40)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800010301000d00000000000a410000ff0300060000000014000100fe"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, 0xffffffffffffffff) (async)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x501480, 0xa, 0x20}, 0x18) (async)
openat(r6, &(0x7f00000001c0)='./file0\x00', 0x448100, 0x1) (async)
executing program 8:
r0 = socket$netlink(0x10, 0x3, 0x10) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000239000/0x1000)=nil)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000b40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000c40), 0x366, 0x10, &(0x7f0000000c80), 0x1dd}, 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000d00)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="05"], 0x10)
close(r4) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d40)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{r5}, &(0x7f0000000dc0), &(0x7f0000000e00)=r4}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{r5}, &(0x7f0000000e80), &(0x7f0000000ec0)=r6}, 0x20)
r8 = syz_mount_image$ext4(&(0x7f0000000f00)='ext4\x00', &(0x7f0000000f40)='./bus\x00', 0x321081a, &(0x7f0000000f80)={[{@acl}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000fc0)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0xc0406618, &(0x7f0000001440)={@desc={0x1, 0x0, @desc2}}) (async)
ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000340)={<r9=>0xffffffffffffffff})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="100000000b0000fb600000000000225d0000d5bc7c850d44bec304c40b70239500080000000000180000000200a0cb072c4f2739b809c800"/65, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x9e, &(0x7f0000000400)=""/158, 0x41100, 0x50, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xe, 0x4, 0x69}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x5, 0x3, 0xa, 0x4}], 0x10, 0x400}, 0x94)
r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680), 0x4)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0xc3b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x14}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r10}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r11}]}]}, 0x4c}}, 0x40080c0)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
unshare(0x400)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2})
executing program 1:
listen(0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000a40)=[{{&(0x7f0000000dc0)={0xa, 0x0, 0x400000, @private2}, 0x1c, &(0x7f0000001f00)=[{&(0x7f0000001f40)="9220", 0x2}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_EVENT(r1, 0x84, 0x7f, &(0x7f0000001f80)={0x0, 0x800a}, &(0x7f0000001fc0)=0x8)
connect$unix(r0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000b00)={0x2, 0x4e20, @multicast1}, 0x10)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e00, 0x400, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x2}, 0x1c)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x41}, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x2a5, 0xfffffffffffffffd}, {0x0, 0x1, 0xcc}, {0xf6}, 0x70bd2c, 0x0, 0xa, 0x1, 0x9}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "6373d35c068802b64119bede480ee04af6f4885d384d5f660fe922"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x8000, @local}, 0x1c)
connect$inet(r2, &(0x7f0000000b40)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0), 0x1, 0x4bc, &(0x7f0000000500)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00), &(0x7f0000000a40)=ANY=[], 0x361, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0), &(0x7f0000000d80), 0x2, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000080)={0x8d, 0x100000, 0xa0000, {r6}}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000bc0)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xb0b, 0x49, 0x66c1, 0x9, 0x31ba, 0x7207}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0x400, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r8, {}, {0xfff2, 0x2}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x9, 0x9, 0xd, 0x8000, 0xfffffffe, 0x0, 0x100, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c5}, 0xc091)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='cmdline\x00')
exit(0xffff)
preadv(r9, &(0x7f0000000200)=[{&(0x7f0000000ec0)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76)
sendmsg$inet(r2, &(0x7f0000000e00)={0x0, 0x14, &(0x7f0000000e40)=[{&(0x7f0000000e80)=' ', 0xffffff1f}], 0x1}, 0x0)
executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0xffff20a9, 0x3}]}, 0xc, 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'batadv_slave_1\x00', &(0x7f0000002fc0)=@ethtool_stats={0x4b, 0xf}})
executing program 3:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x185e0b12a06f626e}, 0xc)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000240)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)="9c", 0x1}], 0x1}}], 0x1, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000340)=@assoc_value={<r3=>0x0}, &(0x7f0000000380)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000003c0)={r3, 0x9}, 0x8)
r4 = getpgid(0x0)
ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000580)={&(0x7f0000000500)=""/89, 0x59})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='cmdline\x00')
exit(0xffff)
preadv(r5, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000400)={0x7, 0x8, 0x1f, 0x0, r3}, &(0x7f0000000440)=0x10)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x7, 0x4)
r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000100)={0x0, @win={{0x0, 0x900, 0x9, 0x7}, 0x4, 0xd4, 0x0, 0x8a7, 0x0, 0x9}})
r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xe1, &(0x7f00000004c0)={0x0, 0x3, 0x1, 0x2}, 0x8, 0x200, 0x8, 0x0, 0x0, 0x8000, 0x0})
executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x320, 0x168, 0x10, 0x0, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x128, 0x150, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x5, 0x10000, 0x80000001, 0x82}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x3cd}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) (async)
r1 = getpid()
syz_clone3(&(0x7f0000000500)={0x124000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r1], 0x1}, 0x58)
executing program 0:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x8)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0xd1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x5}}, './file0\x00'})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r3=>0x0})
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00')
syz_fuse_handle_req(r4, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lseek(r4, 0xffffffffffffffff, 0x1)
ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f00000000c0)={0x28, 0x4, r3, 0x0, 0x6, 0x2})
executing program 1:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/unix\x00') (async)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/unix\x00')
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x2208810, &(0x7f0000000b00)={[{@auto_da_alloc}, {@usrquota}, {@nodioread_nolock}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}, {@grpjquota}]}, 0xfe, 0x572, &(0x7f0000000380)="$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")
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) (async)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10)
bind$inet6(r1, &(0x7f0000000b80)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b)
syz_emit_ethernet(0x6e, &(0x7f0000000bc0)={@broadcast, @random="b4cdded7d4e2", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @private1, @mcast2, {[], @time_exceed={0x4, 0x2, 0x0, 0x7, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @private2, @rand_addr=' \x01\x00', [@dstopts={0x84}]}}}}}}}, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x0)
r2 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x9c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x20000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8, 0x8000}, {0xc, 0x2, 0x5, 0xfffc, 0x44, 0x8}, 0x78, 0xfffffffe, 0x6}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xc}}]}, 0x9c}}, 0x24040084)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000340)={'bond0\x00', 0x2}) (async)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000340)={'bond0\x00', 0x2})
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f00000009c0)=[{{&(0x7f0000000a00)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000a80)="92", 0x1}], 0x1}}], 0x1, 0x20000800)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000ac0)={0xec, 0x3, 0x3, 0x3, 0xbd, 0x3, 0x4, 0x4, 0x5, 0x2, 0xa0, 0x1f, 0x2, 0x4}, 0xe)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4)
write(r0, 0x0, 0x0)
executing program 0:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000380)='./bus\x00', 0x800804, &(0x7f00000001c0)=ANY=[@ANYBLOB="756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c757466383d312c757466383d312c636865636b3d72656c617865642c726f6469722c726f6469722c757466383d302c726f6469722c696f636861727365743d63703836392c757466383d302c696f636861727365743d6b6f69382d722c73686f72746e616d653d77696e39352c696f636861727365743d6575632d6a702c747a3d5554432c6e6f6e756d7461696c3d302c726f6469722c756e695f786c6174653d302c73686f72746e616d653d77696e39352c0037e66f94a626f69f74340b0078494e6db1dd4c69a19c1cc35775d2ab9eb50bca69eeddf187a9dd44097d7a69a271f917439ca98ae8e7b56d063cb25005693152e151c469929f57ee28be9199b1ec3a73bc6c33523eec157bc68eeaab19c92f9a350bb71d33b9889dc81c41baf97578bed0bdb8726e216c96c40b53a8022ab12990272f9bee7731c9dcbcbfd7d0876ac6fa7fd543f4df7a0cbb843eea8be122f228160f636c4b85f4496825a31106b063aede34505cc9b54eafeee55b84f9c684df374efb9fabd22930a1f82aed4777883a6daa8287bf00000000"], 0x1, 0x275, &(0x7f00000003c0)="$eJzs3U9qG1ccB/DfWJIttQtp0VUpeKBddGXsnsCmuFBqKLRo0XbRmNiGYAmDDYL8IYpXOUFOkPNkE3KBHCAhu3hhMkGekayEkY0S2TLJ57PR4733nfd7M4O0mtGtH7r7OwdHe8cPXka9nsTCeqzHSRKtWIihR1HqxevyfgDghjvJsniT5ZZKZ9QmJKsLV1oYAHBlxn//510LAHA9/v7n3z82trY2/0rTekT3ca+dRP6Zj2/sxZ3oxG6sRjNOI7KRvP3b71ubUU0HWvFTt99rD5Ld/58Vx994FXGWX4tmtMrza2luLN/vtWvxzXD9JOLPp9GM78rzv5Tko70YP/84Vv9KNOP57TiITuwUtQ3zD9fS9Nfsydv7/w16B/mk32svjeYVsyvXemEAAAAAAAAAAAAAAAAAAAAAAPiiraQjrQ/fv1M5PRtfmTSe5ye9H6g/9n6e1TRNsySff56vxvfVqM5z7wAAAAAAAAAAAAAAAAAAAHBTHN29t7/d6ewezrQxfKy/ZCjezXKt5WlTUSlK6yQR061VK5KXT65MuYvGoJ7dw6Qas7sEyainMT60HPlag55G3hjr+ezV63HWGN5d+9tJXJKql90kM2hkJbdfZWJq8eOeRrGDksmNC1Zf/PaTas6aE4aSiKiNTubFx6nN9hxe1zcQAAAAAAAAAAAAAAAAAAAwdP7Qb8ng8RwKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA5OP///yka/SI8aU5WGTSqUfTMeYsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8Bd4HAAD//4qtaNI=")
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000009c0)="7638b66a65585578f830e9000000ba", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x101042, 0x15)
pwrite64(r3, &(0x7f0000000a40)='2', 0xfdef, 0xc00)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a80)={<r4=>0xffffffffffffffff})
pipe2(0x0, 0x80000)
write(r4, &(0x7f0000000ac0), 0xffffff4a)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2a, &(0x7f0000000640)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000680)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
close(r6)
pipe2$watch_queue(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
sendfile(r8, r7, 0x0, 0x0)
executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000100000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x69f, r1}, 0x38) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000140)=0x10) (async)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040f0400040408"], 0x7) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x400, @private2, 0x4}}, 0x5b, 0x7fff}, 0x90)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x9, r1}, 0x38) (async)
sendmsg$nl_generic(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4) (async)
recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000d40)=""/4081, 0xe5c}, {&(0x7f0000001d40)=""/36, 0x24}, {&(0x7f0000001dc0)=""/141, 0x8d}], 0x3}, 0x3}], 0x1, 0x40000042, 0x0)
executing program 8:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x3b, @local, 0xb}, 0x1c)
listen(r0, 0x402)
syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @random="0b475173ddd4", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x3, 0xf}, @mptcp=@mp_fclose={0x1e, 0xc, 0x6c, 0x0, 0x9}]}}}}}}}}, 0x0)
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='3', 0x4e)
setsockopt(r1, 0x8, 0x7, &(0x7f0000000380)="ddecbcb8b9c9efbbaf72be9c3517e1ea80f6fd765e81559e77a3ef76e64ecae06834835b5c5c6acb4d081657136cdee8e2890a6094d01810e74f17b75d41b10a5a76d4e39543ebafb1d346459f568e72bb995ec9635ff3917f0f2b8cf4efba7cea09b92b2d9aa58fb5ec6f517e84663288ab8628f629a27f161615b08d36f746e1016420d68239d54d2a16ac5f137a849cdbdc6928f38c3291fb273f689e10be983b52a6c9a03e73f145e1", 0xab)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000340)=""/3, 0x26, 0x3, 0x1, 0x9}, 0x28)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
executing program 0:
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={<r1=>r0})
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000b, 0x40010, r1, 0xa7b8e000) (async)
getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r0, 0x84, 0x85, &(0x7f0000000180)={<r2=>0x1, @in={{0x2, 0x4e22, @local}}, 0xfffffffe}, &(0x7f0000000240)=0x90)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000280)={<r3=>r2, 0x100}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={<r4=>r3, 0x2}, &(0x7f0000000340)=0x8) (async)
r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder-control\x00', 0x2, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f00000003c0)) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r6, 0x84, 0x25, &(0x7f0000000400)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0x9, 0x7}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000004c0)={r2, 0x7}, 0x8) (async)
close_range(r5, r5, 0x0)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r6, 0x4018f514, &(0x7f0000000500)={0x1, 0x2, 0x3}) (async)
r7 = socket(0x31, 0x6, 0xfffffffd)
r8 = geteuid()
quotactl_fd$Q_GETINFO(r5, 0xffffffff80000501, r8, &(0x7f0000000540)) (async)
r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000580)='/dev/comedi3\x00', 0x602, 0x0)
ioctl$COMEDI_BUFCONFIG(r9, 0x8020640d, &(0x7f00000005c0)={0x4, 0x376e188b, 0x8, 0x5})
getsockopt$inet_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000600)=""/156, &(0x7f00000006c0)=0x9c) (async)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000700)={r3, 0x3, 0x3, 0x0, 0x5, 0x1a7}, &(0x7f0000000740)=0x14) (async)
r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000780), 0x100, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000007c0)={<r11=>r10, 0x7, 0x7, 0x7})
pselect6(0x40, &(0x7f0000000800)={0x100, 0x9, 0x662b, 0x8000000000000001, 0x1000, 0x8, 0x8, 0x5}, &(0x7f0000000840)={0x6, 0x7, 0x4909deaa, 0x8000000000000000, 0x4, 0x98d, 0x7, 0x7}, &(0x7f0000000880)={0xf, 0x80000000, 0x9, 0x1, 0xa, 0x2, 0x81}, &(0x7f00000008c0), &(0x7f0000000940)={&(0x7f0000000900)={[0x771]}, 0x8})
getsockopt$inet_mreqsrc(r11, 0x0, 0xe, &(0x7f0000000980)={@rand_addr, @private, @private}, &(0x7f00000009c0)=0xc)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000a00)={0x6, 'ipvlan0\x00', {0xa7e3}, 0x8})
getsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r6, 0x84, 0x80, &(0x7f0000000a40)={<r12=>r2, 0xfffffffe}, &(0x7f0000000a80)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000ac0)={r12, 0xa8}, &(0x7f0000000b00)=0x8)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xf0, r13, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff324}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfb8d}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x18}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x61d0}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xc}}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x20008002)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x3, 0x3c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, 0x0, &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x66, 0x88e7, 'gre0\x00', 'erspan0\x00', 'macvlan0\x00', 'bond_slave_1\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0x70, 0x118, 0x190, [], [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x1ff, 0xd, 0x0, 0x0, "b59f6fd912dce39009762c84135c6d72b24abbcd0f15e79f747b1e87ecbaa3541349c5feffedb3f9e407d72cadcd11107a2ca122e4d02fc163c28ada8396b6f9"}}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0x6, 0x6, 0x0, 0x0, "13b40914207702df565b4465fa4d6c2d43a862c5a650ed18416a3c311dc178259b2c7055f6f8c4ca9f9a271e521d355026a161be2d6446f81619f82e2d8ec341"}}}}, {0x11, 0x5, 0x8848, 'ip6gre0\x00', 'caif0\x00', 'nr0\x00', 'ip6gre0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@log={'log\x00', 0x28, {{0x1, "051e832ec629b77459e4130f7823bdea303f8be25555d6617c03742e8d27", 0x4}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x3, 0x30, 0x6003, 'syz_tun\x00', 'pimreg0\x00', '\x00', 'ip6gretap0\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@nflog={'nflog\x00', 0x50, {{0xffffff46, 0x9, 0x0, 0x0, 0x0, "56cc7179567ff6bd19e520e252b06465218350729af0c8c333f004c914da57367a93eb4ce784aea2ee1a2e32e9bdce18e60ff54e04b49a37c1a1937799979f4b"}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x440)
unshare(0x6a040000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1010, 0xffffffffffffffff, 0x2000) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_LINK={0x8, 0x5, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
executing program 2:
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280), 0x4c00}], 0x1}, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4122, 0x101a}], 0x1}, 0x406)
prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000000))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060100000000000000000000000000000000000000000000000800030076783000240012800a00010076786c616e00000014000280080001006400000008000300"], 0x4c}}, 0x0)
executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000ac0)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r4 = dup3(r2, r3, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(r5, 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x8880, 0x85)
getdents64(r6, 0x0, 0x4f)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x72, 0x0, 0x7fff0004}]})
close_range(r7, 0xffffffffffffffff, 0x0)
executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6, 0x400, 0x7}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$cgroup_pid(r0, &(0x7f0000000440), 0x12)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x1, 0x8001, {0x0, 0x0, 0x0, 0x0, 0x8002, 0x8}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x852f, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffb3bf, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x100}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000001}, 0x0)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-setsockopt$inet_IP_XFRM_POLICY-socket$packet-setsockopt$packet_int-prctl$PR_SET_TAGGED_ADDR_CTRL-recvmmsg-lsetxattr$trusted_overlay_upper
detailed listing:
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$eJzs3M9vFFUcAPDvzLaA/GpF/AGiVomx8UdLCyoHLxpNPGA00QPqqbaFEAo1tCZCiFRj8GJiSPSsHk38C7x5MerJxMST3g0JUS6gp5qZnSnd7S7d0qVbu59PMvDeztuZ9903b+bNvN0G0LUGsn+SiO0R8XtE9FWztQUGqv9dv3p+/J+r58eTmJ9//a8kL3ft6vnxsmj5vm1FZjCNSD9Oip3Umjl77uTY1NTkmSI/PHvq3eGZs+eeOnFq7Pjk8cnTo4cPHzo48uwzo0+3Jc4srmt7P5jet+flNy+9Mn700js/fZvVd3uxfnEct2TT0pcGssD/ns/Vr3s07ljV7tabHYvSSU8HK8KKVCIia67evP/3RSVuNF5fvPRRRysH3FbZtWlz89Vz88AGlkSnawB0Rnmhz+5/y2WNhh7rwpXnqzdAWdzXi6W6pifSokxv3f1tOw1ExNG5f7/MlmjHcwgAgGV8Ov7FkXiy0fgvjXsWldtZzKH0R8SdEbErIu6KiN0RcXdEXvbeiLhvhfuvnxpaOv5JL99SYC3Kxn/PFXNbteO/cvQX/ZUityOPvzc5dmJq8kDxmQxG7+YsP7J00wsb+P7FXz9rtv/F479syfZfjgWLzVzuqXtANzE2O5YPStvgyocRe3saxZ8szAQkEbEnIvaubNM7y8SJx7/Z16zQ8vHfRBvmmea/jnis2v5zURd/Kbn5/OTwlpiaPDBcHhVL/fzLxdea7X9V8bdB1v5ba4//Ys1XZ4tE/9uL52tnYsUzlxf/+KTpPc2tHv+bkjfy81E57fr+2OzsmZGITcmRPF/z+uiN95b5snwW/+D+xv1/V/GerP3vj4jsIH4gIh6MiIeKuj8cEY9ExP6bxP/jC83XrYf2n2h4/ls4/vuTmvZfeaJy8ofvmu2/tfY/lKcGi1fy898yWq3gaj47AAAA+L9I8+/AJ+nQQjpNh4aq3+HfHVvTqemZ2SeOTb93eqL6Xfn+6E3LJ119i56HjiRzxRar+dHiWXG5/mDx3PjzSuT5ofHpqYkOxw7dbluT/p/5s9Lp2gG3XaN5tNEGP2gDNp76/p/WZi+8upaVAdaU32tD91qm/6drVQ9g7bn+Q/dq1P8v1OXNBcDG5PoP3Uv/h+6l/0P3quv/lfitUzUB1tBqftff9sSWWBfVkGglEem6qEZLidb/HsTtTry1PqrRQqLTZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2+C8AAP//9sDvmA==")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program did not crash
bisect: split chunks (needed=true): <22>
bisect: split chunk #0 of len 22 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 25, 10, 4, 11, 30, 7, 8, 5, 30, 13, 7]
detailed listing:
executing program 1:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/unix\x00') (async)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/unix\x00')
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x2208810, &(0x7f0000000b00)={[{@auto_da_alloc}, {@usrquota}, {@nodioread_nolock}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}, {@grpjquota}]}, 0xfe, 0x572, &(0x7f0000000380)="$eJzs3V9rm9UfAPDvk6bdn26/dTDGTy+ksAsnc+na+meCF/NSdDjQ+xnarIymy2jSsdaB24W78UaGIOJAfAHeezl8A76KgQ6GjqIX3lSe9EmXNUmbtpnpzOcDac95npOcc/I85+R78iQkgIE1nv7JRbwUEV8lEcea9uUj2zm+Xm71ya2Z9JbE2trHvyeRZNsa5ZPs/2iW+X9E/PxFxJlca73V5ZX5YrlcWszyE7WF6xPV5ZWzVxeKc6W50rWp6enzb05PvfP2Wz3r62uX/vr2owfvn//y1Oo3Pz46fi+JC3Ek29fcjz243ZwZj/HsORmOC5sKTvagsv0k6XcD2JWhbJwPRzoHHIuhbNQD/32fR8QaMKAS4x8GVCMOaKzte7QOfmE8fm99AdTa//z6eyNxsL42OryaPLMySte7Yz2oP63jp9/u30tv0bv3IQC2dftORJzL51vnvySb/3bvXBdlNtexw/lvbYdNApo8SOOf19vFP5WsxMH6383xz2ibsbsb24//3KMeVNNRGv+92zb+3bhoNTaU5Y7WY77h5MrVcimd2/4XEadj+ECa3+p6zvnVhx3nqafx30g9Bkzrb8SCWTse5Q88e5/ZYq24lz43e3wn4uW28W+yEf8mbY5/+nxc6rKOk6X7r3Ta1xz/tu//87X2Q8Sr2fG//cya6OkVrWTr65MT9fNhonFWtPrz7slfOtXfuf9Hn0NvW6XH/3Db83+j/2NJ8/Xa6s7r+P7g36VO+7Y//u3P/5Hkk3p6JNt2s1irLU5GjCQftm6fenrfRr5RPu3/6VPtx/9W5/+hiPi0y/7fPXG3Y9F+n/9p/2d3dPx3nnj4wWffdaq/u+P/Rj11OtvSzfzXbQP38twBAAAAAADAfpOLiCOR5Aob6VyuUFj/fMeJOJwrV6q1M1cqS9dmo/5d2bEYzjWudI82fR5iMvs8bCM/tSk/HRHHI+LroUP1fGGmUp7td+cBAAAAAAAAAAAAAAAAAABgnxjt8P3/1K9D/W4d8Nz5yW8YXNuO/1780hOwL3n9h8Fl/MPgMv5hcBn/MLjySb9bAPSL138YXMY/DC7jHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq0sWL6W1t9cmtmTQ/e2N5ab5y4+xsqTpfWFiaKcxUFq8X5ho/ELKw5YMlf0S5Urk+ORVLNydqpWptorq8cnmhsnStdvnqQnGudLk0/G90CgAAAAAAAAAAAAAAAAAAAF4w1eWV+WK5XFqUkNhVIr8/miGxnmgM7D0/YH/nJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo9k8AAAD//24dNcY=")
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) (async)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10)
bind$inet6(r1, &(0x7f0000000b80)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b)
syz_emit_ethernet(0x6e, &(0x7f0000000bc0)={@broadcast, @random="b4cdded7d4e2", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @private1, @mcast2, {[], @time_exceed={0x4, 0x2, 0x0, 0x7, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @private2, @rand_addr=' \x01\x00', [@dstopts={0x84}]}}}}}}}, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x0)
r2 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x9c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x20000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8, 0x8000}, {0xc, 0x2, 0x5, 0xfffc, 0x44, 0x8}, 0x78, 0xfffffffe, 0x6}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xc}}]}, 0x9c}}, 0x24040084)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000340)={'bond0\x00', 0x2}) (async)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000340)={'bond0\x00', 0x2})
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f00000009c0)=[{{&(0x7f0000000a00)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000a80)="92", 0x1}], 0x1}}], 0x1, 0x20000800)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000ac0)={0xec, 0x3, 0x3, 0x3, 0xbd, 0x3, 0x4, 0x4, 0x5, 0x2, 0xa0, 0x1f, 0x2, 0x4}, 0xe)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4)
write(r0, 0x0, 0x0)
executing program 0:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000380)='./bus\x00', 0x800804, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x275, &(0x7f00000003c0)="$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")
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000009c0)="7638b66a65585578f830e9000000ba", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x101042, 0x15)
pwrite64(r3, &(0x7f0000000a40)='2', 0xfdef, 0xc00)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a80)={<r4=>0xffffffffffffffff})
pipe2(0x0, 0x80000)
write(r4, &(0x7f0000000ac0), 0xffffff4a)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2a, &(0x7f0000000640)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000680)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
close(r6)
pipe2$watch_queue(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
sendfile(r8, r7, 0x0, 0x0)
executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000100000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x69f, r1}, 0x38) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000140)=0x10) (async)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040f0400040408"], 0x7) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x400, @private2, 0x4}}, 0x5b, 0x7fff}, 0x90)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x9, r1}, 0x38) (async)
sendmsg$nl_generic(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4) (async)
recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000d40)=""/4081, 0xe5c}, {&(0x7f0000001d40)=""/36, 0x24}, {&(0x7f0000001dc0)=""/141, 0x8d}], 0x3}, 0x3}], 0x1, 0x40000042, 0x0)
executing program 8:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x3b, @local, 0xb}, 0x1c)
listen(r0, 0x402)
syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @random="0b475173ddd4", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x3, 0xf}, @mptcp=@mp_fclose={0x1e, 0xc, 0x6c, 0x0, 0x9}]}}}}}}}}, 0x0)
executing program 0:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='3', 0x4e)
setsockopt(r1, 0x8, 0x7, &(0x7f0000000380)="ddecbcb8b9c9efbbaf72be9c3517e1ea80f6fd765e81559e77a3ef76e64ecae06834835b5c5c6acb4d081657136cdee8e2890a6094d01810e74f17b75d41b10a5a76d4e39543ebafb1d346459f568e72bb995ec9635ff3917f0f2b8cf4efba7cea09b92b2d9aa58fb5ec6f517e84663288ab8628f629a27f161615b08d36f746e1016420d68239d54d2a16ac5f137a849cdbdc6928f38c3291fb273f689e10be983b52a6c9a03e73f145e1", 0xab)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000340)=""/3, 0x26, 0x3, 0x1, 0x9}, 0x28)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
executing program 0:
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={<r1=>r0})
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000b, 0x40010, r1, 0xa7b8e000) (async)
getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r0, 0x84, 0x85, &(0x7f0000000180)={<r2=>0x1, @in={{0x2, 0x4e22, @local}}, 0xfffffffe}, &(0x7f0000000240)=0x90)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000280)={<r3=>r2, 0x100}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={<r4=>r3, 0x2}, &(0x7f0000000340)=0x8) (async)
r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder-control\x00', 0x2, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f00000003c0)) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r6, 0x84, 0x25, &(0x7f0000000400)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0x9, 0x7}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000004c0)={r2, 0x7}, 0x8) (async)
close_range(r5, r5, 0x0)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r6, 0x4018f514, &(0x7f0000000500)={0x1, 0x2, 0x3}) (async)
r7 = socket(0x31, 0x6, 0xfffffffd)
r8 = geteuid()
quotactl_fd$Q_GETINFO(r5, 0xffffffff80000501, r8, &(0x7f0000000540)) (async)
r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000580)='/dev/comedi3\x00', 0x602, 0x0)
ioctl$COMEDI_BUFCONFIG(r9, 0x8020640d, &(0x7f00000005c0)={0x4, 0x376e188b, 0x8, 0x5})
getsockopt$inet_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000600)=""/156, &(0x7f00000006c0)=0x9c) (async)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000700)={r3, 0x3, 0x3, 0x0, 0x5, 0x1a7}, &(0x7f0000000740)=0x14) (async)
r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000780), 0x100, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000007c0)={<r11=>r10, 0x7, 0x7, 0x7})
pselect6(0x40, &(0x7f0000000800)={0x100, 0x9, 0x662b, 0x8000000000000001, 0x1000, 0x8, 0x8, 0x5}, &(0x7f0000000840)={0x6, 0x7, 0x4909deaa, 0x8000000000000000, 0x4, 0x98d, 0x7, 0x7}, &(0x7f0000000880)={0xf, 0x80000000, 0x9, 0x1, 0xa, 0x2, 0x81}, &(0x7f00000008c0), &(0x7f0000000940)={&(0x7f0000000900)={[0x771]}, 0x8})
getsockopt$inet_mreqsrc(r11, 0x0, 0xe, &(0x7f0000000980)={@rand_addr, @private, @private}, &(0x7f00000009c0)=0xc)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000a00)={0x6, 'ipvlan0\x00', {0xa7e3}, 0x8})
getsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r6, 0x84, 0x80, &(0x7f0000000a40)={<r12=>r2, 0xfffffffe}, &(0x7f0000000a80)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000ac0)={r12, 0xa8}, &(0x7f0000000b00)=0x8)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xf0, r13, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff324}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfb8d}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x18}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x61d0}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xc}}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x20008002)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x3, 0x3c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, 0x0, &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x66, 0x88e7, 'gre0\x00', 'erspan0\x00', 'macvlan0\x00', 'bond_slave_1\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0x70, 0x118, 0x190, [], [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x1ff, 0xd, 0x0, 0x0, "b59f6fd912dce39009762c84135c6d72b24abbcd0f15e79f747b1e87ecbaa3541349c5feffedb3f9e407d72cadcd11107a2ca122e4d02fc163c28ada8396b6f9"}}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0x6, 0x6, 0x0, 0x0, "13b40914207702df565b4465fa4d6c2d43a862c5a650ed18416a3c311dc178259b2c7055f6f8c4ca9f9a271e521d355026a161be2d6446f81619f82e2d8ec341"}}}}, {0x11, 0x5, 0x8848, 'ip6gre0\x00', 'caif0\x00', 'nr0\x00', 'ip6gre0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@log={'log\x00', 0x28, {{0x1, "051e832ec629b77459e4130f7823bdea303f8be25555d6617c03742e8d27", 0x4}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x3, 0x30, 0x6003, 'syz_tun\x00', 'pimreg0\x00', '\x00', 'ip6gretap0\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@nflog={'nflog\x00', 0x50, {{0xffffff46, 0x9, 0x0, 0x0, 0x0, "56cc7179567ff6bd19e520e252b06465218350729af0c8c333f004c914da57367a93eb4ce784aea2ee1a2e32e9bdce18e60ff54e04b49a37c1a1937799979f4b"}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x440)
unshare(0x6a040000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1010, 0xffffffffffffffff, 0x2000) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_LINK={0x8, 0x5, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
executing program 2:
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280), 0x4c00}], 0x1}, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4122, 0x101a}], 0x1}, 0x406)
prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000000))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060100000000000000000000000000000000000000000000000800030076783000240012800a00010076786c616e00000014000280080001006400000008000300"], 0x4c}}, 0x0)
executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000ac0)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r4 = dup3(r2, r3, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(r5, 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x8880, 0x85)
getdents64(r6, 0x0, 0x4f)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x72, 0x0, 0x7fff0004}]})
close_range(r7, 0xffffffffffffffff, 0x0)
executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6, 0x400, 0x7}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$cgroup_pid(r0, &(0x7f0000000440), 0x12)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x1, 0x8001, {0x0, 0x0, 0x0, 0x0, 0x8002, 0x8}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x852f, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffb3bf, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x100}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000001}, 0x0)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <11>
bisect: split chunk #0 of len 11 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 5, 30, 13, 7]
detailed listing:
executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x3, 0x3c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, 0x0, &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x66, 0x88e7, 'gre0\x00', 'erspan0\x00', 'macvlan0\x00', 'bond_slave_1\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0x70, 0x118, 0x190, [], [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x1ff, 0xd, 0x0, 0x0, "b59f6fd912dce39009762c84135c6d72b24abbcd0f15e79f747b1e87ecbaa3541349c5feffedb3f9e407d72cadcd11107a2ca122e4d02fc163c28ada8396b6f9"}}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0x6, 0x6, 0x0, 0x0, "13b40914207702df565b4465fa4d6c2d43a862c5a650ed18416a3c311dc178259b2c7055f6f8c4ca9f9a271e521d355026a161be2d6446f81619f82e2d8ec341"}}}}, {0x11, 0x5, 0x8848, 'ip6gre0\x00', 'caif0\x00', 'nr0\x00', 'ip6gre0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@log={'log\x00', 0x28, {{0x1, "051e832ec629b77459e4130f7823bdea303f8be25555d6617c03742e8d27", 0x4}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x3, 0x30, 0x6003, 'syz_tun\x00', 'pimreg0\x00', '\x00', 'ip6gretap0\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@nflog={'nflog\x00', 0x50, {{0xffffff46, 0x9, 0x0, 0x0, 0x0, "56cc7179567ff6bd19e520e252b06465218350729af0c8c333f004c914da57367a93eb4ce784aea2ee1a2e32e9bdce18e60ff54e04b49a37c1a1937799979f4b"}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x440)
unshare(0x6a040000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1010, 0xffffffffffffffff, 0x2000) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_LINK={0x8, 0x5, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
executing program 2:
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280), 0x4c00}], 0x1}, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4122, 0x101a}], 0x1}, 0x406)
prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000000))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060100000000000000000000000000000000000000000000000800030076783000240012800a00010076786c616e00000014000280080001006400000008000300"], 0x4c}}, 0x0)
executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000ac0)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r4 = dup3(r2, r3, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(r5, 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x8880, 0x85)
getdents64(r6, 0x0, 0x4f)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x72, 0x0, 0x7fff0004}]})
close_range(r7, 0xffffffffffffffff, 0x0)
executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6, 0x400, 0x7}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$cgroup_pid(r0, &(0x7f0000000440), 0x12)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x1, 0x8001, {0x0, 0x0, 0x0, 0x0, 0x8002, 0x8}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x852f, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffb3bf, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x100}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000001}, 0x0)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <5>
bisect: split chunk #0 of len 5 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 13, 7]
detailed listing:
executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000ac0)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r4 = dup3(r2, r3, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(r5, 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x8880, 0x85)
getdents64(r6, 0x0, 0x4f)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x72, 0x0, 0x7fff0004}]})
close_range(r7, 0xffffffffffffffff, 0x0)
executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6, 0x400, 0x7}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$cgroup_pid(r0, &(0x7f0000000440), 0x12)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x1, 0x8001, {0x0, 0x0, 0x0, 0x0, 0x8002, 0x8}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x852f, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffb3bf, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x100}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000001}, 0x0)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 7]
detailed listing:
executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6, 0x400, 0x7}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$cgroup_pid(r0, &(0x7f0000000440), 0x12)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x1, 0x8001, {0x0, 0x0, 0x0, 0x0, 0x8002, 0x8}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x852f, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffb3bf, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x100}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000001}, 0x0)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$eJzs3M9vFFUcAPDvzLaA/GpF/AGiVomx8UdLCyoHLxpNPGA00QPqqbaFEAo1tCZCiFRj8GJiSPSsHk38C7x5MerJxMST3g0JUS6gp5qZnSnd7S7d0qVbu59PMvDeztuZ9903b+bNvN0G0LUGsn+SiO0R8XtE9FWztQUGqv9dv3p+/J+r58eTmJ9//a8kL3ft6vnxsmj5vm1FZjCNSD9Oip3Umjl77uTY1NTkmSI/PHvq3eGZs+eeOnFq7Pjk8cnTo4cPHzo48uwzo0+3Jc4srmt7P5jet+flNy+9Mn700js/fZvVd3uxfnEct2TT0pcGssD/ns/Vr3s07ljV7tabHYvSSU8HK8KKVCIia67evP/3RSVuNF5fvPRRRysH3FbZtWlz89Vz88AGlkSnawB0Rnmhz+5/y2WNhh7rwpXnqzdAWdzXi6W6pifSokxv3f1tOw1ExNG5f7/MlmjHcwgAgGV8Ov7FkXiy0fgvjXsWldtZzKH0R8SdEbErIu6KiN0RcXdEXvbeiLhvhfuvnxpaOv5JL99SYC3Kxn/PFXNbteO/cvQX/ZUityOPvzc5dmJq8kDxmQxG7+YsP7J00wsb+P7FXz9rtv/F479syfZfjgWLzVzuqXtANzE2O5YPStvgyocRe3saxZ8szAQkEbEnIvaubNM7y8SJx7/Z16zQ8vHfRBvmmea/jnis2v5zURd/Kbn5/OTwlpiaPDBcHhVL/fzLxdea7X9V8bdB1v5ba4//Ys1XZ4tE/9uL52tnYsUzlxf/+KTpPc2tHv+bkjfy81E57fr+2OzsmZGITcmRPF/z+uiN95b5snwW/+D+xv1/V/GerP3vj4jsIH4gIh6MiIeKuj8cEY9ExP6bxP/jC83XrYf2n2h4/ls4/vuTmvZfeaJy8ofvmu2/tfY/lKcGi1fy898yWq3gaj47AAAA+L9I8+/AJ+nQQjpNh4aq3+HfHVvTqemZ2SeOTb93eqL6Xfn+6E3LJ119i56HjiRzxRar+dHiWXG5/mDx3PjzSuT5ofHpqYkOxw7dbluT/p/5s9Lp2gG3XaN5tNEGP2gDNp76/p/WZi+8upaVAdaU32tD91qm/6drVQ9g7bn+Q/dq1P8v1OXNBcDG5PoP3Uv/h+6l/0P3quv/lfitUzUB1tBqftff9sSWWBfVkGglEem6qEZLidb/HsTtTry1PqrRQqLTZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2+C8AAP//9sDvmA==")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 7]
detailed listing:
executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000ac0)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r4 = dup3(r2, r3, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(r5, 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x8880, 0x85)
getdents64(r6, 0x0, 0x4f)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x72, 0x0, 0x7fff0004}]})
close_range(r7, 0xffffffffffffffff, 0x0)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$eJzs3M9vFFUcAPDvzLaA/GpF/AGiVomx8UdLCyoHLxpNPGA00QPqqbaFEAo1tCZCiFRj8GJiSPSsHk38C7x5MerJxMST3g0JUS6gp5qZnSnd7S7d0qVbu59PMvDeztuZ9903b+bNvN0G0LUGsn+SiO0R8XtE9FWztQUGqv9dv3p+/J+r58eTmJ9//a8kL3ft6vnxsmj5vm1FZjCNSD9Oip3Umjl77uTY1NTkmSI/PHvq3eGZs+eeOnFq7Pjk8cnTo4cPHzo48uwzo0+3Jc4srmt7P5jet+flNy+9Mn700js/fZvVd3uxfnEct2TT0pcGssD/ns/Vr3s07ljV7tabHYvSSU8HK8KKVCIia67evP/3RSVuNF5fvPRRRysH3FbZtWlz89Vz88AGlkSnawB0Rnmhz+5/y2WNhh7rwpXnqzdAWdzXi6W6pifSokxv3f1tOw1ExNG5f7/MlmjHcwgAgGV8Ov7FkXiy0fgvjXsWldtZzKH0R8SdEbErIu6KiN0RcXdEXvbeiLhvhfuvnxpaOv5JL99SYC3Kxn/PFXNbteO/cvQX/ZUityOPvzc5dmJq8kDxmQxG7+YsP7J00wsb+P7FXz9rtv/F479syfZfjgWLzVzuqXtANzE2O5YPStvgyocRe3saxZ8szAQkEbEnIvaubNM7y8SJx7/Z16zQ8vHfRBvmmea/jnis2v5zURd/Kbn5/OTwlpiaPDBcHhVL/fzLxdea7X9V8bdB1v5ba4//Ys1XZ4tE/9uL52tnYsUzlxf/+KTpPc2tHv+bkjfy81E57fr+2OzsmZGITcmRPF/z+uiN95b5snwW/+D+xv1/V/GerP3vj4jsIH4gIh6MiIeKuj8cEY9ExP6bxP/jC83XrYf2n2h4/ls4/vuTmvZfeaJy8ofvmu2/tfY/lKcGi1fy898yWq3gaj47AAAA+L9I8+/AJ+nQQjpNh4aq3+HfHVvTqemZ2SeOTb93eqL6Xfn+6E3LJ119i56HjiRzxRar+dHiWXG5/mDx3PjzSuT5ofHpqYkOxw7dbluT/p/5s9Lp2gG3XaN5tNEGP2gDNp76/p/WZi+8upaVAdaU32tD91qm/6drVQ9g7bn+Q/dq1P8v1OXNBcDG5PoP3Uv/h+6l/0P3quv/lfitUzUB1tBqftff9sSWWBfVkGglEem6qEZLidb/HsTtTry1PqrRQqLTZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2+C8AAP//9sDvmA==")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 2 programs left: 

executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000ac0)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r4 = dup3(r2, r3, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(r5, 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x8880, 0x85)
getdents64(r6, 0x0, 0x4f)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x72, 0x0, 0x7fff0004}]})
close_range(r7, 0xffffffffffffffff, 0x0)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)


bisect: trying to concatenate
bisect: concatenate 2 entries
minimizing program #0 before concatenation
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000ac0)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r4 = dup3(r2, r3, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(r5, 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x8880, 0x85)
getdents64(r6, 0x0, 0x4f)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x72, 0x0, 0x7fff0004}]})
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000ac0)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r4 = dup3(r2, r3, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(r5, 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x8880, 0x85)
getdents64(r6, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$eJzs3M9vFFUcAPDvzLaA/GpF/AGiVomx8UdLCyoHLxpNPGA00QPqqbaFEAo1tCZCiFRj8GJiSPSsHk38C7x5MerJxMST3g0JUS6gp5qZnSnd7S7d0qVbu59PMvDeztuZ9903b+bNvN0G0LUGsn+SiO0R8XtE9FWztQUGqv9dv3p+/J+r58eTmJ9//a8kL3ft6vnxsmj5vm1FZjCNSD9Oip3Umjl77uTY1NTkmSI/PHvq3eGZs+eeOnFq7Pjk8cnTo4cPHzo48uwzo0+3Jc4srmt7P5jet+flNy+9Mn700js/fZvVd3uxfnEct2TT0pcGssD/ns/Vr3s07ljV7tabHYvSSU8HK8KKVCIia67evP/3RSVuNF5fvPRRRysH3FbZtWlz89Vz88AGlkSnawB0Rnmhz+5/y2WNhh7rwpXnqzdAWdzXi6W6pifSokxv3f1tOw1ExNG5f7/MlmjHcwgAgGV8Ov7FkXiy0fgvjXsWldtZzKH0R8SdEbErIu6KiN0RcXdEXvbeiLhvhfuvnxpaOv5JL99SYC3Kxn/PFXNbteO/cvQX/ZUityOPvzc5dmJq8kDxmQxG7+YsP7J00wsb+P7FXz9rtv/F479syfZfjgWLzVzuqXtANzE2O5YPStvgyocRe3saxZ8szAQkEbEnIvaubNM7y8SJx7/Z16zQ8vHfRBvmmea/jnis2v5zURd/Kbn5/OTwlpiaPDBcHhVL/fzLxdea7X9V8bdB1v5ba4//Ys1XZ4tE/9uL52tnYsUzlxf/+KTpPc2tHv+bkjfy81E57fr+2OzsmZGITcmRPF/z+uiN95b5snwW/+D+xv1/V/GerP3vj4jsIH4gIh6MiIeKuj8cEY9ExP6bxP/jC83XrYf2n2h4/ls4/vuTmvZfeaJy8ofvmu2/tfY/lKcGi1fy898yWq3gaj47AAAA+L9I8+/AJ+nQQjpNh4aq3+HfHVvTqemZ2SeOTb93eqL6Xfn+6E3LJ119i56HjiRzxRar+dHiWXG5/mDx3PjzSuT5ofHpqYkOxw7dbluT/p/5s9Lp2gG3XaN5tNEGP2gDNp76/p/WZi+8upaVAdaU32tD91qm/6drVQ9g7bn+Q/dq1P8v1OXNBcDG5PoP3Uv/h+6l/0P3quv/lfitUzUB1tBqftff9sSWWBfVkGglEem6qEZLidb/HsTtTry1PqrRQqLTZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2+C8AAP//9sDvmA==")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000ac0)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r4 = dup3(r2, r3, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(r5, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x8880, 0x85)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000ac0)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r4 = dup3(r2, r3, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(r5, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000ac0)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r4 = dup3(r2, r3, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$eJzs3M9vFFUcAPDvzLaA/GpF/AGiVomx8UdLCyoHLxpNPGA00QPqqbaFEAo1tCZCiFRj8GJiSPSsHk38C7x5MerJxMST3g0JUS6gp5qZnSnd7S7d0qVbu59PMvDeztuZ9903b+bNvN0G0LUGsn+SiO0R8XtE9FWztQUGqv9dv3p+/J+r58eTmJ9//a8kL3ft6vnxsmj5vm1FZjCNSD9Oip3Umjl77uTY1NTkmSI/PHvq3eGZs+eeOnFq7Pjk8cnTo4cPHzo48uwzo0+3Jc4srmt7P5jet+flNy+9Mn700js/fZvVd3uxfnEct2TT0pcGssD/ns/Vr3s07ljV7tabHYvSSU8HK8KKVCIia67evP/3RSVuNF5fvPRRRysH3FbZtWlz89Vz88AGlkSnawB0Rnmhz+5/y2WNhh7rwpXnqzdAWdzXi6W6pifSokxv3f1tOw1ExNG5f7/MlmjHcwgAgGV8Ov7FkXiy0fgvjXsWldtZzKH0R8SdEbErIu6KiN0RcXdEXvbeiLhvhfuvnxpaOv5JL99SYC3Kxn/PFXNbteO/cvQX/ZUityOPvzc5dmJq8kDxmQxG7+YsP7J00wsb+P7FXz9rtv/F479syfZfjgWLzVzuqXtANzE2O5YPStvgyocRe3saxZ8szAQkEbEnIvaubNM7y8SJx7/Z16zQ8vHfRBvmmea/jnis2v5zURd/Kbn5/OTwlpiaPDBcHhVL/fzLxdea7X9V8bdB1v5ba4//Ys1XZ4tE/9uL52tnYsUzlxf/+KTpPc2tHv+bkjfy81E57fr+2OzsmZGITcmRPF/z+uiN95b5snwW/+D+xv1/V/GerP3vj4jsIH4gIh6MiIeKuj8cEY9ExP6bxP/jC83XrYf2n2h4/ls4/vuTmvZfeaJy8ofvmu2/tfY/lKcGi1fy898yWq3gaj47AAAA+L9I8+/AJ+nQQjpNh4aq3+HfHVvTqemZ2SeOTb93eqL6Xfn+6E3LJ119i56HjiRzxRar+dHiWXG5/mDx3PjzSuT5ofHpqYkOxw7dbluT/p/5s9Lp2gG3XaN5tNEGP2gDNp76/p/WZi+8upaVAdaU32tD91qm/6drVQ9g7bn+Q/dq1P8v1OXNBcDG5PoP3Uv/h+6l/0P3quv/lfitUzUB1tBqftff9sSWWBfVkGglEem6qEZLidb/HsTtTry1PqrRQqLTZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2+C8AAP//9sDvmA==")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000ac0)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r4 = dup3(r2, r3, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000ac0)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
dup3(r2, r3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000ac0)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000ac0)={0x42, 0x0, 0x1}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r3, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r0, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
write(0xffffffffffffffff, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r0, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mlockall(0x7)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mlockall(0x1)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$eJzs3M9vFFUcAPDvzLaA/GpF/AGiVomx8UdLCyoHLxpNPGA00QPqqbaFEAo1tCZCiFRj8GJiSPSsHk38C7x5MerJxMST3g0JUS6gp5qZnSnd7S7d0qVbu59PMvDeztuZ9903b+bNvN0G0LUGsn+SiO0R8XtE9FWztQUGqv9dv3p+/J+r58eTmJ9//a8kL3ft6vnxsmj5vm1FZjCNSD9Oip3Umjl77uTY1NTkmSI/PHvq3eGZs+eeOnFq7Pjk8cnTo4cPHzo48uwzo0+3Jc4srmt7P5jet+flNy+9Mn700js/fZvVd3uxfnEct2TT0pcGssD/ns/Vr3s07ljV7tabHYvSSU8HK8KKVCIia67evP/3RSVuNF5fvPRRRysH3FbZtWlz89Vz88AGlkSnawB0Rnmhz+5/y2WNhh7rwpXnqzdAWdzXi6W6pifSokxv3f1tOw1ExNG5f7/MlmjHcwgAgGV8Ov7FkXiy0fgvjXsWldtZzKH0R8SdEbErIu6KiN0RcXdEXvbeiLhvhfuvnxpaOv5JL99SYC3Kxn/PFXNbteO/cvQX/ZUityOPvzc5dmJq8kDxmQxG7+YsP7J00wsb+P7FXz9rtv/F479syfZfjgWLzVzuqXtANzE2O5YPStvgyocRe3saxZ8szAQkEbEnIvaubNM7y8SJx7/Z16zQ8vHfRBvmmea/jnis2v5zURd/Kbn5/OTwlpiaPDBcHhVL/fzLxdea7X9V8bdB1v5ba4//Ys1XZ4tE/9uL52tnYsUzlxf/+KTpPc2tHv+bkjfy81E57fr+2OzsmZGITcmRPF/z+uiN95b5snwW/+D+xv1/V/GerP3vj4jsIH4gIh6MiIeKuj8cEY9ExP6bxP/jC83XrYf2n2h4/ls4/vuTmvZfeaJy8ofvmu2/tfY/lKcGi1fy898yWq3gaj47AAAA+L9I8+/AJ+nQQjpNh4aq3+HfHVvTqemZ2SeOTb93eqL6Xfn+6E3LJ119i56HjiRzxRar+dHiWXG5/mDx3PjzSuT5ofHpqYkOxw7dbluT/p/5s9Lp2gG3XaN5tNEGP2gDNp76/p/WZi+8upaVAdaU32tD91qm/6drVQ9g7bn+Q/dq1P8v1OXNBcDG5PoP3Uv/h+6l/0P3quv/lfitUzUB1tBqftff9sSWWBfVkGglEem6qEZLidb/HsTtTry1PqrRQqLTZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2+C8AAP//9sDvmA==")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./gadget/dummy_udc\x00', &(0x7f0000000000)='devpts\x00', 0x1214040, 0x0)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x6, 0x5, 0x106)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 7]
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 7]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 2:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0), &(0x7f0000000900)=ANY=[], 0xfe37, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
minimized 30 calls -> 14 calls
minimizing program #1 before concatenation
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 6]
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 0:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 5]
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 0:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 4]
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 0:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 3]
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 0:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
socket$packet(0x11, 0x2, 0x300)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 2]
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 0:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 1]
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 0:
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x2a0471a, &(0x7f0000000a80)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000b00)="$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")

program did not crash
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 1]
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
executing program 0:
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
minimized 7 calls -> 1 calls
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write-socket$tipc-setsockopt$TIPC_GROUP_JOIN-sendmsg$tipc-setsockopt$TIPC_GROUP_LEAVE-openat-getdents64-setsockopt$inet_IP_XFRM_POLICY
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x843, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x239, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6}, {0x0, 0xfffffffffffffffc, 0x400000000, 0x3332}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xfd, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
bisect: concatenation succeeded
found reproducer with 15 syscalls
minimizing guilty program
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write-socket$tipc-setsockopt$TIPC_GROUP_JOIN-sendmsg$tipc-setsockopt$TIPC_GROUP_LEAVE-openat-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)
getdents64(0xffffffffffffffff, 0x0, 0x4f)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write-socket$tipc-setsockopt$TIPC_GROUP_JOIN-sendmsg$tipc-setsockopt$TIPC_GROUP_LEAVE-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8c04, 0x4c)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write-socket$tipc-setsockopt$TIPC_GROUP_JOIN-sendmsg$tipc-setsockopt$TIPC_GROUP_LEAVE
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write-socket$tipc-setsockopt$TIPC_GROUP_JOIN-sendmsg$tipc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write-socket$tipc-setsockopt$TIPC_GROUP_JOIN
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000a80)={0x42, 0x0, 0x3}, 0x10)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write-socket$tipc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
socket$tipc(0x1e, 0x2, 0x0)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)

program did not crash
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program did not crash
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program did not crash
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program did not crash
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r0, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program did not crash
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
write(0xffffffffffffffff, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r0, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program did not crash
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program did not crash
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program did not crash
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program did not crash
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program did not crash
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', 0x0, 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program did not crash
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program did not crash
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program did not crash
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program did not crash
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program did not crash
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program did not crash
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program did not crash
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program did not crash
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, 0x0, 0x0)

program did not crash
testing program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0), 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=44.777896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
program did not crash
simplifying guilty program options
testing program (duration=44.777896s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
extracting C reproducer
testing compiled C program (duration=44.777896s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
program did not crash
testing program (duration=44.777896s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program crashed: KASAN: slab-use-after-free Write in put_dev
a never seen crash title: KASAN: slab-use-after-free Write in put_dev, ignore
testing program (duration=44.777896s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
extracting C reproducer
testing compiled C program (duration=44.777896s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
program did not crash
testing program (duration=44.777896s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
validation run: crashed=true
testing program (duration=44.777896s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
validation run: crashed=true
testing program (duration=44.777896s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./gadget\x00', &(0x7f0000000940)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r1, &(0x7f00000009c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

program crashed: KASAN: slab-use-after-free Read in gadget_dev_open
validation run: crashed=true
reproducing took 1h50m41.59453052s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in __raw_spin_lock_irq include/linux/spinlock_api_smp.h:165 [inline]
BUG: KASAN: slab-use-after-free in _raw_spin_lock_irq+0x58/0x70 kernel/locking/spinlock.c:189
Read of size 1 at addr ffff0000d3945018 by task syz.0.18/4950

CPU: 1 UID: 0 PID: 4950 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
Call trace:
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:499 (C)
 __dump_stack+0x30/0x40 lib/dump_stack.c:94
 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120
 print_address_description+0xb0/0x238 mm/kasan/report.c:378
 print_report+0x68/0x84 mm/kasan/report.c:482
 kasan_report+0x8c/0xc4 mm/kasan/report.c:595
 __kasan_check_byte+0x3c/0x54 mm/kasan/common.c:585
 kasan_check_byte include/linux/kasan.h:402 [inline]
 lock_acquire+0xa4/0x320 kernel/locking/lockdep.c:5916
 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:165 [inline]
 _raw_spin_lock_irq+0x58/0x70 kernel/locking/spinlock.c:189
 spin_lock_irq include/linux/spinlock.h:377 [inline]
 gadget_dev_open+0x50/0x1c4 drivers/usb/gadget/legacy/inode.c:1929
 do_dentry_open+0x5c4/0xfbc fs/open.c:996
 vfs_open+0x44/0x2dc fs/open.c:1101
 do_open fs/namei.c:4866 [inline]
 path_openat+0x1084/0x18f0 fs/namei.c:5029
 do_file_open+0x1c8/0x2e8 fs/namei.c:5058
 do_sys_openat2+0x114/0x1e8 fs/open.c:1417
 do_sys_open+0xb0/0xe0 fs/open.c:1423
 __do_sys_openat fs/open.c:1439 [inline]
 __se_sys_openat fs/open.c:1434 [inline]
 __arm64_sys_openat+0xa8/0xc4 fs/open.c:1434
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121
 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140
 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796
 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606

Allocated by task 4862:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x40/0x78 mm/kasan/common.c:78
 kasan_save_alloc_info+0x40/0x50 mm/kasan/generic.c:570
 poison_kmalloc_redzone mm/kasan/common.c:409 [inline]
 __kasan_kmalloc+0x9c/0xb4 mm/kasan/common.c:426
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x2f4/0x5fc mm/slub.c:5563
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 dev_new drivers/usb/gadget/legacy/inode.c:176 [inline]
 gadgetfs_fill_super+0x19c/0x370 drivers/usb/gadget/legacy/inode.c:2064
 vfs_get_super+0xb8/0x148 fs/super.c:1390
 get_tree_single+0x30/0x40 fs/super.c:1417
 gadgetfs_get_tree+0x28/0x38 drivers/usb/gadget/legacy/inode.c:2095
 vfs_get_tree+0x90/0x28c fs/super.c:1932
 fc_mount+0x24/0xac fs/namespace.c:1278
 do_new_mount_fc fs/namespace.c:3885 [inline]
 do_new_mount+0x2a4/0x538 fs/namespace.c:3961
 path_mount+0x5f0/0xa88 fs/namespace.c:4312
 do_mount+0xe8/0x148 fs/namespace.c:4325
 __do_sys_mount fs/namespace.c:4543 [inline]
 __se_sys_mount fs/namespace.c:4520 [inline]
 __arm64_sys_mount+0x33c/0x388 fs/namespace.c:4520
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121
 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140
 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796
 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606

Freed by task 4949:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x40/0x78 mm/kasan/common.c:78
 kasan_save_free_info+0x54/0x6c mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:264 [inline]
 __kasan_slab_free+0x74/0xa4 mm/kasan/common.c:296
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2748 [inline]
 slab_free mm/slub.c:6509 [inline]
 kfree+0x188/0x658 mm/slub.c:6802
 put_dev+0x8c/0xf8 drivers/usb/gadget/legacy/inode.c:169
 dev_release+0x100/0x15c drivers/usb/gadget/legacy/inode.c:1224
 __fput+0x338/0x74c fs/file_table.c:512
 ____fput+0x20/0x30 fs/file_table.c:541
 task_work_run+0x1cc/0x25c kernel/task_work.c:233
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 __exit_to_user_mode_loop kernel/entry/common.c:70 [inline]
 exit_to_user_mode_loop+0x10c/0x17c kernel/entry/common.c:101
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
 arm64_syscall_exit_to_user_mode arch/arm64/kernel/entry-common.c:146 [inline]
 el0_svc+0x12c/0x1d8 arch/arm64/kernel/entry-common.c:797
 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606

The buggy address belongs to the object at ffff0000d3945000
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 24 bytes inside of
 freed 1024-byte region [ffff0000d3945000, ffff0000d3945400)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113940
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 05ffc00000000040 ffff0000c0001dc0 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 05ffc00000000040 ffff0000c0001dc0 dead000000000100 dead000000000122
head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 05ffc00000000003 fffffdffc34e5001 00000000ffffffff 00000000ffffffff
head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected

Memory state around the buggy address:
 ffff0000d3944f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff0000d3944f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff0000d3945000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                            ^
 ffff0000d3945080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff0000d3945100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.h:68:9
index 13027 is out of range for type 'unsigned long[8]'
CPU: 1 UID: 0 PID: 4950 Comm: syz.0.18 Tainted: G    B               syzkaller #0 PREEMPT 
Tainted: [B]=BAD_PAGE
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
Call trace:
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:499 (C)
 __dump_stack+0x30/0x40 lib/dump_stack.c:94
 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120
 dump_stack+0x1c/0x28 lib/dump_stack.c:129
 ubsan_epilogue+0x14/0x48 lib/ubsan.c:233
 __ubsan_handle_out_of_bounds+0xd0/0xf8 lib/ubsan.c:455
 decode_tail kernel/locking/qspinlock.h:68 [inline]
 queued_spin_lock_slowpath+0x834/0xb5c kernel/locking/qspinlock.c:307
 queued_spin_lock include/asm-generic/qspinlock.h:115 [inline]
 do_raw_spin_lock+0x21c/0x2d0 kernel/locking/spinlock_debug.c:116
 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:166 [inline]
 _raw_spin_lock_irq+0x60/0x70 kernel/locking/spinlock.c:189
 spin_lock_irq include/linux/spinlock.h:377 [inline]
 gadget_dev_open+0x50/0x1c4 drivers/usb/gadget/legacy/inode.c:1929
 do_dentry_open+0x5c4/0xfbc fs/open.c:996
 vfs_open+0x44/0x2dc fs/open.c:1101
 do_open fs/namei.c:4866 [inline]
 path_openat+0x1084/0x18f0 fs/namei.c:5029
 do_file_open+0x1c8/0x2e8 fs/namei.c:5058
 do_sys_openat2+0x114/0x1e8 fs/open.c:1417
 do_sys_open+0xb0/0xe0 fs/open.c:1423
 __do_sys_openat fs/open.c:1439 [inline]
 __se_sys_openat fs/open.c:1434 [inline]
 __arm64_sys_openat+0xa8/0xc4 fs/open.c:1434
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121
 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140
 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796
 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606
---[ end trace ]---
Unable to handle kernel paging request at virtual address ffff8000897ba150
KASAN: probably user-memory-access in range [0x000000044bdd0a80-0x000000044bdd0a87]
Mem abort info:
  ESR = 0x0000000096000047
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x07: level 3 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000047, ISS2 = 0x00000000
  CM = 0, WnR = 1, TnD = 0, TagAccess = 0
  GCS = 0, Overlay = 0, DirtyBit = 0
swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000219508000
[ffff8000897ba150] pgd=0000000000000000, p4d=100000021f82f003, pud=100000021f830003, pmd=100000021f834003, pte=0000000000000000
Internal error: Oops: 0000000096000047 [#1]  SMP
Modules linked in:
CPU: 1 UID: 0 PID: 4950 Comm: syz.0.18 Tainted: G    B               syzkaller #0 PREEMPT 
Tainted: [B]=BAD_PAGE
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
pstate: 834000c5 (Nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : queued_spin_lock_slowpath+0x544/0xb5c kernel/locking/qspinlock.c:310
lr : decode_tail kernel/locking/qspinlock.h:68 [inline]
lr : queued_spin_lock_slowpath+0x834/0xb5c kernel/locking/qspinlock.c:307
sp : ffff80009d6f7620
x29: ffff80009d6f76c0 x28: 1fffe000359f1c28 x27: 1fffe000198fa002
x26: ffff0001acf8e148 x25: ffff8000897ba150 x24: dfff800000000000
x23: ffff700013adeec8 x22: 1fffe0001a728a00 x21: ffff0001acf8e140
x20: ffff0000cc7d0010 x19: ffff0000d3945000 x18: 0000000000000000
x17: 363a682e6b636f6c x16: 0000000000000001 x15: 0000000000000000
x14: 000000000000076e x13: 0000000000000001 x12: 0000000000000004
x11: ffff700011604e68 x10: ffff8000897ba140 x9 : ffff8000897ba150
x8 : 0000000000000000 x7 : 0000000000000001 x6 : ffff800080484084
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f41d4
x2 : 0000000000000002 x1 : 0000000000000004 x0 : ffff0001acf8e148
Call trace:
 queued_spin_lock_slowpath+0x544/0xb5c kernel/locking/qspinlock.c:313 (P)
 queued_spin_lock include/asm-generic/qspinlock.h:115 [inline]
 do_raw_spin_lock+0x21c/0x2d0 kernel/locking/spinlock_debug.c:116
 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:166 [inline]
 _raw_spin_lock_irq+0x60/0x70 kernel/locking/spinlock.c:189
 spin_lock_irq include/linux/spinlock.h:377 [inline]
 gadget_dev_open+0x50/0x1c4 drivers/usb/gadget/legacy/inode.c:1929
 do_dentry_open+0x5c4/0xfbc fs/open.c:996
 vfs_open+0x44/0x2dc fs/open.c:1101
 do_open fs/namei.c:4866 [inline]
 path_openat+0x1084/0x18f0 fs/namei.c:5029
 do_file_open+0x1c8/0x2e8 fs/namei.c:5058
 do_sys_openat2+0x114/0x1e8 fs/open.c:1417
 do_sys_open+0xb0/0xe0 fs/open.c:1423
 __do_sys_openat fs/open.c:1439 [inline]
 __se_sys_openat fs/open.c:1434 [inline]
 __arm64_sys_openat+0xa8/0xc4 fs/open.c:1434
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121
 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140
 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796
 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606
Code: aa1903e0 968adf85 910022a0 52800081 (f9000335) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	aa1903e0 	mov	x0, x25
   4:	968adf85 	bl	0xfffffffffa2b7e18
   8:	910022a0 	add	x0, x21, #0x8
   c:	52800081 	mov	w1, #0x4                   	// #4
* 10:	f9000335 	str	x21, [x25] <-- trapping instruction

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in __raw_spin_lock_irq include/linux/spinlock_api_smp.h:165 [inline]
BUG: KASAN: slab-use-after-free in _raw_spin_lock_irq+0x58/0x70 kernel/locking/spinlock.c:189
Read of size 1 at addr ffff0000d3945018 by task syz.0.18/4950

CPU: 1 UID: 0 PID: 4950 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
Call trace:
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:499 (C)
 __dump_stack+0x30/0x40 lib/dump_stack.c:94
 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120
 print_address_description+0xb0/0x238 mm/kasan/report.c:378
 print_report+0x68/0x84 mm/kasan/report.c:482
 kasan_report+0x8c/0xc4 mm/kasan/report.c:595
 __kasan_check_byte+0x3c/0x54 mm/kasan/common.c:585
 kasan_check_byte include/linux/kasan.h:402 [inline]
 lock_acquire+0xa4/0x320 kernel/locking/lockdep.c:5916
 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:165 [inline]
 _raw_spin_lock_irq+0x58/0x70 kernel/locking/spinlock.c:189
 spin_lock_irq include/linux/spinlock.h:377 [inline]
 gadget_dev_open+0x50/0x1c4 drivers/usb/gadget/legacy/inode.c:1929
 do_dentry_open+0x5c4/0xfbc fs/open.c:996
 vfs_open+0x44/0x2dc fs/open.c:1101
 do_open fs/namei.c:4866 [inline]
 path_openat+0x1084/0x18f0 fs/namei.c:5029
 do_file_open+0x1c8/0x2e8 fs/namei.c:5058
 do_sys_openat2+0x114/0x1e8 fs/open.c:1417
 do_sys_open+0xb0/0xe0 fs/open.c:1423
 __do_sys_openat fs/open.c:1439 [inline]
 __se_sys_openat fs/open.c:1434 [inline]
 __arm64_sys_openat+0xa8/0xc4 fs/open.c:1434
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121
 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140
 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796
 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606

Allocated by task 4862:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x40/0x78 mm/kasan/common.c:78
 kasan_save_alloc_info+0x40/0x50 mm/kasan/generic.c:570
 poison_kmalloc_redzone mm/kasan/common.c:409 [inline]
 __kasan_kmalloc+0x9c/0xb4 mm/kasan/common.c:426
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x2f4/0x5fc mm/slub.c:5563
 _kmalloc_noprof include/linux/slab.h:991 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 dev_new drivers/usb/gadget/legacy/inode.c:176 [inline]
 gadgetfs_fill_super+0x19c/0x370 drivers/usb/gadget/legacy/inode.c:2064
 vfs_get_super+0xb8/0x148 fs/super.c:1390
 get_tree_single+0x30/0x40 fs/super.c:1417
 gadgetfs_get_tree+0x28/0x38 drivers/usb/gadget/legacy/inode.c:2095
 vfs_get_tree+0x90/0x28c fs/super.c:1932
 fc_mount+0x24/0xac fs/namespace.c:1278
 do_new_mount_fc fs/namespace.c:3885 [inline]
 do_new_mount+0x2a4/0x538 fs/namespace.c:3961
 path_mount+0x5f0/0xa88 fs/namespace.c:4312
 do_mount+0xe8/0x148 fs/namespace.c:4325
 __do_sys_mount fs/namespace.c:4543 [inline]
 __se_sys_mount fs/namespace.c:4520 [inline]
 __arm64_sys_mount+0x33c/0x388 fs/namespace.c:4520
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121
 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140
 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796
 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606

Freed by task 4949:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x40/0x78 mm/kasan/common.c:78
 kasan_save_free_info+0x54/0x6c mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:264 [inline]
 __kasan_slab_free+0x74/0xa4 mm/kasan/common.c:296
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2748 [inline]
 slab_free mm/slub.c:6509 [inline]
 kfree+0x188/0x658 mm/slub.c:6802
 put_dev+0x8c/0xf8 drivers/usb/gadget/legacy/inode.c:169
 dev_release+0x100/0x15c drivers/usb/gadget/legacy/inode.c:1224
 __fput+0x338/0x74c fs/file_table.c:512
 ____fput+0x20/0x30 fs/file_table.c:541
 task_work_run+0x1cc/0x25c kernel/task_work.c:233
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 __exit_to_user_mode_loop kernel/entry/common.c:70 [inline]
 exit_to_user_mode_loop+0x10c/0x17c kernel/entry/common.c:101
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
 arm64_syscall_exit_to_user_mode arch/arm64/kernel/entry-common.c:146 [inline]
 el0_svc+0x12c/0x1d8 arch/arm64/kernel/entry-common.c:797
 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606

The buggy address belongs to the object at ffff0000d3945000
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 24 bytes inside of
 freed 1024-byte region [ffff0000d3945000, ffff0000d3945400)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113940
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 05ffc00000000040 ffff0000c0001dc0 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 05ffc00000000040 ffff0000c0001dc0 dead000000000100 dead000000000122
head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 05ffc00000000003 fffffdffc34e5001 00000000ffffffff 00000000ffffffff
head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected

Memory state around the buggy address:
 ffff0000d3944f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff0000d3944f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff0000d3945000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                            ^
 ffff0000d3945080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff0000d3945100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.h:68:9
index 13027 is out of range for type 'unsigned long[8]'
CPU: 1 UID: 0 PID: 4950 Comm: syz.0.18 Tainted: G    B               syzkaller #0 PREEMPT 
Tainted: [B]=BAD_PAGE
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
Call trace:
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:499 (C)
 __dump_stack+0x30/0x40 lib/dump_stack.c:94
 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120
 dump_stack+0x1c/0x28 lib/dump_stack.c:129
 ubsan_epilogue+0x14/0x48 lib/ubsan.c:233
 __ubsan_handle_out_of_bounds+0xd0/0xf8 lib/ubsan.c:455
 decode_tail kernel/locking/qspinlock.h:68 [inline]
 queued_spin_lock_slowpath+0x834/0xb5c kernel/locking/qspinlock.c:307
 queued_spin_lock include/asm-generic/qspinlock.h:115 [inline]
 do_raw_spin_lock+0x21c/0x2d0 kernel/locking/spinlock_debug.c:116
 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:166 [inline]
 _raw_spin_lock_irq+0x60/0x70 kernel/locking/spinlock.c:189
 spin_lock_irq include/linux/spinlock.h:377 [inline]
 gadget_dev_open+0x50/0x1c4 drivers/usb/gadget/legacy/inode.c:1929
 do_dentry_open+0x5c4/0xfbc fs/open.c:996
 vfs_open+0x44/0x2dc fs/open.c:1101
 do_open fs/namei.c:4866 [inline]
 path_openat+0x1084/0x18f0 fs/namei.c:5029
 do_file_open+0x1c8/0x2e8 fs/namei.c:5058
 do_sys_openat2+0x114/0x1e8 fs/open.c:1417
 do_sys_open+0xb0/0xe0 fs/open.c:1423
 __do_sys_openat fs/open.c:1439 [inline]
 __se_sys_openat fs/open.c:1434 [inline]
 __arm64_sys_openat+0xa8/0xc4 fs/open.c:1434
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121
 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140
 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796
 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606
---[ end trace ]---
Unable to handle kernel paging request at virtual address ffff8000897ba150
KASAN: probably user-memory-access in range [0x000000044bdd0a80-0x000000044bdd0a87]
Mem abort info:
  ESR = 0x0000000096000047
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x07: level 3 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000047, ISS2 = 0x00000000
  CM = 0, WnR = 1, TnD = 0, TagAccess = 0
  GCS = 0, Overlay = 0, DirtyBit = 0
swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000219508000
[ffff8000897ba150] pgd=0000000000000000, p4d=100000021f82f003, pud=100000021f830003, pmd=100000021f834003, pte=0000000000000000
Internal error: Oops: 0000000096000047 [#1]  SMP
Modules linked in:
CPU: 1 UID: 0 PID: 4950 Comm: syz.0.18 Tainted: G    B               syzkaller #0 PREEMPT 
Tainted: [B]=BAD_PAGE
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
pstate: 834000c5 (Nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : queued_spin_lock_slowpath+0x544/0xb5c kernel/locking/qspinlock.c:310
lr : decode_tail kernel/locking/qspinlock.h:68 [inline]
lr : queued_spin_lock_slowpath+0x834/0xb5c kernel/locking/qspinlock.c:307
sp : ffff80009d6f7620
x29: ffff80009d6f76c0 x28: 1fffe000359f1c28 x27: 1fffe000198fa002
x26: ffff0001acf8e148 x25: ffff8000897ba150 x24: dfff800000000000
x23: ffff700013adeec8 x22: 1fffe0001a728a00 x21: ffff0001acf8e140
x20: ffff0000cc7d0010 x19: ffff0000d3945000 x18: 0000000000000000
x17: 363a682e6b636f6c x16: 0000000000000001 x15: 0000000000000000
x14: 000000000000076e x13: 0000000000000001 x12: 0000000000000004
x11: ffff700011604e68 x10: ffff8000897ba140 x9 : ffff8000897ba150
x8 : 0000000000000000 x7 : 0000000000000001 x6 : ffff800080484084
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f41d4
x2 : 0000000000000002 x1 : 0000000000000004 x0 : ffff0001acf8e148
Call trace:
 queued_spin_lock_slowpath+0x544/0xb5c kernel/locking/qspinlock.c:313 (P)
 queued_spin_lock include/asm-generic/qspinlock.h:115 [inline]
 do_raw_spin_lock+0x21c/0x2d0 kernel/locking/spinlock_debug.c:116
 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:166 [inline]
 _raw_spin_lock_irq+0x60/0x70 kernel/locking/spinlock.c:189
 spin_lock_irq include/linux/spinlock.h:377 [inline]
 gadget_dev_open+0x50/0x1c4 drivers/usb/gadget/legacy/inode.c:1929
 do_dentry_open+0x5c4/0xfbc fs/open.c:996
 vfs_open+0x44/0x2dc fs/open.c:1101
 do_open fs/namei.c:4866 [inline]
 path_openat+0x1084/0x18f0 fs/namei.c:5029
 do_file_open+0x1c8/0x2e8 fs/namei.c:5058
 do_sys_openat2+0x114/0x1e8 fs/open.c:1417
 do_sys_open+0xb0/0xe0 fs/open.c:1423
 __do_sys_openat fs/open.c:1439 [inline]
 __se_sys_openat fs/open.c:1434 [inline]
 __arm64_sys_openat+0xa8/0xc4 fs/open.c:1434
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121
 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140
 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796
 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606
Code: aa1903e0 968adf85 910022a0 52800081 (f9000335) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	aa1903e0 	mov	x0, x25
   4:	968adf85 	bl	0xfffffffffa2b7e18
   8:	910022a0 	add	x0, x21, #0x8
   c:	52800081 	mov	w1, #0x4                   	// #4
* 10:	f9000335 	str	x21, [x25] <-- trapping instruction