Extracting prog: 3h5m52.290646029s Minimizing prog: 26m3.923127225s Simplifying prog options: 4m46.271043536s Extracting C: 2m36.025941808s Simplifying C: 0s extracting reproducer from 25 programs testing a last program of every proc single: executing 5 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-openat$uhid-add_key$user-write$UHID_CREATE-socket$kcm-socketpair$unix-madvise-mremap-madvise-madvise-sendmsg$inet-recvmmsg-recvmmsg detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x5040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) write$UHID_CREATE(r1, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x759e, 0x6c08, 0x2, 0x200}}, 0x120) r2 = socket$kcm(0x2, 0x3, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67) (async) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000300)="77729a2d3c", 0x5}, {&(0x7f00000005c0)="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", 0x115}, {&(0x7f00000003c0)="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", 0x14f}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125971357630b6f3eb4fb4064c42c2b2519a1c77824df6f0653fb116149fcb5c7e46fce32b1de7f511951d4b1ae47781250afdb11680684c1d2854810a90d", 0xe8}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb", 0x53}, {&(0x7f0000000dc0)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d623cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3", 0xd4}], 0x7, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x1c}}}}], 0x20}, 0x0) recvmmsg(r2, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000b00)=""/192, 0xc0}, {&(0x7f0000000080)=""/85, 0x55}], 0x3, &(0x7f0000000bc0)=""/195, 0xc3}, 0x6}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000cc0)=""/184, 0xb8}, {&(0x7f0000004840)=""/128, 0x80}, {&(0x7f0000000ec0)=""/230, 0xe6}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/90, 0x5a}], 0x5, &(0x7f0000004800)=""/18, 0x12}, 0x7f}, {{&(0x7f00000026c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002740)=""/216, 0xd8}, {&(0x7f0000002840)=""/118, 0x76}, {&(0x7f00000028c0)=""/180, 0xb4}, {&(0x7f0000002980)=""/238, 0xee}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f00000048c0)=""/198, 0xc6}, {&(0x7f0000002b80)=""/186, 0xba}, {&(0x7f0000002c40)=""/179, 0xb3}, {&(0x7f0000002d00)=""/223, 0xdf}, {&(0x7f0000002e00)=""/142, 0x8e}], 0xa, &(0x7f0000002f80)=""/127, 0x7f}}, {{&(0x7f0000003000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000003080)=""/119, 0x77}], 0x1, &(0x7f0000003100)=""/174, 0xae}, 0x2}, {{&(0x7f00000031c0)=@alg, 0x80, &(0x7f0000000d80)=[{&(0x7f0000003240)=""/205, 0xcd}, {&(0x7f0000000a40)=""/56, 0x38}, {&(0x7f0000003340)=""/83, 0x53}], 0x3, &(0x7f00000033c0)=""/226, 0xe2}, 0x8}, {{&(0x7f00000034c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000003540)=""/250, 0xfa}], 0x1, &(0x7f0000003640)=""/4096, 0x1000}, 0x7265}], 0x6, 0xf796edee3d7da175, &(0x7f00000047c0)) (async) recvmmsg(r2, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000b00)=""/192, 0xc0}, {&(0x7f0000000080)=""/85, 0x55}], 0x3, &(0x7f0000000bc0)=""/195, 0xc3}, 0x6}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000cc0)=""/184, 0xb8}, {&(0x7f0000004840)=""/128, 0x80}, {&(0x7f0000000ec0)=""/230, 0xe6}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/90, 0x5a}], 0x5, &(0x7f0000004800)=""/18, 0x12}, 0x7f}, {{&(0x7f00000026c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002740)=""/216, 0xd8}, {&(0x7f0000002840)=""/118, 0x76}, {&(0x7f00000028c0)=""/180, 0xb4}, {&(0x7f0000002980)=""/238, 0xee}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f00000048c0)=""/198, 0xc6}, {&(0x7f0000002b80)=""/186, 0xba}, {&(0x7f0000002c40)=""/179, 0xb3}, {&(0x7f0000002d00)=""/223, 0xdf}, {&(0x7f0000002e00)=""/142, 0x8e}], 0xa, &(0x7f0000002f80)=""/127, 0x7f}}, {{&(0x7f0000003000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000003080)=""/119, 0x77}], 0x1, &(0x7f0000003100)=""/174, 0xae}, 0x2}, {{&(0x7f00000031c0)=@alg, 0x80, &(0x7f0000000d80)=[{&(0x7f0000003240)=""/205, 0xcd}, {&(0x7f0000000a40)=""/56, 0x38}, {&(0x7f0000003340)=""/83, 0x53}], 0x3, &(0x7f00000033c0)=""/226, 0xe2}, 0x8}, {{&(0x7f00000034c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000003540)=""/250, 0xfa}], 0x1, &(0x7f0000003640)=""/4096, 0x1000}, 0x7265}], 0x6, 0xf796edee3d7da175, &(0x7f00000047c0)) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$igmp-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-syz_io_uring_submit-openat-socket$nl_route-sendmsg$nl_route-pwritev2-setsockopt$MRT_PIM-socket$kcm-sendmsg$kcm-socket$kcm detailed listing: executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x60}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x8000000, 0x50) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000000)=0x4, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) socket$kcm(0x29, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-madvise-syz_clone-syz_open_dev$tty1-ioctl$VT_ACTIVATE-mlock2-mlock-ioctl$UFFDIO_REGISTER-madvise detailed listing: executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x5) (async) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000aeb000/0x3000)=nil, 0x3000}, 0x4}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_route_sched-socket$nl_route-bpf$BPF_BTF_LOAD-socket$nl_route-sendmsg$nl_route detailed listing: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x2c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_route_sched-socket$nl_route-bpf$BPF_BTF_LOAD-socket$nl_route-sendmsg$nl_route detailed listing: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x2c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 25 programs with base timeout 30s testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 38, 17, 30, 30, 30, 12, 18, 6, 9, 7, 6, 8, 40, 10, 25, 19, 7, 8, 23, 30, 9, 12, 13, 17] detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) fsync(0xffffffffffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x4c, 0x30, 0xcac229faa96ee7df, 0x0, 0xfffffffc, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0x4}, {0xc, 0x4, {0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e032", 0x3a}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "51a1cb4e9e8a319f", "c0d55a000d0026c98c8da80a9015ad00", '\x00', "bb10000000000001"}, 0x28) readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}, {&(0x7f0000003300)=""/4095, 0xfff}], 0x2) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000000c0)={{r3}, "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"}) sendmsg$nl_route(r3, &(0x7f00000010c0)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r0, @ANYBLOB="10c0000000e1000028001280090201807665746808dd000000000000", @ANYRES8=r3, @ANYRESDEC=r2], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x4c, 0x30, 0xcac229faa96ee7df, 0x0, 0xfffffffc, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0x4}, {0xc, 0x4, {0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e032", 0x3a}], 0x2}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "51a1cb4e9e8a319f", "c0d55a000d0026c98c8da80a9015ad00", '\x00', "bb10000000000001"}, 0x28) (async) readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}, {&(0x7f0000003300)=""/4095, 0xfff}], 0x2) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000000c0)={{r3}, "2cefec11ad23f218cd96313d9d1ab072b4c70e798310d5f3301ed2f9360eebfae6c06018d6cbc8bd4508a616018ec5dd2af3aea74807a69ffbc59d2156e7bf754b03238487d219c9c711c3a85e2a018652a0ddcf6fe2103ee00edbe3ccebfb5f98d21441cedefbb3b682a3d82c771fa2489e5bcdc18b2a728ace7c4ac6774b97f62274681e021d02b0de80c020c39356fb8c50481a54511cc329e2aef44c70c807b19631459b80d91c826e91bbf81b63e946a3a838a17731a53023885f77b5c72180f109ac5478b3b74c143a60e9fa64c8c264a41c451be759107cdbdaa80030c17ab7d062b34b0412c662517e51ca5aa6212907b83e7f8fda23c8e21e1fa2cb62f2176b29de309627013d2ac85e515b96d5be9c04cdfcfd5f9b20e09cbf4b74092ce50115f72913fe69ac295685fdce808d3f1fdc4493d489a15cf02a88ff5b372de41c0bf83691047122bfef85e120877d60d474567aaac325ab6dc35ce2090b83b5aa2de4eff76ffea08129cce37363ddb1905501936a1038f87f3577e8ffcd72d77186a79b64ee066e91445c52f9d341abf312f209af0719fc2569af8a5d3b521d0c58d9c413de669e6a01c6c0fed4f4e80f3148d2539d83e2e9f40da910fd818566f4b00581e8beb9a5b6d8af9f35c3233f5e76c37a43aa237626fe89d656a854a07643d0bbb50c43381dd7a6ece6f3ac6b5582fba7e9d38fd767a1bd1d4e6a374f48e498c354da1c43e244a365e5c4ebeb41adb6ad35f578bad0dbda511f1f28cad0c04bc708d276a1398b717bc7f9b9aac831d621e5117724f7367df392a9f538bbb7b5a59b1b4f190a3c9676b2b053da439c6e225f152885c11a960e0f738e0df8666f4741f562498774cf97d019fc39ba03d7201542f8d78f15c7ca33c4f5885b1ebed972b64efa0dfa5513f27b1a20792c4796298c28c47903d29efcf6c633c62cbcd0c1cbc15b4f6b36ddfe19218cee6917a422ba496a55fc2659d0e936b6ee2dfc88d5405b0f6013aff2ae584f46f21f23904f6409801d0170a6c1a92b42417b797458c36b443ab9548462a7f06ff4c85f93e497bb38858e9fad9d7c24f107d65c182957644ad08305a763f2136ff0c0153df378627cba970cc5e5d7ce983fba616df94a30d9a3cb3fa31484c34510eca8a4d885ad514a39bc32f67eca1b5d1435e9e84762f676c1912415bcb0ad773b468fc964fd6e38ac08f969c91b7cb8733295249c40f1e313752ce4ce1092daf563cee361d5ff09d2e8d8c4b61a1230e416d589c26b4f5c8de4475773e3d2cceef2487bcfa779820c568c41d7982518afbd4b084c4b184a5b23591b5dcb3b8940d780f66d3884b732744160b4c44f71de6187a2c33b7337386f893682798cb882970dc0cebf918748127d6586cad5ee8d831297bef64ddc6ffa43e86c9d3e344b2b808d55e8d5f3c41790d67fb34948b8dc3efa8201bcfe468c73a2858b563ad929f99b0c4059587a930228e8580720f641fefbad1d19556a37418809162c0e0334a4181dc056d72ca1964b68243a88e0a75db11bbdcb28f026a226a2ea209d59bb1ebc771fc99734dedf8e4c0bf9910ffe9b6ae6a7dfb3db12eebd54b55d2a6f20688a9d5610ccbe64944b0c99e05326bd6ca059030e8b7a4eafd27d60e3430705fce601e76385da8076f14cab9f8982948e63cbe8b1b51983093c94b1dcc286d11c6130d10d32e16933cda96ac3a1f887187558b6c0f986c9455b5ded7f5249fe76ca9b9aca89fe02a34d2c0ad4aa765b0ac40fc8cc8cdd5c05f87fa644013624ac9ebf826f50af0df73aafa0636af11cec4b4fb0384029a215a9f80ca2b2605dfef844ed57b9249f5d5dd83c7a843661ff39f71ba16d086c415b772f4a2644879163042d3b1bc511f8ebb44c58a787778d688462fa102bb1033e3bd71902e8748cf56c544259c89ec31e4b94f2f6fa71e47621c2ef4c9cdb42d2a2bcfcb9a74cf213cd626277bfa1f7c58cecf4178bdd1ab2bb76fadc0c6278180f52a9cdfbcb95f14eab4d4747ad452e9c98bef778f0ed4349f85d2516fe9533a2fa22dad0115df2603a205ebe13ecd358116a4ff41cf6b9a121b520a80e4d02dd3c45b905c66b794a58c092e15f8efc756f1e63681f883936eaf7576d465a1631fed7c39dbfd6da6b884bd9e2699ddc91a4bff3bf812cf8ead8cdca7409295505ea29a34171125984d4676ab56b03ca6e477e8013e700c233b8248f29aed6e0d664f4fc1b4322cdf988a3ea8085d1c7254d1ed8aa561e4f59520aab1609f96588f281a4d20805e2515955bf28bb8883f1841fd1de266f0ff7295289e63c4049aaa2cecb1ff30df1b67b1a69e09f042b2aaaddf3fba6489f31e7b7ccae012901dcb8faf84b30f63873124e277da3ade13d49da8a74587cb1af19d33e6dead3e718bc3618b297ac6563128f9204f68de23e9b8b31d86b7c439a40edfc70acd14088b63bd96f5da69310b2ee73853d5a5a9bbe8f6b767267c47d59e33ae191310c5c59b2266964068a20996fd1d8e437a7c2d08759572b22a2c21d3e645ceba6318e6d6646c5dce35dcaf70bae34a8d6d2bfc98c212b59e66b1044cdee34fbc661b8ed99c77f8ab29b5cfe412392ccfb02ebab0e6b5826073195c5158046857e516e694e54fc56f5ddd2c9a3b9b90e43a805eb5d72c0bf545593899a7f623e65809094377f2fdd1fb3fc4ee27728449919862426052d1e2d050c57e823d621fa7c5b75d1217a8c094dcd6c027cdda6ecde4d34608270d8997a9a6d237ad980e1e9b9564cc3ff014de805f2739bdc31081e7c0ab23089970dce27535f2c6e47c82f9e3b55337eca7f49a5fcb8ad9d68725d2d7dcdc7b78a0f62090b8efbd6fe5669ac458b8b360b64b56fcaa02ae826bfcda51b502b1657a84f827ebf86d06e17d9a1e4ab586bb41e83dce37bfc7848beff43f8bd5b62bb95857e7f18b3bc81aab40f048391e896d331c4d0d7ae4dc2f73cd0d75002e607c3e8855455af69ece32d00c26eac2b2f0073b9e09ff7eae36110f52e5d0dd6294fdfb59f9417c3e26349922e8f9fe3d319d829fbf44fea6508d3c80e154a672f9f526b21dd0b25ff246f7d7b2142484fec268db04268a9a8e920c9794d7b7798dc629fd8171886d70c75d1ced9328a76bbebd4ef2d4b356104d36dd9282ae96e104411587b59d71d7bb2c04ad6d2249688c44942bd3fcc7273f3da7b2f50d9c66ab0305dc966aec7694e15277519f8adc2827458320c9e83df93b387cf00e4b3bd13cf43080e14bb0ed789db3303c2c3bd0c621211c47d5d5056752d1684c4e8f8b8c4c9e0eca9498947b57ed22cb9094ea6376df39df116dc46729f70f903505b508aa70bb9407ece539583fdba67ec92e481f5252e94a193a5fe881cc6d84dd1c390f845fbe39115ef7e5c7522e9b9871ad7c14ec8c099b522131e50bbf8ca3f2a1df6e9284bb1c6c1c061d594d51acafc50ad4470d821010f1a8ce77968508081eca33088ee27f9588917cd4ad26c76ae2c4291d027ca7f11612e4099f1dfcb4e746e6f8f899be29468a459570808210c93f4cfa49e713601d7e74f03f0519b951c31669361c6eece69ab9da9dde213371d33daa70d9ba6b78275aae5f191275cf097d20b8c806c99eaff4ace02329cc20642dfe5401dda8ae23c0cbc9acf91e45fc13f7f0b468def92ca60944f43319eb57c777e541ba6b6c4834689b6c86b58b2c668c99b4880898bfe2aa7056805cb1b2bd1f3dfff4c746fe6ae1412103b1463417cf69dac7a358aa9e0887bf7d1ada70cf5bd44a29058e83bb8d7de7f3e069af0740b4a6b4ec42796b03951ccfb03faf4a537eb42ed97981163bc9c98024f50a65dae5dbc4e02d2893812a869c33a628b9a1b6c4f38ef86e725a374224c2c4ec05a55b38a141140f1cd246d0bb7f44968be59f4926faaa27defc186a75b8d2e7100f5a3c2e0b47df8299853dc7829465e9a0f3c4ae6b747b6261442b945b310354c607e191177865ba8355bad7cfb4c1de3086d9154da72122a343d1277ae1a829cb703bbd09bd5b80e30532393da271c010bf17e39676bc11b3a5bb9f462fb7ee22646bd69bcde399c3e36794be0b1e4d2074d7bdb33105bff0f5ac27cd50f243ae6afeed7d64fa2e970d7cf1c9e267405f953ee02f062a12da47073af957787f89e06cde946d7bb6871e12d2676738d8d662127b1c0649890b489ad1d85aa06aee5b5ba96831a95cccba82e7d844476d5f14ff1614c8aef5011607a2c5432a7867dac813fb64cfb0a0f5cfc3c24ed9c891aee68ad273090acc6eead35d5eb3291090bbb53300b7812c4db51a4ac3b73e1d816a4d2fb40647292e8d45e64cc76e6883736a370cf1401f881b96871f5a106732afd2a72a5c6f59a1427fbf169bbad6da35025bc7fcb69323c5e1f0aa2ea263a2839bda78225bcff82efb9b00c8db063d1df4ca312086bf91c6ef11296d525f0c1ec75ec31881f8dcf5ed53c7883f05f87ba14c5325a2a0141f7858217ee0a7a038a79b9125c5f844069b37b6066f31140e0dd95bac3367ce8a2116411ee054cbaac83adc91d441f3a4d86d83cdb5729aea2b03dbf8f3f961c8f7939b07cfa8ee4022e0569c8a9dedbe443e0c5c06c729dca26ecf66b78cb083127d3602765cb203dda28f104d3e88e9b02d61462a7d4863d2dd5bee1cafe93e9b130c9906a7c4bf952ec426f34ae5ddda0f45298213e9465a6a58579761bfbac0ec0ef679253d86f252a57f4b8761acde5b63250f7b9fd3e0f6b6373eb63a5cc1b455a2815a20012fac73a6f8cf0da98ec4d7ba2dfcafd09ee3aa0acbe10dcfa19ff0ea69cedaeb8979459381daeb362220147e235a30ad263fb48dabe7b3b4c5a215a5b8b5ef0dc9586d85c8f6713b8a5a004b4a50d35d3254f72208cb2a8d444db986171e58f7a484957d6fe9136dd050de3f4144b0a246861e7655b7b98862d37bd0fe2a5a48ad5c098be9e99599864885dea63aa7cbcd87da8523981adf7826a55cbbac060a0ba898d2410e93fb8c69e5b59c66b980984b2e35a75b515b5117564a1c9c9fb37fd926d4f9654abb16f5c3678762036e27c6d820e3addddda61e56b288a712ff6b23195d58ad6952800406876e53ed5182571266103157257f2d352bc6be622ab6640fc1039d911daa10678eb31205d5443063f4c3367417e4427c15c7bf66fd0052e9e133ea6e43a5ee676f52fd323512966a95b319f671bd417a34e5560a1354508c23e75d3a2363dc4dc07c82fae15991552418fcbc632c2488b2befce47f37ba8742f1f0fa26184506848c442c5dc1d5a52c3cf1b0028ef9be208e4d53780109aea06f32bd96dc2a5baae6f6a5fb850081bc3bfe090de1b7c7667656734f675ead907d77aea6172e2d049dcfaa03e35754dc4a1f88c511dd88c60a680181cb64dcf2779b0029b8d4e50bccb776bab75bc21ace5b2e324ea20d931065b2264e8e5362cec16c121bb27a6d79a273c56e3a89c0ea19307bcfb6168cd41057caf401776f94a92b0752d0635fa90f1234f802521c60eccc2c20a6b97e2687d19b040857673fb9145e27297c0e39b105b16758aa8142e3953f2fa4e4e08480843497b805a61d24c6d4dd107679a07539fb0a0a97cada21a9fbe7c97ecf2a9c842a9ddd384df326964b2803dea6af6ecd7352d1c54323ffc0abb6092f7053573fb5c7077937071837d222a377d18acefa89b7b5975a9822e77338f1d01450c6046f53f2865aa2ad398367f20311c759b3b5a45e80b66b97f4e2e3c"}) (async) sendmsg$nl_route(r3, &(0x7f00000010c0)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r0, @ANYBLOB="10c0000000e1000028001280090201807665746808dd000000000000", @ANYRES8=r3, @ANYRESDEC=r2], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000200)=[{'OGAIN', @val={' \'', 'Line Capture Switch'}}, {'OGAIN', @void}], 0x37) close(r1) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @private}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x44}}, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x80) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="842a0a65bd8c2b2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) writev(r2, &(0x7f00000019c0)=[{&(0x7f0000000280)="755f7db94098061ba845fd132609dbeebc7e70d0f1ba2dd7531ba30cf41ed9bb026a26c9b206d5353feb560b4bbaf2eab0cedd2f919b91c89c8abad2b494c2e9464c333093e6ffb89e7d1d1c69b7d5084e59447b3f51175d6944884016331cac32acd12f8036e27b91e6966481c890f8b1d6a6476325a28acae31b40f885292ad784b28a1ecbc3088344baf0fca90442c934eaff15c2dc6ac231c7450deff996db67061af60de6b05225c5cd32a9116621632689cee45453a390fff5", 0xbc}, {&(0x7f00000001c0)="8280b8ec7360ab554bdba7aed58900c47bf75c7375d33a2e69045f428fc3883cb65c531b54ef68dcdc22484a03b908435b9177f58810cd31b1ffc5c5bed50421b306472b4767fa100d1465c6fcb05425865eb990dd8a1f2f135a00554b438e32c8428a089c7ceddd", 0x68}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="0c76284b57a1591313ed4d75f492c43a5248d026a6df4ec8487b81d42897884ccd6f4f7da93a14230ce5f1bc9f185df21133d3f601c4ab05010e9e0b1448575c909b6b753eab59ee0eab5dea9c2d49c1cabb140ebc7d009e5ed4840a4c88c46d3949196edf54b4e6bce2d473a9c8a8785928335ab0dec807c6c0c4a363dae3ad04df548996777e246cefbd715e247a9e66f8d11217ad2cf7647268e33e5dd14336c6e642e9ab6a3ab18328a2466350081eccd6049857721fbeb2bd13c957f3088544d59d4e67f5514018627ef4d8deb1dd5ee27b2facc0374f91c6fcfbb3840baf87136717139a45aa5a10b69a126629591fbb28", 0xf4}, {&(0x7f0000001500)="7e9dfcb99e9d2e011bcbbf1e5f6b7f6c5f2121a1c70c70dcab54fb11ef14f169bb2a69b8b0169599c16d332dd1e9a396d6c0dae906af9fb30eb29999a249cbcc09b8ccc5cf024fe875cc98fa54e2894257ca659461d739b602f253a9b5e0bb85f3f4abe9e08312e365998d1733859a18b991771931b8508793646b525f831e909450d3192ce29ae719246fd2521fb155308e2327b95c345235bfff2cbf58b0ec021c34d9e7edcde59a1db70c18f46dfcf1b6a6b922f8110d688bb894a5a52f98350bd355bb5459719bc6cbc5b92163af2deae46a0bab10f19feba8081029a60b1865", 0xe2}, {&(0x7f0000001600)="f735a65da03c8822be8e1c07312e8ae8bf9c657006b880ab640ff5247f9896002ab7fb803d74cbe754c3c6fca87d2d4190d078f0005e058433a6ff5e2a8c7c71b924e9aeeb9a5561deab105df441a1f3b1004d7c824e64c8c027525295d2bf34ef11fc43d6915596a445a07daa54b7fe95421382e98afebc294c5f14838e1391ff102dc2791a9f015739ce99e04120dd73484d35ae69b4be13d4626034134c42c8419d5502b3e8fb9a97429c7a4290b844408cf84df765d416cab6573e2d2f3c02b390e2d12a756a6ab19efaae7a1e7515368eb05531c6c995f40b5ac63bb106aabc7e47b1a5", 0xe6}, {&(0x7f0000001700)="5a155418e047ff84fdd2cac4f9257598ea6a76edaf88cee68ebdf57f40329f88a7ca78082206060a71d30c56714ea0cfea86807a9a12c84690df9b36edfa6956ce4aa7a8a73bdd647bc0194c1378633ec6e284af6591f79883d9fe34d6fc53eb28f740778d0b714a98d6c70cce16840d9fe35fefbb3d9da6350cfd0395b57cdb5b6cfdaca6895947563a556392b956e386c33d7a64f3552d965ede4208e96a3c96ab803525552001dcbb82be8a0ab3f2c0f5f80298f137730d09ba68db3b9e61aaaa233b1e1afbe17c4f4fee9b5632c766a1fb693f1193082db65991474c475e592281bcd38e0676b8b682367be05525f0a493a5985ba288f8", 0xf9}, {&(0x7f0000000000)="6d654b63aeae9cd1e06c6a573150e3b20405aa9289ee6628310c2a996c16f639964c4527ee1af99a1568e40238c47cf5abff8a5074aae7ace10af3d3f0", 0x3d}, {&(0x7f0000001800)="628a430ecbdc3c2734bd0ada54f86b54cb92a098ef03567afd638f37d51686e511cd99c7eef3cd691a713c078a22c5a63de625f9f7415dd41e7402a7f1f5770395f0d4132aa6158e79a4fc390ba612b58340198bd17fec9643a7b31142d678c92e7a0d1aa9836cbba7a58326a5865f3c478d1d103bf5d60cb2970e45ea8ba71c14ece85f021eea3aa48ba238c1898b08cda3fcc5b4fc40f5fa52090cddc026e14332fb7767e34c4f213ea7d51bb0a0e48f047593bd6ea60fd0648e16a47b2f9cd67c388f", 0xc4}, {&(0x7f0000001900)="d4c676ceead52d4992f22c7920c60ee2b01d2235abf48653969bff9f42d52668a8b8ea506a266464ee9f6b630fdd465926c9516a98931b95a76b15693cef6f5862cb571f2962a061228a2b1f381926a277d83a67c7599baa117b408bfaad431c36c2fde88c0aa0da800b8766833165e07cf1e957cbc580a205d8dc6fcdc470497fda247e73", 0x85}], 0xa) executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x166) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) getsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) chdir(&(0x7f00000003c0)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000050000000000006100f8b4e70b45f1431f264e3c92e38554002086b40c086a083e39e7a32d50a7c0e174688a0f39beaa709f49de134961a8bcfe736c570a0fa2a6819e6a09558497982092e4f74a8df2054e6cad0adeee871dc4"], 0x0, 0x1d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_clone(0x100, 0x0, 0xfffffffffffffc2a, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC=r3]) listxattr(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="9ca965fe3c29a99103c89b63fd9feb0100180000000000e100180000000001000084400000000f000000020000000200000000000700306100707cda9c812460a9d58e13d611221db4ff0f000000000000350a6ed05f854fc1a38d1fc71a196a2540804e1afe9f18a0403681267680"], &(0x7f0000001200)=""/145, 0x37, 0x91, 0x0, 0x1, 0x10000, @value}, 0x28) r4 = openat2(r1, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x80000, 0x140, 0x8}, 0x18) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x401c2103, 0x0) utime(&(0x7f0000000240)='./file0\x00', &(0x7f0000000440)={0x5, 0x5}) readv(r2, &(0x7f0000000180)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1) syz_emit_ethernet(0xfc1, &(0x7f00000035c0)=ANY=[@ANYBLOB="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"], 0x0) r6 = fspick(r1, &(0x7f0000000000)='./file1\x00', 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r7, 0x8910, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000040)='upperdir', &(0x7f0000000100)='./bus\x00', 0xffffffffffffffff) executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r4, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r5, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r6 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r6, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r8 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r7, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r5, r5, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r7, r8, 0x14, 0x2003, r9, @value=r7}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x1, 0x6, 0x7, 0x8, 0x3, 0x3, 0x0, 0x32e, 0x40, 0x58, 0x6b562831, 0x8, 0x38, 0x2, 0x5, 0x4, 0x5}, [{0x3, 0x7, 0x93, 0x1, 0x9, 0x9, 0x631d, 0x5}, {0x4, 0x7fffffff, 0x2, 0xfffffffffffffbff, 0x8, 0x9, 0x3b3, 0x3}], "3fee323c26318f44cf9b5f036ccedc61dc952380321bac85d779c801f85c5b39449e73d33d5b9eeeb201cd714075aa5406426ea9c834fcaea562f43d1ae3e3446319cdfaee179cb456170a541a9736b56c5b746ded39014bd53135fff14954d31ffed516b21a23a54f028bd2a16d893d7fe2bd1bc77825717d6b4b760136e81c969fc6c5067d10511fa659eb52b906f6b28638b3eaa0f0286ab964b0b5dfbe2245247fafa7d3f9964abdf3bebe71b0b664c1f52d9d57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) (async) accept4$alg(r7, 0x0, 0x0, 0x80000) (async) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000014c0)=r5, 0x1) rename(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0\x00') (async) read$FUSE(r8, &(0x7f0000001580)={0x2020}, 0x2020) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000035c0)={0x1, 0x3, 0x6}) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES8=r0], 0x188) syz_io_uring_setup(0x82b, 0x0, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x48441, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r2 = syz_open_dev$dri(0x0, 0x40000000000001ff, 0x703700) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0) r3 = syz_open_pts(r1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="fbd89b3e8977042b8d347071ecb9ced6ca30c62d075a011fd70630380f4fb526e74634260eaa7b3bddf26611e940db08172fad84fa1395", 0x37}, {&(0x7f0000000100)="24adae2b5c2fb0d06e", 0x9}], 0x2}, 0x34000041) r7 = dup(r3) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) dup3(r1, r7, 0x0) r8 = dup3(r3, r1, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r9, &(0x7f0000000080)=[{&(0x7f0000000100)="39ac", 0x2}, {&(0x7f0000000340)="a4ce", 0x2}], 0x2, 0xffffffff, 0x4) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x1000a, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0x100b}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_open_procfs(r0, &(0x7f00000000c0)='net/udplite6\x00') r3 = epoll_create1(0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2) r6 = eventfd2(0x0, 0x0) epoll_pwait2(r3, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r6, &(0x7f0000000180)={0x20000005}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="e50c1fb05e311e800682c8d99ba9a20000000000000000000000000021008a4bf336563e0baf928e002ea61626c06005865829b29c6a0410148e0bf01613a82377d83519104240652895deccf5d4e6cd1e05be1d164622b5faebdcddb68af04cb4dc4b26ba1a7d4af820449b8153f1cf09abc9d9f680cc0f5ec2dfadcecc5b3c347f0ff4cc3135ce99edf5ac60ea2c7214ffff8a46000000000000002c34dffc7faa6b5897eafd00"/178, 0xb2}], 0x1}, 0x0) executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x2c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) executing program 3: kexec_load(0xa, 0x0, 0x0, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000040)={0x6, {{0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, {{0xa, 0x8, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x108) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x2, 0x0) executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x6eef}}) close_range(0xffffffffffffffff, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) executing program 32: socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x2c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000200)={'ip6gre0\x00'}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f00000002c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38]}}]}) executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a40)=@newtfilter={0x4c0, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x490, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x9}}, @TCA_BASIC_ACT={0x284, 0x3, [@m_sample={0x108, 0xd, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0xca, 0x6, "5bca8b46e05d99e01d78ca54171a87c37f51a3be38c38f75295be81b1596e45b478670d0626dbe71604bf1511611b6d51a45dc39b6335378e328ae1f95fec21bbe61b4fa2c640bdb57de637ca11e60e6e79274bafe7e1628f9a174a6029c2a905195e763524786235f27d0449cce43ceb143a2bdfb79caa3a89116208a002a2ef3320cffa9d0e433a8dab879031be705698dcdae09b44874fae7dbf3c6ca09025799ea3a790af17581245394a03becea2e2355ecee42ddae496a76d4baa0c3456ad2a340ee0c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x114, 0x20, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc22}]}, {0xe0, 0x6, "e12d9fd238808ed2d49f9d942e225dfa2a6a4e7afd2c24d0eca077ca01ab42a43728ffb823fd691fde98578a86ba2f81fb8a0ede0b7b8dbfce30df29dc34052f1b35e3f272549fb0d37c8f5173e1a6d48a61dad71936cbb3e1cce8a683cba239cbd86c5cfae0dd97c9f5f3e35ec78f3cadbcfa404239c7593f2a0ec2edb9a6945d5dd75ab26eee206fd6b060d564347acdfe2843fe8e2bf6ca7ec358f22a0c32e222cd3684981878718c0a019d2850dab3756441622e1537bcbacd7b05665d63703b365fbdd3088405565db6fabcbfcb88eb00393a16b169281c0339"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x64, 0xd, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x25}, @TCA_CTINFO_ACT={0x18, 0x3, {0xffff8000, 0x800, 0x1, 0x9, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}]}, {0xd, 0x6, "3aaea37d6677d7c144"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_ACT={0x200, 0x3, [@m_csum={0x98, 0x8, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xdb, 0x3, 0xf3, 0x3}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xfffffff9, 0x10000000, 0x9, 0x2}, 0x2e}}]}, {0x32, 0x6, "696bbd7cd96838ff386e73bfdbb28d548d06e91f66b29d16eb141d57e996992b8755306a36ddec52d1745660f2d7"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x164, 0x18, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x200, 0x80000000, 0x3, 0x200, 0xa}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xaf1}, @TCA_CTINFO_ACT={0x18, 0x3, {0xf42, 0xf, 0x20000000, 0x4, 0x8}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x401}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0xe7, 0x6, "bbaa3bbe2b8ce0ea6b773c6ada3a6b8f8dad5d6fcfbb9ba2706b2690b4b58afff1846c6e76f499fb2f6ed3f881c9cf6f43fa7fb355f2794af9601e72dc18c169e1ab7968b90f22511838bb4dbc65f8e0d85addebb01899d59da3ed8dd9dad1531c32dfe9e475f50915214f3a0c64cfb01f6ea9dcc3e8edf0fac53113673bc229965616beba96ee5f5ba1608908d40f73b723b0afd3ce0eb9f490cf8594bb62bda202a7db70b383188e2e17ab338e724e4d9ce136596dbfb15740a227ca0520b8e06d267bf18ee4b83432c8266de576da09fb5c45f2a5390cd3638f1cdcc45beab60e99"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x15}, 0x0) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r11) execveat(r10, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) (async) r12 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r12, 0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r13, r14+60000000}) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) (async) bind$alg(r15, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r16 = accept$alg(r15, 0x0, 0x0) getsockopt$sock_int(r16, 0x1, 0x48, 0x0, &(0x7f0000000080)) sendmsg$rds(r0, &(0x7f0000001a00)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000880)=""/4089, 0xff9}], 0x1, 0x0, 0x0, 0x4000}, 0x0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x6, 0x1800}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) mknodat$null(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x103) (async) mknodat$null(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x103) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_NAME={0x0, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x1}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_NAME={0x0, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x1}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x48c280, 0x0) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x2, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x1, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x6, 0x80000000, 0x5, 0x1, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x3, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xf, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0xd, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x0, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x2, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0x101, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6332, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NFT_BATCH(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"/306], &(0x7f0000001440)=""/200, 0x132, 0xc8, 0x0, 0x6, 0x0, @void, @value}, 0x28) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2000a54, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x800000, {}, {0x0, 0x0, 0x0, 0x0, 0xfc, 0xff, "e6dd3c3d"}, 0xb20f, 0x1, {0x0}}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4801000041000701fcfffffffddbdf25017c0000040036802e0101801400"], 0x148}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$addseals(r5, 0x409, 0x3f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x1d, &(0x7f00000008c0)=0x1, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="7d793073f5899f1d46f9a515acee064a2e902d73fa5c4499806dab65812b14915a4a802457f6fe0119b95d7b14d78c33bc3f14d1bdab6f7367bc37c8b0debaa0d111c8f9c052ce7a3d97e9ddfa9b7dbb839a74a402c9fd21db0c35214fe5402f0e91af9f76dfe71c586655157c9a04d66386db043f138f5c95a95b0a3d5a06f9", 0x80}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmmsg$inet(r3, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @multicast1}}}], 0x20}}], 0x1, 0x4000004) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x10d8020, &(0x7f0000000040)=ANY=[@ANYBLOB="6d6fee5c54affd19822464653d3030303030303030303030303030303030"]) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x48, 0x0, &(0x7f00007d0000)) r7 = fsopen(&(0x7f0000000000)='gfs2\x00', 0x0) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) read$ptp(r8, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000000080)=']\'%!-\'\x00', &(0x7f00000000c0)='./file0\x00', r8) executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2001) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)='/j8', 0x3}, {0x0}], 0x2) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000001040)) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0585611, &(0x7f0000000000)={0x6, 0x5, 0x0, "6e145c0ef63b736608314ceb833d278f8739057c56b9f38df459aa6db8a9f4d6", 0x31364d4e}) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) close_range(r0, r0, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r2], 0x1}, 0x58) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000060006000300000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x0, 0x40000121, &(0x7f0000000400)={0x0, 0x3938700}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022dbd7000fddbdf2501000000060006004e240000540508809c0300801400040002000005ac1414bb0000000000000000240002003008062b50b06c4769f6dbcec85a5a9ef60feaab3bea8f8eb0b15322be121b0824000200929f14647655f2e99ca07ec50362fa8ef2387732f4d98a1a0f1855b6ed961c503c0309807c000080060001000a00000014000200fc0100000000000000000000000000010500030003000000060001000200000008000200ac1e01010500030003000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb050003000000000088000080060001000200000008000200ac1414bb0500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030003000000060001000a00000014000200fc020000000000000000000000000001050003000000000088000080060001000a00000014000200fc0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030001000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a0000001400020000000000000000000000000000000000050003000200000048010080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fe8800000000000000000000000001010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fc00000000000000000000000000000105000300000000000600010002000000080002000a0101000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ffffffff0500030001000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a000000140002000000000000000000000000000000000005000300030000000600010002000000080002007f000001050003000200000064000080060001000200000008000200000000000500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a00000014000200000000000000000000000000000000010500030001000000b4010080640109801c000080060001000200000008000200640101000500030002000000400000800600010002000000080002000a0101020500030002000000060001000a00000014000200ff010000000000000000000000000001050003000000000028000080060001000a00000014000200ff020000000000000000000000000001050003000200000094000080060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030003000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000a00000014000200fc00000000000000000000000000000105000300010000001c000080060001000200000008000200ac1414bb050003000000000028000080060001000a0000001400020000000000000000000000000000000000050003000100000004000080200004000a00000d00000004ff010000000000000000000000000001fa08000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff08000a0001000000"], 0x570}, 0x1, 0x0, 0x0, 0x8080}, 0x8010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket(0x2, 0x80805, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') preadv(r10, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r11 = socket$inet6(0xa, 0x800, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r11, 0x0) sendto$inet6(r11, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r11, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="72da", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000028c0)="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", 0xffe}], 0x1}}], 0x2, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000b95000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7e, 0x0, 0x0}, &(0x7f0000000180)=0x40) sendmmsg$inet(r9, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000200)={r8, 0x7}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x5) (async) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000aeb000/0x3000)=nil, 0x3000}, 0x4}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x1000a, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x60}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x8000000, 0x50) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000000)=0x4, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) socket$kcm(0x29, 0x0, 0x0) executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x5040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) write$UHID_CREATE(r1, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x759e, 0x6c08, 0x2, 0x200}}, 0x120) r2 = socket$kcm(0x2, 0x3, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67) (async) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000300)="77729a2d3c", 0x5}, {&(0x7f00000005c0)="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", 0x115}, {&(0x7f00000003c0)="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", 0x14f}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125971357630b6f3eb4fb4064c42c2b2519a1c77824df6f0653fb116149fcb5c7e46fce32b1de7f511951d4b1ae47781250afdb11680684c1d2854810a90d", 0xe8}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb", 0x53}, {&(0x7f0000000dc0)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d623cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3", 0xd4}], 0x7, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x1c}}}}], 0x20}, 0x0) recvmmsg(r2, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000b00)=""/192, 0xc0}, {&(0x7f0000000080)=""/85, 0x55}], 0x3, &(0x7f0000000bc0)=""/195, 0xc3}, 0x6}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000cc0)=""/184, 0xb8}, {&(0x7f0000004840)=""/128, 0x80}, {&(0x7f0000000ec0)=""/230, 0xe6}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/90, 0x5a}], 0x5, &(0x7f0000004800)=""/18, 0x12}, 0x7f}, {{&(0x7f00000026c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002740)=""/216, 0xd8}, {&(0x7f0000002840)=""/118, 0x76}, {&(0x7f00000028c0)=""/180, 0xb4}, {&(0x7f0000002980)=""/238, 0xee}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f00000048c0)=""/198, 0xc6}, {&(0x7f0000002b80)=""/186, 0xba}, {&(0x7f0000002c40)=""/179, 0xb3}, {&(0x7f0000002d00)=""/223, 0xdf}, {&(0x7f0000002e00)=""/142, 0x8e}], 0xa, &(0x7f0000002f80)=""/127, 0x7f}}, {{&(0x7f0000003000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000003080)=""/119, 0x77}], 0x1, &(0x7f0000003100)=""/174, 0xae}, 0x2}, {{&(0x7f00000031c0)=@alg, 0x80, &(0x7f0000000d80)=[{&(0x7f0000003240)=""/205, 0xcd}, {&(0x7f0000000a40)=""/56, 0x38}, {&(0x7f0000003340)=""/83, 0x53}], 0x3, &(0x7f00000033c0)=""/226, 0xe2}, 0x8}, {{&(0x7f00000034c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000003540)=""/250, 0xfa}], 0x1, &(0x7f0000003640)=""/4096, 0x1000}, 0x7265}], 0x6, 0xf796edee3d7da175, &(0x7f00000047c0)) (async) recvmmsg(r2, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000b00)=""/192, 0xc0}, {&(0x7f0000000080)=""/85, 0x55}], 0x3, &(0x7f0000000bc0)=""/195, 0xc3}, 0x6}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000cc0)=""/184, 0xb8}, {&(0x7f0000004840)=""/128, 0x80}, {&(0x7f0000000ec0)=""/230, 0xe6}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/90, 0x5a}], 0x5, &(0x7f0000004800)=""/18, 0x12}, 0x7f}, {{&(0x7f00000026c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002740)=""/216, 0xd8}, {&(0x7f0000002840)=""/118, 0x76}, {&(0x7f00000028c0)=""/180, 0xb4}, {&(0x7f0000002980)=""/238, 0xee}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f00000048c0)=""/198, 0xc6}, {&(0x7f0000002b80)=""/186, 0xba}, {&(0x7f0000002c40)=""/179, 0xb3}, {&(0x7f0000002d00)=""/223, 0xdf}, {&(0x7f0000002e00)=""/142, 0x8e}], 0xa, &(0x7f0000002f80)=""/127, 0x7f}}, {{&(0x7f0000003000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000003080)=""/119, 0x77}], 0x1, &(0x7f0000003100)=""/174, 0xae}, 0x2}, {{&(0x7f00000031c0)=@alg, 0x80, &(0x7f0000000d80)=[{&(0x7f0000003240)=""/205, 0xcd}, {&(0x7f0000000a40)=""/56, 0x38}, {&(0x7f0000003340)=""/83, 0x53}], 0x3, &(0x7f00000033c0)=""/226, 0xe2}, 0x8}, {{&(0x7f00000034c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000003540)=""/250, 0xfa}], 0x1, &(0x7f0000003640)=""/4096, 0x1000}, 0x7265}], 0x6, 0xf796edee3d7da175, &(0x7f00000047c0)) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode bisect: bisecting 25 programs bisect: split chunks (needed=false): <25> bisect: split chunk #0 of len 25 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 7, 6, 8, 40, 10, 25, 19, 7, 8, 23, 30, 9, 12, 13, 17] detailed listing: executing program 3: kexec_load(0xa, 0x0, 0x0, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000040)={0x6, {{0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, {{0xa, 0x8, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x108) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x2, 0x0) executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x6eef}}) close_range(0xffffffffffffffff, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) executing program 32: socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x2c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000200)={'ip6gre0\x00'}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f00000002c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38]}}]}) executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a40)=@newtfilter={0x4c0, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x490, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x9}}, @TCA_BASIC_ACT={0x284, 0x3, [@m_sample={0x108, 0xd, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0xca, 0x6, "5bca8b46e05d99e01d78ca54171a87c37f51a3be38c38f75295be81b1596e45b478670d0626dbe71604bf1511611b6d51a45dc39b6335378e328ae1f95fec21bbe61b4fa2c640bdb57de637ca11e60e6e79274bafe7e1628f9a174a6029c2a905195e763524786235f27d0449cce43ceb143a2bdfb79caa3a89116208a002a2ef3320cffa9d0e433a8dab879031be705698dcdae09b44874fae7dbf3c6ca09025799ea3a790af17581245394a03becea2e2355ecee42ddae496a76d4baa0c3456ad2a340ee0c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x114, 0x20, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc22}]}, {0xe0, 0x6, "e12d9fd238808ed2d49f9d942e225dfa2a6a4e7afd2c24d0eca077ca01ab42a43728ffb823fd691fde98578a86ba2f81fb8a0ede0b7b8dbfce30df29dc34052f1b35e3f272549fb0d37c8f5173e1a6d48a61dad71936cbb3e1cce8a683cba239cbd86c5cfae0dd97c9f5f3e35ec78f3cadbcfa404239c7593f2a0ec2edb9a6945d5dd75ab26eee206fd6b060d564347acdfe2843fe8e2bf6ca7ec358f22a0c32e222cd3684981878718c0a019d2850dab3756441622e1537bcbacd7b05665d63703b365fbdd3088405565db6fabcbfcb88eb00393a16b169281c0339"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x64, 0xd, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x25}, @TCA_CTINFO_ACT={0x18, 0x3, {0xffff8000, 0x800, 0x1, 0x9, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}]}, {0xd, 0x6, "3aaea37d6677d7c144"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_ACT={0x200, 0x3, [@m_csum={0x98, 0x8, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xdb, 0x3, 0xf3, 0x3}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xfffffff9, 0x10000000, 0x9, 0x2}, 0x2e}}]}, {0x32, 0x6, "696bbd7cd96838ff386e73bfdbb28d548d06e91f66b29d16eb141d57e996992b8755306a36ddec52d1745660f2d7"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x164, 0x18, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x200, 0x80000000, 0x3, 0x200, 0xa}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xaf1}, @TCA_CTINFO_ACT={0x18, 0x3, {0xf42, 0xf, 0x20000000, 0x4, 0x8}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x401}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0xe7, 0x6, "bbaa3bbe2b8ce0ea6b773c6ada3a6b8f8dad5d6fcfbb9ba2706b2690b4b58afff1846c6e76f499fb2f6ed3f881c9cf6f43fa7fb355f2794af9601e72dc18c169e1ab7968b90f22511838bb4dbc65f8e0d85addebb01899d59da3ed8dd9dad1531c32dfe9e475f50915214f3a0c64cfb01f6ea9dcc3e8edf0fac53113673bc229965616beba96ee5f5ba1608908d40f73b723b0afd3ce0eb9f490cf8594bb62bda202a7db70b383188e2e17ab338e724e4d9ce136596dbfb15740a227ca0520b8e06d267bf18ee4b83432c8266de576da09fb5c45f2a5390cd3638f1cdcc45beab60e99"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x15}, 0x0) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r11) execveat(r10, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) (async) r12 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r12, 0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r13, r14+60000000}) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) (async) bind$alg(r15, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r16 = accept$alg(r15, 0x0, 0x0) getsockopt$sock_int(r16, 0x1, 0x48, 0x0, &(0x7f0000000080)) sendmsg$rds(r0, &(0x7f0000001a00)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000880)=""/4089, 0xff9}], 0x1, 0x0, 0x0, 0x4000}, 0x0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x6, 0x1800}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) mknodat$null(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x103) (async) mknodat$null(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x103) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_NAME={0x0, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x1}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_NAME={0x0, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x1}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x48c280, 0x0) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x2, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x1, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x6, 0x80000000, 0x5, 0x1, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x3, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xf, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0xd, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x0, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x2, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0x101, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6332, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NFT_BATCH(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"/306], &(0x7f0000001440)=""/200, 0x132, 0xc8, 0x0, 0x6, 0x0, @void, @value}, 0x28) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2000a54, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x800000, {}, {0x0, 0x0, 0x0, 0x0, 0xfc, 0xff, "e6dd3c3d"}, 0xb20f, 0x1, {0x0}}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4801000041000701fcfffffffddbdf25017c0000040036802e0101801400"], 0x148}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$addseals(r5, 0x409, 0x3f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x1d, &(0x7f00000008c0)=0x1, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="7d793073f5899f1d46f9a515acee064a2e902d73fa5c4499806dab65812b14915a4a802457f6fe0119b95d7b14d78c33bc3f14d1bdab6f7367bc37c8b0debaa0d111c8f9c052ce7a3d97e9ddfa9b7dbb839a74a402c9fd21db0c35214fe5402f0e91af9f76dfe71c586655157c9a04d66386db043f138f5c95a95b0a3d5a06f9", 0x80}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmmsg$inet(r3, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @multicast1}}}], 0x20}}], 0x1, 0x4000004) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x10d8020, &(0x7f0000000040)=ANY=[@ANYBLOB="6d6fee5c54affd19822464653d3030303030303030303030303030303030"]) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x48, 0x0, &(0x7f00007d0000)) r7 = fsopen(&(0x7f0000000000)='gfs2\x00', 0x0) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) read$ptp(r8, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000000080)=']\'%!-\'\x00', &(0x7f00000000c0)='./file0\x00', r8) executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2001) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)='/j8', 0x3}, {0x0}], 0x2) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000001040)) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0585611, &(0x7f0000000000)={0x6, 0x5, 0x0, "6e145c0ef63b736608314ceb833d278f8739057c56b9f38df459aa6db8a9f4d6", 0x31364d4e}) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) close_range(r0, r0, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r2], 0x1}, 0x58) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x0, 0x40000121, &(0x7f0000000400)={0x0, 0x3938700}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x570}, 0x1, 0x0, 0x0, 0x8080}, 0x8010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket(0x2, 0x80805, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') preadv(r10, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r11 = socket$inet6(0xa, 0x800, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r11, 0x0) sendto$inet6(r11, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r11, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="72da", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000028c0)="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", 0xffe}], 0x1}}], 0x2, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000b95000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7e, 0x0, 0x0}, &(0x7f0000000180)=0x40) sendmmsg$inet(r9, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000200)={r8, 0x7}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x5) (async) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000aeb000/0x3000)=nil, 0x3000}, 0x4}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x1000a, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x60}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x8000000, 0x50) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000000)=0x4, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) socket$kcm(0x29, 0x0, 0x0) executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x5040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) write$UHID_CREATE(r1, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x759e, 0x6c08, 0x2, 0x200}}, 0x120) r2 = socket$kcm(0x2, 0x3, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67) (async) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000300)="77729a2d3c", 0x5}, {&(0x7f00000005c0)="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", 0x115}, {&(0x7f00000003c0)="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", 0x14f}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125971357630b6f3eb4fb4064c42c2b2519a1c77824df6f0653fb116149fcb5c7e46fce32b1de7f511951d4b1ae47781250afdb11680684c1d2854810a90d", 0xe8}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb", 0x53}, {&(0x7f0000000dc0)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d623cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3", 0xd4}], 0x7, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x1c}}}}], 0x20}, 0x0) recvmmsg(r2, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000b00)=""/192, 0xc0}, {&(0x7f0000000080)=""/85, 0x55}], 0x3, &(0x7f0000000bc0)=""/195, 0xc3}, 0x6}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000cc0)=""/184, 0xb8}, {&(0x7f0000004840)=""/128, 0x80}, {&(0x7f0000000ec0)=""/230, 0xe6}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/90, 0x5a}], 0x5, &(0x7f0000004800)=""/18, 0x12}, 0x7f}, {{&(0x7f00000026c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002740)=""/216, 0xd8}, {&(0x7f0000002840)=""/118, 0x76}, {&(0x7f00000028c0)=""/180, 0xb4}, {&(0x7f0000002980)=""/238, 0xee}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f00000048c0)=""/198, 0xc6}, {&(0x7f0000002b80)=""/186, 0xba}, {&(0x7f0000002c40)=""/179, 0xb3}, {&(0x7f0000002d00)=""/223, 0xdf}, {&(0x7f0000002e00)=""/142, 0x8e}], 0xa, &(0x7f0000002f80)=""/127, 0x7f}}, {{&(0x7f0000003000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000003080)=""/119, 0x77}], 0x1, &(0x7f0000003100)=""/174, 0xae}, 0x2}, {{&(0x7f00000031c0)=@alg, 0x80, &(0x7f0000000d80)=[{&(0x7f0000003240)=""/205, 0xcd}, {&(0x7f0000000a40)=""/56, 0x38}, {&(0x7f0000003340)=""/83, 0x53}], 0x3, &(0x7f00000033c0)=""/226, 0xe2}, 0x8}, {{&(0x7f00000034c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000003540)=""/250, 0xfa}], 0x1, &(0x7f0000003640)=""/4096, 0x1000}, 0x7265}], 0x6, 0xf796edee3d7da175, &(0x7f00000047c0)) (async) recvmmsg(r2, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000b00)=""/192, 0xc0}, {&(0x7f0000000080)=""/85, 0x55}], 0x3, &(0x7f0000000bc0)=""/195, 0xc3}, 0x6}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000cc0)=""/184, 0xb8}, {&(0x7f0000004840)=""/128, 0x80}, {&(0x7f0000000ec0)=""/230, 0xe6}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/90, 0x5a}], 0x5, &(0x7f0000004800)=""/18, 0x12}, 0x7f}, {{&(0x7f00000026c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002740)=""/216, 0xd8}, {&(0x7f0000002840)=""/118, 0x76}, {&(0x7f00000028c0)=""/180, 0xb4}, {&(0x7f0000002980)=""/238, 0xee}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f00000048c0)=""/198, 0xc6}, {&(0x7f0000002b80)=""/186, 0xba}, {&(0x7f0000002c40)=""/179, 0xb3}, {&(0x7f0000002d00)=""/223, 0xdf}, {&(0x7f0000002e00)=""/142, 0x8e}], 0xa, &(0x7f0000002f80)=""/127, 0x7f}}, {{&(0x7f0000003000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000003080)=""/119, 0x77}], 0x1, &(0x7f0000003100)=""/174, 0xae}, 0x2}, {{&(0x7f00000031c0)=@alg, 0x80, &(0x7f0000000d80)=[{&(0x7f0000003240)=""/205, 0xcd}, {&(0x7f0000000a40)=""/56, 0x38}, {&(0x7f0000003340)=""/83, 0x53}], 0x3, &(0x7f00000033c0)=""/226, 0xe2}, 0x8}, {{&(0x7f00000034c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000003540)=""/250, 0xfa}], 0x1, &(0x7f0000003640)=""/4096, 0x1000}, 0x7265}], 0x6, 0xf796edee3d7da175, &(0x7f00000047c0)) program did not crash bisect: testing without sub-chunk 2/3 testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 38, 17, 30, 30, 30, 12, 18, 6, 8, 23, 30, 9, 12, 13, 17] detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) fsync(0xffffffffffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x4c, 0x30, 0xcac229faa96ee7df, 0x0, 0xfffffffc, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0x4}, {0xc, 0x4, {0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e032", 0x3a}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "51a1cb4e9e8a319f", "c0d55a000d0026c98c8da80a9015ad00", '\x00', "bb10000000000001"}, 0x28) readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}, {&(0x7f0000003300)=""/4095, 0xfff}], 0x2) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000000c0)={{r3}, "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"}) sendmsg$nl_route(r3, &(0x7f00000010c0)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r0, @ANYBLOB="10c0000000e1000028001280090201807665746808dd000000000000", @ANYRES8=r3, @ANYRESDEC=r2], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x4c, 0x30, 0xcac229faa96ee7df, 0x0, 0xfffffffc, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0x4}, {0xc, 0x4, {0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e032", 0x3a}], 0x2}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "51a1cb4e9e8a319f", "c0d55a000d0026c98c8da80a9015ad00", '\x00', "bb10000000000001"}, 0x28) (async) readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}, {&(0x7f0000003300)=""/4095, 0xfff}], 0x2) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000000c0)={{r3}, "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"}) (async) sendmsg$nl_route(r3, &(0x7f00000010c0)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r0, @ANYBLOB="10c0000000e1000028001280090201807665746808dd000000000000", @ANYRES8=r3, @ANYRESDEC=r2], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000200)=[{'OGAIN', @val={' \'', 'Line Capture Switch'}}, {'OGAIN', @void}], 0x37) close(r1) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @private}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x44}}, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x80) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="842a0a65bd8c2b2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) writev(r2, &(0x7f00000019c0)=[{&(0x7f0000000280)="755f7db94098061ba845fd132609dbeebc7e70d0f1ba2dd7531ba30cf41ed9bb026a26c9b206d5353feb560b4bbaf2eab0cedd2f919b91c89c8abad2b494c2e9464c333093e6ffb89e7d1d1c69b7d5084e59447b3f51175d6944884016331cac32acd12f8036e27b91e6966481c890f8b1d6a6476325a28acae31b40f885292ad784b28a1ecbc3088344baf0fca90442c934eaff15c2dc6ac231c7450deff996db67061af60de6b05225c5cd32a9116621632689cee45453a390fff5", 0xbc}, {&(0x7f00000001c0)="8280b8ec7360ab554bdba7aed58900c47bf75c7375d33a2e69045f428fc3883cb65c531b54ef68dcdc22484a03b908435b9177f58810cd31b1ffc5c5bed50421b306472b4767fa100d1465c6fcb05425865eb990dd8a1f2f135a00554b438e32c8428a089c7ceddd", 0x68}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="0c76284b57a1591313ed4d75f492c43a5248d026a6df4ec8487b81d42897884ccd6f4f7da93a14230ce5f1bc9f185df21133d3f601c4ab05010e9e0b1448575c909b6b753eab59ee0eab5dea9c2d49c1cabb140ebc7d009e5ed4840a4c88c46d3949196edf54b4e6bce2d473a9c8a8785928335ab0dec807c6c0c4a363dae3ad04df548996777e246cefbd715e247a9e66f8d11217ad2cf7647268e33e5dd14336c6e642e9ab6a3ab18328a2466350081eccd6049857721fbeb2bd13c957f3088544d59d4e67f5514018627ef4d8deb1dd5ee27b2facc0374f91c6fcfbb3840baf87136717139a45aa5a10b69a126629591fbb28", 0xf4}, {&(0x7f0000001500)="7e9dfcb99e9d2e011bcbbf1e5f6b7f6c5f2121a1c70c70dcab54fb11ef14f169bb2a69b8b0169599c16d332dd1e9a396d6c0dae906af9fb30eb29999a249cbcc09b8ccc5cf024fe875cc98fa54e2894257ca659461d739b602f253a9b5e0bb85f3f4abe9e08312e365998d1733859a18b991771931b8508793646b525f831e909450d3192ce29ae719246fd2521fb155308e2327b95c345235bfff2cbf58b0ec021c34d9e7edcde59a1db70c18f46dfcf1b6a6b922f8110d688bb894a5a52f98350bd355bb5459719bc6cbc5b92163af2deae46a0bab10f19feba8081029a60b1865", 0xe2}, {&(0x7f0000001600)="f735a65da03c8822be8e1c07312e8ae8bf9c657006b880ab640ff5247f9896002ab7fb803d74cbe754c3c6fca87d2d4190d078f0005e058433a6ff5e2a8c7c71b924e9aeeb9a5561deab105df441a1f3b1004d7c824e64c8c027525295d2bf34ef11fc43d6915596a445a07daa54b7fe95421382e98afebc294c5f14838e1391ff102dc2791a9f015739ce99e04120dd73484d35ae69b4be13d4626034134c42c8419d5502b3e8fb9a97429c7a4290b844408cf84df765d416cab6573e2d2f3c02b390e2d12a756a6ab19efaae7a1e7515368eb05531c6c995f40b5ac63bb106aabc7e47b1a5", 0xe6}, {&(0x7f0000001700)="5a155418e047ff84fdd2cac4f9257598ea6a76edaf88cee68ebdf57f40329f88a7ca78082206060a71d30c56714ea0cfea86807a9a12c84690df9b36edfa6956ce4aa7a8a73bdd647bc0194c1378633ec6e284af6591f79883d9fe34d6fc53eb28f740778d0b714a98d6c70cce16840d9fe35fefbb3d9da6350cfd0395b57cdb5b6cfdaca6895947563a556392b956e386c33d7a64f3552d965ede4208e96a3c96ab803525552001dcbb82be8a0ab3f2c0f5f80298f137730d09ba68db3b9e61aaaa233b1e1afbe17c4f4fee9b5632c766a1fb693f1193082db65991474c475e592281bcd38e0676b8b682367be05525f0a493a5985ba288f8", 0xf9}, {&(0x7f0000000000)="6d654b63aeae9cd1e06c6a573150e3b20405aa9289ee6628310c2a996c16f639964c4527ee1af99a1568e40238c47cf5abff8a5074aae7ace10af3d3f0", 0x3d}, {&(0x7f0000001800)="628a430ecbdc3c2734bd0ada54f86b54cb92a098ef03567afd638f37d51686e511cd99c7eef3cd691a713c078a22c5a63de625f9f7415dd41e7402a7f1f5770395f0d4132aa6158e79a4fc390ba612b58340198bd17fec9643a7b31142d678c92e7a0d1aa9836cbba7a58326a5865f3c478d1d103bf5d60cb2970e45ea8ba71c14ece85f021eea3aa48ba238c1898b08cda3fcc5b4fc40f5fa52090cddc026e14332fb7767e34c4f213ea7d51bb0a0e48f047593bd6ea60fd0648e16a47b2f9cd67c388f", 0xc4}, {&(0x7f0000001900)="d4c676ceead52d4992f22c7920c60ee2b01d2235abf48653969bff9f42d52668a8b8ea506a266464ee9f6b630fdd465926c9516a98931b95a76b15693cef6f5862cb571f2962a061228a2b1f381926a277d83a67c7599baa117b408bfaad431c36c2fde88c0aa0da800b8766833165e07cf1e957cbc580a205d8dc6fcdc470497fda247e73", 0x85}], 0xa) executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x166) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) getsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) chdir(&(0x7f00000003c0)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000050000000000006100f8b4e70b45f1431f264e3c92e38554002086b40c086a083e39e7a32d50a7c0e174688a0f39beaa709f49de134961a8bcfe736c570a0fa2a6819e6a09558497982092e4f74a8df2054e6cad0adeee871dc4"], 0x0, 0x1d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_clone(0x100, 0x0, 0xfffffffffffffc2a, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC=r3]) listxattr(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="9ca965fe3c29a99103c89b63fd9feb0100180000000000e100180000000001000084400000000f000000020000000200000000000700306100707cda9c812460a9d58e13d611221db4ff0f000000000000350a6ed05f854fc1a38d1fc71a196a2540804e1afe9f18a0403681267680"], &(0x7f0000001200)=""/145, 0x37, 0x91, 0x0, 0x1, 0x10000, @value}, 0x28) r4 = openat2(r1, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x80000, 0x140, 0x8}, 0x18) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x401c2103, 0x0) utime(&(0x7f0000000240)='./file0\x00', &(0x7f0000000440)={0x5, 0x5}) readv(r2, &(0x7f0000000180)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1) syz_emit_ethernet(0xfc1, &(0x7f00000035c0)=ANY=[@ANYBLOB="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"], 0x0) r6 = fspick(r1, &(0x7f0000000000)='./file1\x00', 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r7, 0x8910, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000040)='upperdir', &(0x7f0000000100)='./bus\x00', 0xffffffffffffffff) executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r4, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r5, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r6 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r6, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r8 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r7, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r5, r5, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r7, r8, 0x14, 0x2003, r9, @value=r7}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x1, 0x6, 0x7, 0x8, 0x3, 0x3, 0x0, 0x32e, 0x40, 0x58, 0x6b562831, 0x8, 0x38, 0x2, 0x5, 0x4, 0x5}, [{0x3, 0x7, 0x93, 0x1, 0x9, 0x9, 0x631d, 0x5}, {0x4, 0x7fffffff, 0x2, 0xfffffffffffffbff, 0x8, 0x9, 0x3b3, 0x3}], "3fee323c26318f44cf9b5f036ccedc61dc952380321bac85d779c801f85c5b39449e73d33d5b9eeeb201cd714075aa5406426ea9c834fcaea562f43d1ae3e3446319cdfaee179cb456170a541a9736b56c5b746ded39014bd53135fff14954d31ffed516b21a23a54f028bd2a16d893d7fe2bd1bc77825717d6b4b760136e81c969fc6c5067d10511fa659eb52b906f6b28638b3eaa0f0286ab964b0b5dfbe2245247fafa7d3f9964abdf3bebe71b0b664c1f52d9d57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) (async) accept4$alg(r7, 0x0, 0x0, 0x80000) (async) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000014c0)=r5, 0x1) rename(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0\x00') (async) read$FUSE(r8, &(0x7f0000001580)={0x2020}, 0x2020) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000035c0)={0x1, 0x3, 0x6}) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES8=r0], 0x188) syz_io_uring_setup(0x82b, 0x0, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x48441, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r2 = syz_open_dev$dri(0x0, 0x40000000000001ff, 0x703700) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0) r3 = syz_open_pts(r1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="fbd89b3e8977042b8d347071ecb9ced6ca30c62d075a011fd70630380f4fb526e74634260eaa7b3bddf26611e940db08172fad84fa1395", 0x37}, {&(0x7f0000000100)="24adae2b5c2fb0d06e", 0x9}], 0x2}, 0x34000041) r7 = dup(r3) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) dup3(r1, r7, 0x0) r8 = dup3(r3, r1, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r9, &(0x7f0000000080)=[{&(0x7f0000000100)="39ac", 0x2}, {&(0x7f0000000340)="a4ce", 0x2}], 0x2, 0xffffffff, 0x4) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x1000a, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0x100b}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_open_procfs(r0, &(0x7f00000000c0)='net/udplite6\x00') r3 = epoll_create1(0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2) r6 = eventfd2(0x0, 0x0) epoll_pwait2(r3, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r6, &(0x7f0000000180)={0x20000005}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="e50c1fb05e311e800682c8d99ba9a20000000000000000000000000021008a4bf336563e0baf928e002ea61626c06005865829b29c6a0410148e0bf01613a82377d83519104240652895deccf5d4e6cd1e05be1d164622b5faebdcddb68af04cb4dc4b26ba1a7d4af820449b8153f1cf09abc9d9f680cc0f5ec2dfadcecc5b3c347f0ff4cc3135ce99edf5ac60ea2c7214ffff8a46000000000000002c34dffc7faa6b5897eafd00"/178, 0xb2}], 0x1}, 0x0) executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x2c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) close_range(r0, r0, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r2], 0x1}, 0x58) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x0, 0x40000121, &(0x7f0000000400)={0x0, 0x3938700}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x570}, 0x1, 0x0, 0x0, 0x8080}, 0x8010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket(0x2, 0x80805, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') preadv(r10, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r11 = socket$inet6(0xa, 0x800, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r11, 0x0) sendto$inet6(r11, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r11, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="72da", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000028c0)="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", 0xffe}], 0x1}}], 0x2, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000b95000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7e, 0x0, 0x0}, &(0x7f0000000180)=0x40) sendmmsg$inet(r9, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000200)={r8, 0x7}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x5) (async) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000aeb000/0x3000)=nil, 0x3000}, 0x4}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x1000a, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x60}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x8000000, 0x50) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000000)=0x4, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) socket$kcm(0x29, 0x0, 0x0) executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x5040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) write$UHID_CREATE(r1, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x759e, 0x6c08, 0x2, 0x200}}, 0x120) r2 = socket$kcm(0x2, 0x3, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67) (async) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f5fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22786d0548b25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30237a6e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a402956564f854d71c892e4aada1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020f495750f9936d9c07130d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338fe7c08fd9874e743a31582162232c7d6c614e7b3513abcc0feb99b2c9111300004fe291f5bd682c039183e61c1fdac90b2a015939a8d10b07a05e99e5772b4b9329275cef8de2b066d4e4d421e4a0a69cdd8f674b12f5b3fa764e4b1e9f4d767e252e37477813a03f18da16d598fddcf4be590d9f65f64c647cb2f330a614fe688d3d80182ed8aa59905a1cb0d3f034d927e070d71f56ee8e5c5bdf23c4f85c7a17834467bd6cf58218868fe53e3675c130bbe44bea271fa67999a0dc3dbf7c40dbba6e7d6cc0936bd8d466a1f041883c093a3a60743d0549b1a989a2fa41ff978388014434909053e279a21e7866bd4efb4a9f46b7a8b0d1d84d83020e9e68936ca3de030269784aa29a3e25146cd5b03d21ca82f961be925c9ad487fb24b1e35c2d043ee4b6a4aaf811c4308a6ced6b4c45e7513a3f0e1421cb3b0fd8571a7085c9a4b454e4ee8b44767428666cd108b78369b871ab32f36943e24976f4bb6bd4068cc19585a2de791e3f950d220b28f4ba268d8c9dbccc1a705b1b1c30881babdbc8cc4cf97b801e4d410fd7c61b34b1f126e6df1b0e9c676d1ab5", 0x5c9}, {&(0x7f0000000300)="77729a2d3c", 0x5}, {&(0x7f00000005c0)="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", 0x115}, {&(0x7f00000003c0)="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", 0x14f}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125971357630b6f3eb4fb4064c42c2b2519a1c77824df6f0653fb116149fcb5c7e46fce32b1de7f511951d4b1ae47781250afdb11680684c1d2854810a90d", 0xe8}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb", 0x53}, {&(0x7f0000000dc0)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d623cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3", 0xd4}], 0x7, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x1c}}}}], 0x20}, 0x0) recvmmsg(r2, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000b00)=""/192, 0xc0}, {&(0x7f0000000080)=""/85, 0x55}], 0x3, &(0x7f0000000bc0)=""/195, 0xc3}, 0x6}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000cc0)=""/184, 0xb8}, {&(0x7f0000004840)=""/128, 0x80}, {&(0x7f0000000ec0)=""/230, 0xe6}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/90, 0x5a}], 0x5, &(0x7f0000004800)=""/18, 0x12}, 0x7f}, {{&(0x7f00000026c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002740)=""/216, 0xd8}, {&(0x7f0000002840)=""/118, 0x76}, {&(0x7f00000028c0)=""/180, 0xb4}, {&(0x7f0000002980)=""/238, 0xee}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f00000048c0)=""/198, 0xc6}, {&(0x7f0000002b80)=""/186, 0xba}, {&(0x7f0000002c40)=""/179, 0xb3}, {&(0x7f0000002d00)=""/223, 0xdf}, {&(0x7f0000002e00)=""/142, 0x8e}], 0xa, &(0x7f0000002f80)=""/127, 0x7f}}, {{&(0x7f0000003000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000003080)=""/119, 0x77}], 0x1, &(0x7f0000003100)=""/174, 0xae}, 0x2}, {{&(0x7f00000031c0)=@alg, 0x80, &(0x7f0000000d80)=[{&(0x7f0000003240)=""/205, 0xcd}, {&(0x7f0000000a40)=""/56, 0x38}, {&(0x7f0000003340)=""/83, 0x53}], 0x3, &(0x7f00000033c0)=""/226, 0xe2}, 0x8}, {{&(0x7f00000034c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000003540)=""/250, 0xfa}], 0x1, &(0x7f0000003640)=""/4096, 0x1000}, 0x7265}], 0x6, 0xf796edee3d7da175, &(0x7f00000047c0)) (async) recvmmsg(r2, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000b00)=""/192, 0xc0}, {&(0x7f0000000080)=""/85, 0x55}], 0x3, &(0x7f0000000bc0)=""/195, 0xc3}, 0x6}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000cc0)=""/184, 0xb8}, {&(0x7f0000004840)=""/128, 0x80}, {&(0x7f0000000ec0)=""/230, 0xe6}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/90, 0x5a}], 0x5, &(0x7f0000004800)=""/18, 0x12}, 0x7f}, {{&(0x7f00000026c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002740)=""/216, 0xd8}, {&(0x7f0000002840)=""/118, 0x76}, {&(0x7f00000028c0)=""/180, 0xb4}, {&(0x7f0000002980)=""/238, 0xee}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f00000048c0)=""/198, 0xc6}, {&(0x7f0000002b80)=""/186, 0xba}, {&(0x7f0000002c40)=""/179, 0xb3}, {&(0x7f0000002d00)=""/223, 0xdf}, {&(0x7f0000002e00)=""/142, 0x8e}], 0xa, &(0x7f0000002f80)=""/127, 0x7f}}, {{&(0x7f0000003000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000003080)=""/119, 0x77}], 0x1, &(0x7f0000003100)=""/174, 0xae}, 0x2}, {{&(0x7f00000031c0)=@alg, 0x80, &(0x7f0000000d80)=[{&(0x7f0000003240)=""/205, 0xcd}, {&(0x7f0000000a40)=""/56, 0x38}, {&(0x7f0000003340)=""/83, 0x53}], 0x3, &(0x7f00000033c0)=""/226, 0xe2}, 0x8}, {{&(0x7f00000034c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000003540)=""/250, 0xfa}], 0x1, &(0x7f0000003640)=""/4096, 0x1000}, 0x7265}], 0x6, 0xf796edee3d7da175, &(0x7f00000047c0)) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 38, 17, 30, 30, 30, 12, 18, 6, 9, 7, 6, 8, 40, 10, 25, 19, 7] detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) fsync(0xffffffffffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x4c, 0x30, 0xcac229faa96ee7df, 0x0, 0xfffffffc, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0x4}, {0xc, 0x4, {0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e032", 0x3a}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "51a1cb4e9e8a319f", "c0d55a000d0026c98c8da80a9015ad00", '\x00', "bb10000000000001"}, 0x28) readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}, {&(0x7f0000003300)=""/4095, 0xfff}], 0x2) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000000c0)={{r3}, "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"}) sendmsg$nl_route(r3, &(0x7f00000010c0)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r0, @ANYBLOB="10c0000000e1000028001280090201807665746808dd000000000000", @ANYRES8=r3, @ANYRESDEC=r2], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x4c, 0x30, 0xcac229faa96ee7df, 0x0, 0xfffffffc, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0x4}, {0xc, 0x4, {0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e032", 0x3a}], 0x2}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "51a1cb4e9e8a319f", "c0d55a000d0026c98c8da80a9015ad00", '\x00', "bb10000000000001"}, 0x28) (async) readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}, {&(0x7f0000003300)=""/4095, 0xfff}], 0x2) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000000c0)={{r3}, "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"}) (async) sendmsg$nl_route(r3, &(0x7f00000010c0)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r0, @ANYBLOB="10c0000000e1000028001280090201807665746808dd000000000000", @ANYRES8=r3, @ANYRESDEC=r2], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000200)=[{'OGAIN', @val={' \'', 'Line Capture Switch'}}, {'OGAIN', @void}], 0x37) close(r1) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @private}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x44}}, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x80) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="842a0a65bd8c2b2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) writev(r2, &(0x7f00000019c0)=[{&(0x7f0000000280)="755f7db94098061ba845fd132609dbeebc7e70d0f1ba2dd7531ba30cf41ed9bb026a26c9b206d5353feb560b4bbaf2eab0cedd2f919b91c89c8abad2b494c2e9464c333093e6ffb89e7d1d1c69b7d5084e59447b3f51175d6944884016331cac32acd12f8036e27b91e6966481c890f8b1d6a6476325a28acae31b40f885292ad784b28a1ecbc3088344baf0fca90442c934eaff15c2dc6ac231c7450deff996db67061af60de6b05225c5cd32a9116621632689cee45453a390fff5", 0xbc}, {&(0x7f00000001c0)="8280b8ec7360ab554bdba7aed58900c47bf75c7375d33a2e69045f428fc3883cb65c531b54ef68dcdc22484a03b908435b9177f58810cd31b1ffc5c5bed50421b306472b4767fa100d1465c6fcb05425865eb990dd8a1f2f135a00554b438e32c8428a089c7ceddd", 0x68}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="0c76284b57a1591313ed4d75f492c43a5248d026a6df4ec8487b81d42897884ccd6f4f7da93a14230ce5f1bc9f185df21133d3f601c4ab05010e9e0b1448575c909b6b753eab59ee0eab5dea9c2d49c1cabb140ebc7d009e5ed4840a4c88c46d3949196edf54b4e6bce2d473a9c8a8785928335ab0dec807c6c0c4a363dae3ad04df548996777e246cefbd715e247a9e66f8d11217ad2cf7647268e33e5dd14336c6e642e9ab6a3ab18328a2466350081eccd6049857721fbeb2bd13c957f3088544d59d4e67f5514018627ef4d8deb1dd5ee27b2facc0374f91c6fcfbb3840baf87136717139a45aa5a10b69a126629591fbb28", 0xf4}, {&(0x7f0000001500)="7e9dfcb99e9d2e011bcbbf1e5f6b7f6c5f2121a1c70c70dcab54fb11ef14f169bb2a69b8b0169599c16d332dd1e9a396d6c0dae906af9fb30eb29999a249cbcc09b8ccc5cf024fe875cc98fa54e2894257ca659461d739b602f253a9b5e0bb85f3f4abe9e08312e365998d1733859a18b991771931b8508793646b525f831e909450d3192ce29ae719246fd2521fb155308e2327b95c345235bfff2cbf58b0ec021c34d9e7edcde59a1db70c18f46dfcf1b6a6b922f8110d688bb894a5a52f98350bd355bb5459719bc6cbc5b92163af2deae46a0bab10f19feba8081029a60b1865", 0xe2}, {&(0x7f0000001600)="f735a65da03c8822be8e1c07312e8ae8bf9c657006b880ab640ff5247f9896002ab7fb803d74cbe754c3c6fca87d2d4190d078f0005e058433a6ff5e2a8c7c71b924e9aeeb9a5561deab105df441a1f3b1004d7c824e64c8c027525295d2bf34ef11fc43d6915596a445a07daa54b7fe95421382e98afebc294c5f14838e1391ff102dc2791a9f015739ce99e04120dd73484d35ae69b4be13d4626034134c42c8419d5502b3e8fb9a97429c7a4290b844408cf84df765d416cab6573e2d2f3c02b390e2d12a756a6ab19efaae7a1e7515368eb05531c6c995f40b5ac63bb106aabc7e47b1a5", 0xe6}, {&(0x7f0000001700)="5a155418e047ff84fdd2cac4f9257598ea6a76edaf88cee68ebdf57f40329f88a7ca78082206060a71d30c56714ea0cfea86807a9a12c84690df9b36edfa6956ce4aa7a8a73bdd647bc0194c1378633ec6e284af6591f79883d9fe34d6fc53eb28f740778d0b714a98d6c70cce16840d9fe35fefbb3d9da6350cfd0395b57cdb5b6cfdaca6895947563a556392b956e386c33d7a64f3552d965ede4208e96a3c96ab803525552001dcbb82be8a0ab3f2c0f5f80298f137730d09ba68db3b9e61aaaa233b1e1afbe17c4f4fee9b5632c766a1fb693f1193082db65991474c475e592281bcd38e0676b8b682367be05525f0a493a5985ba288f8", 0xf9}, {&(0x7f0000000000)="6d654b63aeae9cd1e06c6a573150e3b20405aa9289ee6628310c2a996c16f639964c4527ee1af99a1568e40238c47cf5abff8a5074aae7ace10af3d3f0", 0x3d}, {&(0x7f0000001800)="628a430ecbdc3c2734bd0ada54f86b54cb92a098ef03567afd638f37d51686e511cd99c7eef3cd691a713c078a22c5a63de625f9f7415dd41e7402a7f1f5770395f0d4132aa6158e79a4fc390ba612b58340198bd17fec9643a7b31142d678c92e7a0d1aa9836cbba7a58326a5865f3c478d1d103bf5d60cb2970e45ea8ba71c14ece85f021eea3aa48ba238c1898b08cda3fcc5b4fc40f5fa52090cddc026e14332fb7767e34c4f213ea7d51bb0a0e48f047593bd6ea60fd0648e16a47b2f9cd67c388f", 0xc4}, {&(0x7f0000001900)="d4c676ceead52d4992f22c7920c60ee2b01d2235abf48653969bff9f42d52668a8b8ea506a266464ee9f6b630fdd465926c9516a98931b95a76b15693cef6f5862cb571f2962a061228a2b1f381926a277d83a67c7599baa117b408bfaad431c36c2fde88c0aa0da800b8766833165e07cf1e957cbc580a205d8dc6fcdc470497fda247e73", 0x85}], 0xa) executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x166) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) getsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) chdir(&(0x7f00000003c0)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000050000000000006100f8b4e70b45f1431f264e3c92e38554002086b40c086a083e39e7a32d50a7c0e174688a0f39beaa709f49de134961a8bcfe736c570a0fa2a6819e6a09558497982092e4f74a8df2054e6cad0adeee871dc4"], 0x0, 0x1d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_clone(0x100, 0x0, 0xfffffffffffffc2a, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC=r3]) listxattr(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="9ca965fe3c29a99103c89b63fd9feb0100180000000000e100180000000001000084400000000f000000020000000200000000000700306100707cda9c812460a9d58e13d611221db4ff0f000000000000350a6ed05f854fc1a38d1fc71a196a2540804e1afe9f18a0403681267680"], &(0x7f0000001200)=""/145, 0x37, 0x91, 0x0, 0x1, 0x10000, @value}, 0x28) r4 = openat2(r1, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x80000, 0x140, 0x8}, 0x18) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x401c2103, 0x0) utime(&(0x7f0000000240)='./file0\x00', &(0x7f0000000440)={0x5, 0x5}) readv(r2, &(0x7f0000000180)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1) syz_emit_ethernet(0xfc1, &(0x7f00000035c0)=ANY=[@ANYBLOB="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"], 0x0) r6 = fspick(r1, &(0x7f0000000000)='./file1\x00', 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r7, 0x8910, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000040)='upperdir', &(0x7f0000000100)='./bus\x00', 0xffffffffffffffff) executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r4, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r5, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r6 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r6, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r8 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r7, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r5, r5, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r7, r8, 0x14, 0x2003, r9, @value=r7}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x1, 0x6, 0x7, 0x8, 0x3, 0x3, 0x0, 0x32e, 0x40, 0x58, 0x6b562831, 0x8, 0x38, 0x2, 0x5, 0x4, 0x5}, [{0x3, 0x7, 0x93, 0x1, 0x9, 0x9, 0x631d, 0x5}, {0x4, 0x7fffffff, 0x2, 0xfffffffffffffbff, 0x8, 0x9, 0x3b3, 0x3}], "3fee323c26318f44cf9b5f036ccedc61dc952380321bac85d779c801f85c5b39449e73d33d5b9eeeb201cd714075aa5406426ea9c834fcaea562f43d1ae3e3446319cdfaee179cb456170a541a9736b56c5b746ded39014bd53135fff14954d31ffed516b21a23a54f028bd2a16d893d7fe2bd1bc77825717d6b4b760136e81c969fc6c5067d10511fa659eb52b906f6b28638b3eaa0f0286ab964b0b5dfbe2245247fafa7d3f9964abdf3bebe71b0b664c1f52d9d57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) (async) accept4$alg(r7, 0x0, 0x0, 0x80000) (async) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000014c0)=r5, 0x1) rename(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0\x00') (async) read$FUSE(r8, &(0x7f0000001580)={0x2020}, 0x2020) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000035c0)={0x1, 0x3, 0x6}) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES8=r0], 0x188) syz_io_uring_setup(0x82b, 0x0, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x48441, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r2 = syz_open_dev$dri(0x0, 0x40000000000001ff, 0x703700) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0) r3 = syz_open_pts(r1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="fbd89b3e8977042b8d347071ecb9ced6ca30c62d075a011fd70630380f4fb526e74634260eaa7b3bddf26611e940db08172fad84fa1395", 0x37}, {&(0x7f0000000100)="24adae2b5c2fb0d06e", 0x9}], 0x2}, 0x34000041) r7 = dup(r3) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) dup3(r1, r7, 0x0) r8 = dup3(r3, r1, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r9, &(0x7f0000000080)=[{&(0x7f0000000100)="39ac", 0x2}, {&(0x7f0000000340)="a4ce", 0x2}], 0x2, 0xffffffff, 0x4) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x1000a, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0x100b}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_open_procfs(r0, &(0x7f00000000c0)='net/udplite6\x00') r3 = epoll_create1(0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2) r6 = eventfd2(0x0, 0x0) epoll_pwait2(r3, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r6, &(0x7f0000000180)={0x20000005}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="e50c1fb05e311e800682c8d99ba9a20000000000000000000000000021008a4bf336563e0baf928e002ea61626c06005865829b29c6a0410148e0bf01613a82377d83519104240652895deccf5d4e6cd1e05be1d164622b5faebdcddb68af04cb4dc4b26ba1a7d4af820449b8153f1cf09abc9d9f680cc0f5ec2dfadcecc5b3c347f0ff4cc3135ce99edf5ac60ea2c7214ffff8a46000000000000002c34dffc7faa6b5897eafd00"/178, 0xb2}], 0x1}, 0x0) executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x2c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) executing program 3: kexec_load(0xa, 0x0, 0x0, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000040)={0x6, {{0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, {{0xa, 0x8, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x108) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x2, 0x0) executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x6eef}}) close_range(0xffffffffffffffff, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) executing program 32: socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x2c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000200)={'ip6gre0\x00'}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f00000002c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38]}}]}) executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a40)=@newtfilter={0x4c0, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x490, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x9}}, @TCA_BASIC_ACT={0x284, 0x3, [@m_sample={0x108, 0xd, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0xca, 0x6, "5bca8b46e05d99e01d78ca54171a87c37f51a3be38c38f75295be81b1596e45b478670d0626dbe71604bf1511611b6d51a45dc39b6335378e328ae1f95fec21bbe61b4fa2c640bdb57de637ca11e60e6e79274bafe7e1628f9a174a6029c2a905195e763524786235f27d0449cce43ceb143a2bdfb79caa3a89116208a002a2ef3320cffa9d0e433a8dab879031be705698dcdae09b44874fae7dbf3c6ca09025799ea3a790af17581245394a03becea2e2355ecee42ddae496a76d4baa0c3456ad2a340ee0c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x114, 0x20, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc22}]}, {0xe0, 0x6, "e12d9fd238808ed2d49f9d942e225dfa2a6a4e7afd2c24d0eca077ca01ab42a43728ffb823fd691fde98578a86ba2f81fb8a0ede0b7b8dbfce30df29dc34052f1b35e3f272549fb0d37c8f5173e1a6d48a61dad71936cbb3e1cce8a683cba239cbd86c5cfae0dd97c9f5f3e35ec78f3cadbcfa404239c7593f2a0ec2edb9a6945d5dd75ab26eee206fd6b060d564347acdfe2843fe8e2bf6ca7ec358f22a0c32e222cd3684981878718c0a019d2850dab3756441622e1537bcbacd7b05665d63703b365fbdd3088405565db6fabcbfcb88eb00393a16b169281c0339"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x64, 0xd, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x25}, @TCA_CTINFO_ACT={0x18, 0x3, {0xffff8000, 0x800, 0x1, 0x9, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}]}, {0xd, 0x6, "3aaea37d6677d7c144"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_ACT={0x200, 0x3, [@m_csum={0x98, 0x8, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xdb, 0x3, 0xf3, 0x3}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xfffffff9, 0x10000000, 0x9, 0x2}, 0x2e}}]}, {0x32, 0x6, "696bbd7cd96838ff386e73bfdbb28d548d06e91f66b29d16eb141d57e996992b8755306a36ddec52d1745660f2d7"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x164, 0x18, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x200, 0x80000000, 0x3, 0x200, 0xa}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xaf1}, @TCA_CTINFO_ACT={0x18, 0x3, {0xf42, 0xf, 0x20000000, 0x4, 0x8}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x401}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0xe7, 0x6, "bbaa3bbe2b8ce0ea6b773c6ada3a6b8f8dad5d6fcfbb9ba2706b2690b4b58afff1846c6e76f499fb2f6ed3f881c9cf6f43fa7fb355f2794af9601e72dc18c169e1ab7968b90f22511838bb4dbc65f8e0d85addebb01899d59da3ed8dd9dad1531c32dfe9e475f50915214f3a0c64cfb01f6ea9dcc3e8edf0fac53113673bc229965616beba96ee5f5ba1608908d40f73b723b0afd3ce0eb9f490cf8594bb62bda202a7db70b383188e2e17ab338e724e4d9ce136596dbfb15740a227ca0520b8e06d267bf18ee4b83432c8266de576da09fb5c45f2a5390cd3638f1cdcc45beab60e99"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x15}, 0x0) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r11) execveat(r10, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) (async) r12 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r12, 0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r13, r14+60000000}) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) (async) bind$alg(r15, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r16 = accept$alg(r15, 0x0, 0x0) getsockopt$sock_int(r16, 0x1, 0x48, 0x0, &(0x7f0000000080)) sendmsg$rds(r0, &(0x7f0000001a00)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000880)=""/4089, 0xff9}], 0x1, 0x0, 0x0, 0x4000}, 0x0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x6, 0x1800}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) mknodat$null(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x103) (async) mknodat$null(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x103) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_NAME={0x0, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x1}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_NAME={0x0, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x1}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x48c280, 0x0) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x2, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x1, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x6, 0x80000000, 0x5, 0x1, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x3, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xf, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0xd, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x0, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x2, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0x101, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6332, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NFT_BATCH(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"/306], &(0x7f0000001440)=""/200, 0x132, 0xc8, 0x0, 0x6, 0x0, @void, @value}, 0x28) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2000a54, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x800000, {}, {0x0, 0x0, 0x0, 0x0, 0xfc, 0xff, "e6dd3c3d"}, 0xb20f, 0x1, {0x0}}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4801000041000701fcfffffffddbdf25017c0000040036802e0101801400"], 0x148}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$addseals(r5, 0x409, 0x3f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x1d, &(0x7f00000008c0)=0x1, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="7d793073f5899f1d46f9a515acee064a2e902d73fa5c4499806dab65812b14915a4a802457f6fe0119b95d7b14d78c33bc3f14d1bdab6f7367bc37c8b0debaa0d111c8f9c052ce7a3d97e9ddfa9b7dbb839a74a402c9fd21db0c35214fe5402f0e91af9f76dfe71c586655157c9a04d66386db043f138f5c95a95b0a3d5a06f9", 0x80}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmmsg$inet(r3, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @multicast1}}}], 0x20}}], 0x1, 0x4000004) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x10d8020, &(0x7f0000000040)=ANY=[@ANYBLOB="6d6fee5c54affd19822464653d3030303030303030303030303030303030"]) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x48, 0x0, &(0x7f00007d0000)) r7 = fsopen(&(0x7f0000000000)='gfs2\x00', 0x0) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) read$ptp(r8, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000000080)=']\'%!-\'\x00', &(0x7f00000000c0)='./file0\x00', r8) executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2001) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)='/j8', 0x3}, {0x0}], 0x2) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000001040)) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0585611, &(0x7f0000000000)={0x6, 0x5, 0x0, "6e145c0ef63b736608314ceb833d278f8739057c56b9f38df459aa6db8a9f4d6", 0x31364d4e}) program did not crash bisect: split chunks (needed=true): <9>, <9>, <7> bisect: split chunk #0 of len 9 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 12, 18, 6, 9, 7, 6, 8, 40, 10, 25, 19, 7, 8, 23, 30, 9, 12, 13, 17] detailed listing: executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES8=r0], 0x188) syz_io_uring_setup(0x82b, 0x0, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x48441, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r2 = syz_open_dev$dri(0x0, 0x40000000000001ff, 0x703700) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0) r3 = syz_open_pts(r1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="fbd89b3e8977042b8d347071ecb9ced6ca30c62d075a011fd70630380f4fb526e74634260eaa7b3bddf26611e940db08172fad84fa1395", 0x37}, {&(0x7f0000000100)="24adae2b5c2fb0d06e", 0x9}], 0x2}, 0x34000041) r7 = dup(r3) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) dup3(r1, r7, 0x0) r8 = dup3(r3, r1, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r9, &(0x7f0000000080)=[{&(0x7f0000000100)="39ac", 0x2}, {&(0x7f0000000340)="a4ce", 0x2}], 0x2, 0xffffffff, 0x4) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x1000a, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0x100b}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_open_procfs(r0, &(0x7f00000000c0)='net/udplite6\x00') r3 = epoll_create1(0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2) r6 = eventfd2(0x0, 0x0) epoll_pwait2(r3, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r6, &(0x7f0000000180)={0x20000005}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="e50c1fb05e311e800682c8d99ba9a20000000000000000000000000021008a4bf336563e0baf928e002ea61626c06005865829b29c6a0410148e0bf01613a82377d83519104240652895deccf5d4e6cd1e05be1d164622b5faebdcddb68af04cb4dc4b26ba1a7d4af820449b8153f1cf09abc9d9f680cc0f5ec2dfadcecc5b3c347f0ff4cc3135ce99edf5ac60ea2c7214ffff8a46000000000000002c34dffc7faa6b5897eafd00"/178, 0xb2}], 0x1}, 0x0) executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x2c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) executing program 3: kexec_load(0xa, 0x0, 0x0, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000040)={0x6, {{0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, {{0xa, 0x8, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x108) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x2, 0x0) executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x6eef}}) close_range(0xffffffffffffffff, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) executing program 32: socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x2c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000200)={'ip6gre0\x00'}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f00000002c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38]}}]}) executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a40)=@newtfilter={0x4c0, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x490, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x9}}, @TCA_BASIC_ACT={0x284, 0x3, [@m_sample={0x108, 0xd, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0xca, 0x6, "5bca8b46e05d99e01d78ca54171a87c37f51a3be38c38f75295be81b1596e45b478670d0626dbe71604bf1511611b6d51a45dc39b6335378e328ae1f95fec21bbe61b4fa2c640bdb57de637ca11e60e6e79274bafe7e1628f9a174a6029c2a905195e763524786235f27d0449cce43ceb143a2bdfb79caa3a89116208a002a2ef3320cffa9d0e433a8dab879031be705698dcdae09b44874fae7dbf3c6ca09025799ea3a790af17581245394a03becea2e2355ecee42ddae496a76d4baa0c3456ad2a340ee0c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x114, 0x20, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc22}]}, {0xe0, 0x6, "e12d9fd238808ed2d49f9d942e225dfa2a6a4e7afd2c24d0eca077ca01ab42a43728ffb823fd691fde98578a86ba2f81fb8a0ede0b7b8dbfce30df29dc34052f1b35e3f272549fb0d37c8f5173e1a6d48a61dad71936cbb3e1cce8a683cba239cbd86c5cfae0dd97c9f5f3e35ec78f3cadbcfa404239c7593f2a0ec2edb9a6945d5dd75ab26eee206fd6b060d564347acdfe2843fe8e2bf6ca7ec358f22a0c32e222cd3684981878718c0a019d2850dab3756441622e1537bcbacd7b05665d63703b365fbdd3088405565db6fabcbfcb88eb00393a16b169281c0339"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x64, 0xd, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x25}, @TCA_CTINFO_ACT={0x18, 0x3, {0xffff8000, 0x800, 0x1, 0x9, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}]}, {0xd, 0x6, "3aaea37d6677d7c144"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_ACT={0x200, 0x3, [@m_csum={0x98, 0x8, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xdb, 0x3, 0xf3, 0x3}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xfffffff9, 0x10000000, 0x9, 0x2}, 0x2e}}]}, {0x32, 0x6, "696bbd7cd96838ff386e73bfdbb28d548d06e91f66b29d16eb141d57e996992b8755306a36ddec52d1745660f2d7"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x164, 0x18, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x200, 0x80000000, 0x3, 0x200, 0xa}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xaf1}, @TCA_CTINFO_ACT={0x18, 0x3, {0xf42, 0xf, 0x20000000, 0x4, 0x8}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x401}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0xe7, 0x6, "bbaa3bbe2b8ce0ea6b773c6ada3a6b8f8dad5d6fcfbb9ba2706b2690b4b58afff1846c6e76f499fb2f6ed3f881c9cf6f43fa7fb355f2794af9601e72dc18c169e1ab7968b90f22511838bb4dbc65f8e0d85addebb01899d59da3ed8dd9dad1531c32dfe9e475f50915214f3a0c64cfb01f6ea9dcc3e8edf0fac53113673bc229965616beba96ee5f5ba1608908d40f73b723b0afd3ce0eb9f490cf8594bb62bda202a7db70b383188e2e17ab338e724e4d9ce136596dbfb15740a227ca0520b8e06d267bf18ee4b83432c8266de576da09fb5c45f2a5390cd3638f1cdcc45beab60e99"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x15}, 0x0) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r11) execveat(r10, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) (async) r12 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r12, 0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r13, r14+60000000}) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) (async) bind$alg(r15, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r16 = accept$alg(r15, 0x0, 0x0) getsockopt$sock_int(r16, 0x1, 0x48, 0x0, &(0x7f0000000080)) sendmsg$rds(r0, &(0x7f0000001a00)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000880)=""/4089, 0xff9}], 0x1, 0x0, 0x0, 0x4000}, 0x0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x6, 0x1800}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) mknodat$null(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x103) (async) mknodat$null(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x103) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_NAME={0x0, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x1}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_NAME={0x0, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x1}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x48c280, 0x0) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x2, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x1, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x6, 0x80000000, 0x5, 0x1, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x3, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xf, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0xd, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x0, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x2, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0x101, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6332, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NFT_BATCH(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"/306], &(0x7f0000001440)=""/200, 0x132, 0xc8, 0x0, 0x6, 0x0, @void, @value}, 0x28) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2000a54, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x800000, {}, {0x0, 0x0, 0x0, 0x0, 0xfc, 0xff, "e6dd3c3d"}, 0xb20f, 0x1, {0x0}}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4801000041000701fcfffffffddbdf25017c0000040036802e0101801400"], 0x148}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$addseals(r5, 0x409, 0x3f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x1d, &(0x7f00000008c0)=0x1, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="7d793073f5899f1d46f9a515acee064a2e902d73fa5c4499806dab65812b14915a4a802457f6fe0119b95d7b14d78c33bc3f14d1bdab6f7367bc37c8b0debaa0d111c8f9c052ce7a3d97e9ddfa9b7dbb839a74a402c9fd21db0c35214fe5402f0e91af9f76dfe71c586655157c9a04d66386db043f138f5c95a95b0a3d5a06f9", 0x80}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmmsg$inet(r3, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @multicast1}}}], 0x20}}], 0x1, 0x4000004) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x10d8020, &(0x7f0000000040)=ANY=[@ANYBLOB="6d6fee5c54affd19822464653d3030303030303030303030303030303030"]) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x48, 0x0, &(0x7f00007d0000)) r7 = fsopen(&(0x7f0000000000)='gfs2\x00', 0x0) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) read$ptp(r8, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000000080)=']\'%!-\'\x00', &(0x7f00000000c0)='./file0\x00', r8) executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2001) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)='/j8', 0x3}, {0x0}], 0x2) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000001040)) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0585611, &(0x7f0000000000)={0x6, 0x5, 0x0, "6e145c0ef63b736608314ceb833d278f8739057c56b9f38df459aa6db8a9f4d6", 0x31364d4e}) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) close_range(r0, r0, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r2], 0x1}, 0x58) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000060006000300000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x0, 0x40000121, &(0x7f0000000400)={0x0, 0x3938700}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022dbd7000fddbdf2501000000060006004e240000540508809c0300801400040002000005ac1414bb0000000000000000240002003008062b50b06c4769f6dbcec85a5a9ef60feaab3bea8f8eb0b15322be121b0824000200929f14647655f2e99ca07ec50362fa8ef2387732f4d98a1a0f1855b6ed961c503c0309807c000080060001000a00000014000200fc0100000000000000000000000000010500030003000000060001000200000008000200ac1e01010500030003000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb050003000000000088000080060001000200000008000200ac1414bb0500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030003000000060001000a00000014000200fc020000000000000000000000000001050003000000000088000080060001000a00000014000200fc0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030001000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a0000001400020000000000000000000000000000000000050003000200000048010080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fe8800000000000000000000000001010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fc00000000000000000000000000000105000300000000000600010002000000080002000a0101000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ffffffff0500030001000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a000000140002000000000000000000000000000000000005000300030000000600010002000000080002007f000001050003000200000064000080060001000200000008000200000000000500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a00000014000200000000000000000000000000000000010500030001000000b4010080640109801c000080060001000200000008000200640101000500030002000000400000800600010002000000080002000a0101020500030002000000060001000a00000014000200ff010000000000000000000000000001050003000000000028000080060001000a00000014000200ff020000000000000000000000000001050003000200000094000080060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030003000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000a00000014000200fc00000000000000000000000000000105000300010000001c000080060001000200000008000200ac1414bb050003000000000028000080060001000a0000001400020000000000000000000000000000000000050003000100000004000080200004000a00000d00000004ff010000000000000000000000000001fa08000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff08000a0001000000"], 0x570}, 0x1, 0x0, 0x0, 0x8080}, 0x8010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket(0x2, 0x80805, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') preadv(r10, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r11 = socket$inet6(0xa, 0x800, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r11, 0x0) sendto$inet6(r11, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r11, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="72da", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000028c0)="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", 0xffe}], 0x1}}], 0x2, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000b95000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7e, 0x0, 0x0}, &(0x7f0000000180)=0x40) sendmmsg$inet(r9, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000200)={r8, 0x7}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x5) (async) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000aeb000/0x3000)=nil, 0x3000}, 0x4}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x1000a, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x60}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x8000000, 0x50) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000000)=0x4, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) socket$kcm(0x29, 0x0, 0x0) executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x5040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) write$UHID_CREATE(r1, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x759e, 0x6c08, 0x2, 0x200}}, 0x120) r2 = socket$kcm(0x2, 0x3, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67) (async) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000300)="77729a2d3c", 0x5}, {&(0x7f00000005c0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82925ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d2185ddfa9098d327d9559e82fceb2b1b1c0000000000000000009755895856100181468e5208cd5c31a2e885eebb4da150c11d2990a3eb022220ddf0b04e6ad32e1d510de77db5fb58e37663e67ee6ebbde332", 0x115}, {&(0x7f00000003c0)="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", 0x14f}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125971357630b6f3eb4fb4064c42c2b2519a1c77824df6f0653fb116149fcb5c7e46fce32b1de7f511951d4b1ae47781250afdb11680684c1d2854810a90d", 0xe8}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb", 0x53}, {&(0x7f0000000dc0)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d623cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3", 0xd4}], 0x7, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x1c}}}}], 0x20}, 0x0) recvmmsg(r2, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000b00)=""/192, 0xc0}, {&(0x7f0000000080)=""/85, 0x55}], 0x3, &(0x7f0000000bc0)=""/195, 0xc3}, 0x6}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000cc0)=""/184, 0xb8}, {&(0x7f0000004840)=""/128, 0x80}, {&(0x7f0000000ec0)=""/230, 0xe6}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/90, 0x5a}], 0x5, &(0x7f0000004800)=""/18, 0x12}, 0x7f}, {{&(0x7f00000026c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002740)=""/216, 0xd8}, {&(0x7f0000002840)=""/118, 0x76}, {&(0x7f00000028c0)=""/180, 0xb4}, {&(0x7f0000002980)=""/238, 0xee}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f00000048c0)=""/198, 0xc6}, {&(0x7f0000002b80)=""/186, 0xba}, {&(0x7f0000002c40)=""/179, 0xb3}, {&(0x7f0000002d00)=""/223, 0xdf}, {&(0x7f0000002e00)=""/142, 0x8e}], 0xa, &(0x7f0000002f80)=""/127, 0x7f}}, {{&(0x7f0000003000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000003080)=""/119, 0x77}], 0x1, &(0x7f0000003100)=""/174, 0xae}, 0x2}, {{&(0x7f00000031c0)=@alg, 0x80, &(0x7f0000000d80)=[{&(0x7f0000003240)=""/205, 0xcd}, {&(0x7f0000000a40)=""/56, 0x38}, {&(0x7f0000003340)=""/83, 0x53}], 0x3, &(0x7f00000033c0)=""/226, 0xe2}, 0x8}, {{&(0x7f00000034c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000003540)=""/250, 0xfa}], 0x1, &(0x7f0000003640)=""/4096, 0x1000}, 0x7265}], 0x6, 0xf796edee3d7da175, &(0x7f00000047c0)) (async) recvmmsg(r2, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000b00)=""/192, 0xc0}, {&(0x7f0000000080)=""/85, 0x55}], 0x3, &(0x7f0000000bc0)=""/195, 0xc3}, 0x6}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000cc0)=""/184, 0xb8}, {&(0x7f0000004840)=""/128, 0x80}, {&(0x7f0000000ec0)=""/230, 0xe6}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/90, 0x5a}], 0x5, &(0x7f0000004800)=""/18, 0x12}, 0x7f}, {{&(0x7f00000026c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002740)=""/216, 0xd8}, {&(0x7f0000002840)=""/118, 0x76}, {&(0x7f00000028c0)=""/180, 0xb4}, {&(0x7f0000002980)=""/238, 0xee}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f00000048c0)=""/198, 0xc6}, {&(0x7f0000002b80)=""/186, 0xba}, {&(0x7f0000002c40)=""/179, 0xb3}, {&(0x7f0000002d00)=""/223, 0xdf}, {&(0x7f0000002e00)=""/142, 0x8e}], 0xa, &(0x7f0000002f80)=""/127, 0x7f}}, {{&(0x7f0000003000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000003080)=""/119, 0x77}], 0x1, &(0x7f0000003100)=""/174, 0xae}, 0x2}, {{&(0x7f00000031c0)=@alg, 0x80, &(0x7f0000000d80)=[{&(0x7f0000003240)=""/205, 0xcd}, {&(0x7f0000000a40)=""/56, 0x38}, {&(0x7f0000003340)=""/83, 0x53}], 0x3, &(0x7f00000033c0)=""/226, 0xe2}, 0x8}, {{&(0x7f00000034c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000003540)=""/250, 0xfa}], 0x1, &(0x7f0000003640)=""/4096, 0x1000}, 0x7265}], 0x6, 0xf796edee3d7da175, &(0x7f00000047c0)) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 38, 17, 30, 30, 9, 7, 6, 8, 40, 10, 25, 19, 7, 8, 23, 30, 9, 12, 13, 17] detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) fsync(0xffffffffffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x4c, 0x30, 0xcac229faa96ee7df, 0x0, 0xfffffffc, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0x4}, {0xc, 0x4, {0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e032", 0x3a}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "51a1cb4e9e8a319f", "c0d55a000d0026c98c8da80a9015ad00", '\x00', "bb10000000000001"}, 0x28) readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}, {&(0x7f0000003300)=""/4095, 0xfff}], 0x2) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000000c0)={{r3}, "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"}) sendmsg$nl_route(r3, &(0x7f00000010c0)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r0, @ANYBLOB="10c0000000e1000028001280090201807665746808dd000000000000", @ANYRES8=r3, @ANYRESDEC=r2], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x4c, 0x30, 0xcac229faa96ee7df, 0x0, 0xfffffffc, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0x4}, {0xc, 0x4, {0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e032", 0x3a}], 0x2}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "51a1cb4e9e8a319f", "c0d55a000d0026c98c8da80a9015ad00", '\x00', "bb10000000000001"}, 0x28) (async) readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}, {&(0x7f0000003300)=""/4095, 0xfff}], 0x2) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000000c0)={{r3}, "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"}) (async) sendmsg$nl_route(r3, &(0x7f00000010c0)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r0, @ANYBLOB="10c0000000e1000028001280090201807665746808dd000000000000", @ANYRES8=r3, @ANYRESDEC=r2], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000200)=[{'OGAIN', @val={' \'', 'Line Capture Switch'}}, {'OGAIN', @void}], 0x37) close(r1) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @private}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x44}}, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x80) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="842a0a65bd8c2b2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) writev(r2, &(0x7f00000019c0)=[{&(0x7f0000000280)="755f7db94098061ba845fd132609dbeebc7e70d0f1ba2dd7531ba30cf41ed9bb026a26c9b206d5353feb560b4bbaf2eab0cedd2f919b91c89c8abad2b494c2e9464c333093e6ffb89e7d1d1c69b7d5084e59447b3f51175d6944884016331cac32acd12f8036e27b91e6966481c890f8b1d6a6476325a28acae31b40f885292ad784b28a1ecbc3088344baf0fca90442c934eaff15c2dc6ac231c7450deff996db67061af60de6b05225c5cd32a9116621632689cee45453a390fff5", 0xbc}, {&(0x7f00000001c0)="8280b8ec7360ab554bdba7aed58900c47bf75c7375d33a2e69045f428fc3883cb65c531b54ef68dcdc22484a03b908435b9177f58810cd31b1ffc5c5bed50421b306472b4767fa100d1465c6fcb05425865eb990dd8a1f2f135a00554b438e32c8428a089c7ceddd", 0x68}, {&(0x7f0000000400)="9fbdfe1264d507e27d17c47fac7a22ad041adcb79e4fb55600f630949c21d060eeccd316e61c521d9c28e3974de368a82c4d29a14c9ea1cc2c5b0d7a859de47899506ab204bc201c27cf1cdc3e9cd7c18ea9096a6733de8c83be0d7d33f62ae3f27fe8eba815a2622c4c25505b55556d836cc7d5739c2de85e89aa462f3bfa2fd8f1c84f448480391b9b94d5ce250b0a6e424630142027db107c85b071d459463cdc2947a616529085c9a3fbec998226fb0a9775545fea04317f42312994efd63f1dfe642382365e83f78dd539ab4bf29c844f8dcd4c6fb78a06e2c22cafdb658c8b5f723cbede5f8d5d8c4f67a72c2d18fbe084ebb42378d9ab1eea48f5682e6b2f96626fcb2abb7c26eadb2b1264b02abb6a89a97a5cecc16525d2e95634540800081571445e7dbb793527ff3dd934c7813482d25b7cd0d7ddc1e9b3f62965bc5357058f091c119d1d163a52d9b888858d6e436e072746e5dad6f1117d872eccd963fc541702bcbc15599f45cf81e5b6a614aad5ee61d592bf322408fad37389ed239dddc2f571639edac2a4997f8370ee24e5fb763151699cd27750600ba16ef00bd628c6f7cd2274a1273b3bb87486356152717d9b041ba494660370de3c16f8b49cb81d94d50446411e9bebc5b61c4d0df8fafeea3d787a0574858cd111c0cf2e60f3eeb0964058eb3615d03fda5b1829c7f5bc76cad3ed08e29b434eda03a1fba4ffe21197eeace64c544c54aabd2eb7d319cb1f460f6b8fc7b84d5aafb4e3c4ade43af15274d1335783e91cfa13de0429c9778c8ac42273453513a3a03178d55a0831140cad61fcf0fd0df77fb1ffe189ced19325ad1a0bf3ad4634574583a0d31975e9a45eaa59826c342b8b48a991024c096e03b3eda9f6c0152f70b189bdfac7280cfefd7657800871a300c1b38e703b7f8f21cd7119605f881219d3daa128a21c935921857810132821994a785a720a07537a8b30f1d51e651faaf36e21096713e0c75140f4f0bc59dd62a8decd2838e506f35eaf8d7159961b9da8e49d517c7b3705d90d50d39991963f5406ff42811acac113c5095c0b6e167cb68460d0dd474dfb9376e8f57b1d694ae49b174f04e9e7431631de10e0432394c8bb92da564f2aa33e9d41c9730340f734037091fa53f17b5957945f075e4fa886725140e7a7d719e75072dbec6141bb9b11fcc00f2caaeeb8cc4c45e5653c62ae47625055f98c0f4c98f6360612f75e13af0c494e7661aa0a847c43d9a088338c50bf0347aa87297ce814a8349a49f7f1e60b905643f8e3dcbe600a7632d65f5318b91d7a57902d3fe3ac6b39181097a7421e0f30c9637933f8778a8d9b56ed73ae75af8a0dc4108fe5cf36a49f4bd6500819f6f8c9e873878465fdea8fcc674fcc7babea2e5769913971310ad9198b8cccca99c8aecda1a2ab84a033a533052f5fdd280978e8ed35b5ec4598c3e39db118d7d24e794c68a028ddeb65595a80429937cf6c98beeb89584f79fca6fa3fe2d5b48dd9408da21d4312c755441400c662646480abea32d4448eaa304639aac1af3a46fd5d72aa06f0320d1e3b3b455c96b6fca221c4999b9f18a0913a10f990651b7b1c743f9c7bdb60ae8361c2ab41d85df0843fc9d67c3ddc002df59a9b12907a887ad3344c4cef2d4abcd73a7a6fc64114c16a50a645d8ae5d186db1885f35a287ef0d7d3e484ad75ab16d70561a47153884196ec1238d7ae3beb9269e9705b1c1b9f91077fd39db904cd30ffc5f0e03e01f04c8e6eade056d6e8d8f8e1add3db62a794f24dbaa99d0ba1df2ed662df56cb55b07ee261bbb98c8553f7d7e8ad2e8305cf3731d268a0babb76dd70cd2213fe52e409da99519994542bb025e10c170b5728c1d9a17c9a90f1844a2247f273109114666b06d17ac58eb836807c6a5e67f4b6cfdf8dea0991946c3f02f217f188e4a590621eee5ae2b888620e073e5bbe58964dbca79b0f9e3b5ced9b5234071cb47177e3abca4d3b1c458f7afb269584476bb222e109de35f7d9d200e63d1613051ec1c9cbfcb1aabfe92d58c6c8751416c580972921e93c254d060d0c186f7817b1dc9d73e80dd6da9cc8405279163aee6c47846a0d0538447ecb3ef5608f86c40238d6012e20f2a95ca00e36b9e592418e8a4a44ae97b9f45ede3a7d4fbb70ebba68f088716d3e9cbb4992f853c253618d53be79ea549331e42b22cf3395cf5f46c8359ed5d2eaaf68dbedf25c91a09cea2c7210e92032812aa0acfdabbab9e0ddc1d560b48d48229a4d06eef19efdfd6b2e811350e4b518bf1b3c7e5eeaf5f6738a2b2e523385dfce4740806f3cd91dab3fa2efeda4a078508c8b917435154a475ee3319f2ac9fdef5b0af69b11ab158e935c14c83f917c5c41f5a1416ea032ea89067bdbacd2a98275ed049aacebfa2fcf30ccfcde955e743ef6b42682a720505f3a88b32afced34d61c6eb3ca36cc11898a537ec043e30540e5c631715a377bd40b623a1fe481fe3fe4369df82cca08c707d8d5c9ee664103ac7248060c374be2d7d52a701e951cd4c184a5ceac58cf9efd9dfe2c8415921cfe145bdc13fa5daf9c8618264025abddab8deb4f256066c6abc347da901b9f3edcce206e81ed1b58ca6267c0091b8a0c4e80d90e524ee32b8c8f0dc02f174160bfd645cce4be7c5d903cdcdd6a091096f3d99cd1e0b52db56c83cf0cff0cad3f0472a46d9fcd2785d8f4797208dc38866d97a88f9c4e0c11005fdc202c5e4801a30d69aba2bf7bf9aa3d8f8dbe59b2ecce5fffa9535702ca06f0756d314ed8856805061381919a81de1f17df871db08236250fe4eb4d7e1cf6d588416659cac0384065c07ea833f5255490b9ec8972704c0c5bb5c8b5f9aeb515407007be640f16215cb0fd4b8bd292f48a7079d79399da74f75c2cc1c7d31c09be66955bab19d0e9f41dd66e255d12d59bc4f710ddd27f672a96ca8041e219999b506acef0dac30c0d720337994cc7c9e44a83fccbad6596b3b2b00067559d68fa21b467e9b4799e3c49fa0cb7d3a40dfc3c5cea60e46903a8a92e72022ac77a91700f5e343366376f6c31378d63444256b9ac57e89b21610444fa89f9a9a6b214bc03237ce574194262607a0fe171c4ed2452b69b4ee0949c57a90dedfd1cfb1244a67d74ff6b1d3af59fc6d12de859340b3cff862915d741ef313cd13d71bbc3c857d79a4c23ba6a252f229c514e85f0524f45a4d5b6c36200d60d4b8009fd94323648db68118d6afbe8a34f001a80b223199a345113a0ce38bb1d1abc9f8fc32fdeee068a4e01079e8c8d11026bdf24bb43da31b78884b42ae9e7f7bfb081a5efb7fc61b398a0e884de46645d5453a97fe268fee51150f43a3c1bfe9115ad83d2b0c4f0782fbd9cbff9fbf34f3ac7d918c6d13cab491f5ce8a2b9aba561922a7041fef76ef8c4efcc938c219eb0df90e195ab2bdfc1418694dca7fe29268c2cf6c54b86b56951cf962205e2b40c1e722dc79d3fcb665d17a4b143958c707f851c4ba4275b2536518106256b7e39e9c88c4db70478c8f7ff2baacd7c4da1b7662317ea3e8a9bba34e1bc58b2aa31fb3dcc94805e07d3dc3a06632b339cb12ab62cb0874757d3207f04c041f6e5bd998b429be92599b81136be42eb7d55f09ffdf361f22f9c5619c44fda459ee8dbb76f5a3d8f704cbf4de5e2dbfa9a07d7f4209b051e9a7a07ee4522c31ddd1d14414b82692a7cadbff456a14ad7f5296294c3b12e466805066e01f185b7ee9195a01dfdaa445ecaed1719b971c1df1f48e93e7e7461fb0d853d3d2356c816be8b0d6711912fc166c6235bba5ce56e4b384c300ba09675eeebceb399cc65f4b5f31ad6a0e390e8ec4c1d048fa6996b701d06403685b141a959a29711b17927398a6cbbe1f6ac88805ecddf8ff3185022e8cb59c7da71fa6aa0386430533820c0800861027af0755ffbafff2f7ba5f2596c46a740e01165d211263eaa70730cb5519e4f18e34bd637fc6f782812ae4f03d0cfde31c000d880b6f306d685240955af249b3ae2f82b3573a808f57cab8300a49f7fb721d7db940729730505785bd89dd8566fe0b9e4514d69ff2b301e9de71aa88371cb44829e3b2ae03f5489d80fba14b7ed4b52a77bb5c4a6bd0e90748e2168cfecebb0deaccbe4a5964682c44aee7d948248b62973824968170b4e87c74020ed2f1e02d35a07aea83a00b132b29ee1bc1274af7b874feff8efb5cb071a5376fd8765e40918a9e8cd0e7b99d89647f61f0717b25c9ac8a69b49cb5d1e88dbb4ecfdd0ee1b81454e9a731c24a7010289bcff630651bbac26cd30e84161575cad0f365e01b5eeb1cb3611355e5a0e77ee747ede1fdccc2f38caeffe060f8d24e6aa8abd1aa6fb6e4df08e4d7e1c88fd994c2be8c479a188b61eb1940161bb1d1557a3252182b6efb889b54e3f55b4fbe26c14378fefaf60312fd62049050d03540506f73801c771cc7ebf7d26f44b80a5fb2f6af0ee4abf61e9332ac1dfd8afa80829df7afefd957a147102ad89503580b30d7c6bfd9dfab1d77190d09aac3f0f08a9a0e3202161d76c2b34e86b9c188ba356499aa0934e6e5ff301f5da95575292ea68eca471e541d18ea7a45cacba717497cbc4aef62fb3a23ec05ab9218f8664837902cfe1d805d9e201e21ba99642d68e1da254d1a4a108e7587a7fdf4d32955d85e8e53d8a6fc099a6dd076472234de2d746edf1fbb64adcbaa0de7704b8150a202fc9367ec64a7c59154f99e9d0d89137459af5c94ddde3969da105444761269de32f29d9fce671f9c4c1e1c38e17c2a3aa817e56dee8055b4088b20ba3235c259d51f0c59eeb90493cfe66ab426cf852dd600e36f9e4916dbc3ad50b6ed7bb304381953dc6387e5734278f0d3ae2fb11faa072a59e7f912c95be3dffb547d4d547fff4b76db6dcf9ecb92884957ee96385346d9b50f2ac39c2cf7634ac0d7eaadc28ebce3eada48ce9f584ba0f3fee4d00686a469c0ee02f2c228e057a6e6048aa617aead549e8c184a5979f2408bd39a276522b302cd52099a95bca8361f480f10c6c805ceb09988b3d0eb1095519fcf170351d834f7654bde76adb6faab3c6d05f97eac8b4c6669337267d13cf3cbc8cca91ed0a0015d977ae2b4ed6dea98f42c6e04453b0ea184d9ea39f0146d42cef9edb50a73dcec36b2c1e9ec2b465c4598933398cf01d53b54f00908012016c02697139908ed9a658ba135d55cd2a02f9c8de4c2788221f7a45286e578ab07fb9e51a4b5c87dc7fc8ff349454ee082c94b1902b3f43bdc0725aba105bd97f54b4f75035d733e715fef9bc7c899c7621755cb62a0a106fd33e0e401c2fcb787f8916e85da761c8665cb2953cc2291f594c0dfde46b0d018da87c680eb877dacc46386c2cb256dab95c30d4a6a7cda99069c3e829976b51cd8c35c1e77de9bb8f31844acae04ffcff7320846153f3cdf6a1736576ff01f71ab15a91ec5007767875d67f4b8d0775112fb4c6ace1a7483f8c7e92a7b6ec1207e511346e1554fc4be4246b914d3b0964882cebe6346eccbd122d193b1130d4abdacf9e31dca58bacb25b74e97469aace222c43b8b58a42313538e837840ce7eee5e2a3f425f7046f9dff921c2a1b2ecfb08f997fdf8e2893aed3cf0731ce819141bab2b2bc2791a2ae03087f1334aefe5934565d43a7ff1cb6b5bcff11778d24046594fee971ff43817383a01eab7e2c0e0319aee3dafbbbf11e54ae8615c90c8debbfd01fcd4b1a09cea39c53fc39a73bd66c2d569d5d22bc4aefc", 0x1000}, {&(0x7f0000001400)="0c76284b57a1591313ed4d75f492c43a5248d026a6df4ec8487b81d42897884ccd6f4f7da93a14230ce5f1bc9f185df21133d3f601c4ab05010e9e0b1448575c909b6b753eab59ee0eab5dea9c2d49c1cabb140ebc7d009e5ed4840a4c88c46d3949196edf54b4e6bce2d473a9c8a8785928335ab0dec807c6c0c4a363dae3ad04df548996777e246cefbd715e247a9e66f8d11217ad2cf7647268e33e5dd14336c6e642e9ab6a3ab18328a2466350081eccd6049857721fbeb2bd13c957f3088544d59d4e67f5514018627ef4d8deb1dd5ee27b2facc0374f91c6fcfbb3840baf87136717139a45aa5a10b69a126629591fbb28", 0xf4}, {&(0x7f0000001500)="7e9dfcb99e9d2e011bcbbf1e5f6b7f6c5f2121a1c70c70dcab54fb11ef14f169bb2a69b8b0169599c16d332dd1e9a396d6c0dae906af9fb30eb29999a249cbcc09b8ccc5cf024fe875cc98fa54e2894257ca659461d739b602f253a9b5e0bb85f3f4abe9e08312e365998d1733859a18b991771931b8508793646b525f831e909450d3192ce29ae719246fd2521fb155308e2327b95c345235bfff2cbf58b0ec021c34d9e7edcde59a1db70c18f46dfcf1b6a6b922f8110d688bb894a5a52f98350bd355bb5459719bc6cbc5b92163af2deae46a0bab10f19feba8081029a60b1865", 0xe2}, {&(0x7f0000001600)="f735a65da03c8822be8e1c07312e8ae8bf9c657006b880ab640ff5247f9896002ab7fb803d74cbe754c3c6fca87d2d4190d078f0005e058433a6ff5e2a8c7c71b924e9aeeb9a5561deab105df441a1f3b1004d7c824e64c8c027525295d2bf34ef11fc43d6915596a445a07daa54b7fe95421382e98afebc294c5f14838e1391ff102dc2791a9f015739ce99e04120dd73484d35ae69b4be13d4626034134c42c8419d5502b3e8fb9a97429c7a4290b844408cf84df765d416cab6573e2d2f3c02b390e2d12a756a6ab19efaae7a1e7515368eb05531c6c995f40b5ac63bb106aabc7e47b1a5", 0xe6}, {&(0x7f0000001700)="5a155418e047ff84fdd2cac4f9257598ea6a76edaf88cee68ebdf57f40329f88a7ca78082206060a71d30c56714ea0cfea86807a9a12c84690df9b36edfa6956ce4aa7a8a73bdd647bc0194c1378633ec6e284af6591f79883d9fe34d6fc53eb28f740778d0b714a98d6c70cce16840d9fe35fefbb3d9da6350cfd0395b57cdb5b6cfdaca6895947563a556392b956e386c33d7a64f3552d965ede4208e96a3c96ab803525552001dcbb82be8a0ab3f2c0f5f80298f137730d09ba68db3b9e61aaaa233b1e1afbe17c4f4fee9b5632c766a1fb693f1193082db65991474c475e592281bcd38e0676b8b682367be05525f0a493a5985ba288f8", 0xf9}, {&(0x7f0000000000)="6d654b63aeae9cd1e06c6a573150e3b20405aa9289ee6628310c2a996c16f639964c4527ee1af99a1568e40238c47cf5abff8a5074aae7ace10af3d3f0", 0x3d}, {&(0x7f0000001800)="628a430ecbdc3c2734bd0ada54f86b54cb92a098ef03567afd638f37d51686e511cd99c7eef3cd691a713c078a22c5a63de625f9f7415dd41e7402a7f1f5770395f0d4132aa6158e79a4fc390ba612b58340198bd17fec9643a7b31142d678c92e7a0d1aa9836cbba7a58326a5865f3c478d1d103bf5d60cb2970e45ea8ba71c14ece85f021eea3aa48ba238c1898b08cda3fcc5b4fc40f5fa52090cddc026e14332fb7767e34c4f213ea7d51bb0a0e48f047593bd6ea60fd0648e16a47b2f9cd67c388f", 0xc4}, {&(0x7f0000001900)="d4c676ceead52d4992f22c7920c60ee2b01d2235abf48653969bff9f42d52668a8b8ea506a266464ee9f6b630fdd465926c9516a98931b95a76b15693cef6f5862cb571f2962a061228a2b1f381926a277d83a67c7599baa117b408bfaad431c36c2fde88c0aa0da800b8766833165e07cf1e957cbc580a205d8dc6fcdc470497fda247e73", 0x85}], 0xa) executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x166) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) getsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) chdir(&(0x7f00000003c0)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000050000000000006100f8b4e70b45f1431f264e3c92e38554002086b40c086a083e39e7a32d50a7c0e174688a0f39beaa709f49de134961a8bcfe736c570a0fa2a6819e6a09558497982092e4f74a8df2054e6cad0adeee871dc4"], 0x0, 0x1d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_clone(0x100, 0x0, 0xfffffffffffffc2a, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC=r3]) listxattr(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="9ca965fe3c29a99103c89b63fd9feb0100180000000000e100180000000001000084400000000f000000020000000200000000000700306100707cda9c812460a9d58e13d611221db4ff0f000000000000350a6ed05f854fc1a38d1fc71a196a2540804e1afe9f18a0403681267680"], &(0x7f0000001200)=""/145, 0x37, 0x91, 0x0, 0x1, 0x10000, @value}, 0x28) r4 = openat2(r1, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x80000, 0x140, 0x8}, 0x18) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x401c2103, 0x0) utime(&(0x7f0000000240)='./file0\x00', &(0x7f0000000440)={0x5, 0x5}) readv(r2, &(0x7f0000000180)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1) syz_emit_ethernet(0xfc1, &(0x7f00000035c0)=ANY=[@ANYBLOB="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"], 0x0) r6 = fspick(r1, &(0x7f0000000000)='./file1\x00', 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r7, 0x8910, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000040)='upperdir', &(0x7f0000000100)='./bus\x00', 0xffffffffffffffff) executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r4, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r5, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r6 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r6, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r8 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r7, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r5, r5, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r7, r8, 0x14, 0x2003, r9, @value=r7}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x1, 0x6, 0x7, 0x8, 0x3, 0x3, 0x0, 0x32e, 0x40, 0x58, 0x6b562831, 0x8, 0x38, 0x2, 0x5, 0x4, 0x5}, [{0x3, 0x7, 0x93, 0x1, 0x9, 0x9, 0x631d, 0x5}, {0x4, 0x7fffffff, 0x2, 0xfffffffffffffbff, 0x8, 0x9, 0x3b3, 0x3}], "3fee323c26318f44cf9b5f036ccedc61dc952380321bac85d779c801f85c5b39449e73d33d5b9eeeb201cd714075aa5406426ea9c834fcaea562f43d1ae3e3446319cdfaee179cb456170a541a9736b56c5b746ded39014bd53135fff14954d31ffed516b21a23a54f028bd2a16d893d7fe2bd1bc77825717d6b4b760136e81c969fc6c5067d10511fa659eb52b906f6b28638b3eaa0f0286ab964b0b5dfbe2245247fafa7d3f9964abdf3bebe71b0b664c1f52d9d57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) (async) accept4$alg(r7, 0x0, 0x0, 0x80000) (async) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000014c0)=r5, 0x1) rename(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0\x00') (async) read$FUSE(r8, &(0x7f0000001580)={0x2020}, 0x2020) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000035c0)={0x1, 0x3, 0x6}) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) executing program 3: kexec_load(0xa, 0x0, 0x0, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000040)={0x6, {{0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, {{0xa, 0x8, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x108) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x2, 0x0) executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x6eef}}) close_range(0xffffffffffffffff, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) executing program 32: socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x2c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000200)={'ip6gre0\x00'}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f00000002c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38]}}]}) executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a40)=@newtfilter={0x4c0, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x490, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x9}}, @TCA_BASIC_ACT={0x284, 0x3, [@m_sample={0x108, 0xd, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0xca, 0x6, "5bca8b46e05d99e01d78ca54171a87c37f51a3be38c38f75295be81b1596e45b478670d0626dbe71604bf1511611b6d51a45dc39b6335378e328ae1f95fec21bbe61b4fa2c640bdb57de637ca11e60e6e79274bafe7e1628f9a174a6029c2a905195e763524786235f27d0449cce43ceb143a2bdfb79caa3a89116208a002a2ef3320cffa9d0e433a8dab879031be705698dcdae09b44874fae7dbf3c6ca09025799ea3a790af17581245394a03becea2e2355ecee42ddae496a76d4baa0c3456ad2a340ee0c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x114, 0x20, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc22}]}, {0xe0, 0x6, "e12d9fd238808ed2d49f9d942e225dfa2a6a4e7afd2c24d0eca077ca01ab42a43728ffb823fd691fde98578a86ba2f81fb8a0ede0b7b8dbfce30df29dc34052f1b35e3f272549fb0d37c8f5173e1a6d48a61dad71936cbb3e1cce8a683cba239cbd86c5cfae0dd97c9f5f3e35ec78f3cadbcfa404239c7593f2a0ec2edb9a6945d5dd75ab26eee206fd6b060d564347acdfe2843fe8e2bf6ca7ec358f22a0c32e222cd3684981878718c0a019d2850dab3756441622e1537bcbacd7b05665d63703b365fbdd3088405565db6fabcbfcb88eb00393a16b169281c0339"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x64, 0xd, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x25}, @TCA_CTINFO_ACT={0x18, 0x3, {0xffff8000, 0x800, 0x1, 0x9, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}]}, {0xd, 0x6, "3aaea37d6677d7c144"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_ACT={0x200, 0x3, [@m_csum={0x98, 0x8, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xdb, 0x3, 0xf3, 0x3}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xfffffff9, 0x10000000, 0x9, 0x2}, 0x2e}}]}, {0x32, 0x6, "696bbd7cd96838ff386e73bfdbb28d548d06e91f66b29d16eb141d57e996992b8755306a36ddec52d1745660f2d7"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x164, 0x18, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x200, 0x80000000, 0x3, 0x200, 0xa}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xaf1}, @TCA_CTINFO_ACT={0x18, 0x3, {0xf42, 0xf, 0x20000000, 0x4, 0x8}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x401}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0xe7, 0x6, "bbaa3bbe2b8ce0ea6b773c6ada3a6b8f8dad5d6fcfbb9ba2706b2690b4b58afff1846c6e76f499fb2f6ed3f881c9cf6f43fa7fb355f2794af9601e72dc18c169e1ab7968b90f22511838bb4dbc65f8e0d85addebb01899d59da3ed8dd9dad1531c32dfe9e475f50915214f3a0c64cfb01f6ea9dcc3e8edf0fac53113673bc229965616beba96ee5f5ba1608908d40f73b723b0afd3ce0eb9f490cf8594bb62bda202a7db70b383188e2e17ab338e724e4d9ce136596dbfb15740a227ca0520b8e06d267bf18ee4b83432c8266de576da09fb5c45f2a5390cd3638f1cdcc45beab60e99"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x15}, 0x0) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r11) execveat(r10, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) (async) r12 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r12, 0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r13, r14+60000000}) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) (async) bind$alg(r15, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r16 = accept$alg(r15, 0x0, 0x0) getsockopt$sock_int(r16, 0x1, 0x48, 0x0, &(0x7f0000000080)) sendmsg$rds(r0, &(0x7f0000001a00)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000880)=""/4089, 0xff9}], 0x1, 0x0, 0x0, 0x4000}, 0x0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x6, 0x1800}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) mknodat$null(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x103) (async) mknodat$null(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x103) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_NAME={0x0, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x1}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_NAME={0x0, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x1}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x48c280, 0x0) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x2, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x1, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x6, 0x80000000, 0x5, 0x1, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x3, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xf, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0xd, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x0, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x2, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0x101, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6332, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NFT_BATCH(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"/306], &(0x7f0000001440)=""/200, 0x132, 0xc8, 0x0, 0x6, 0x0, @void, @value}, 0x28) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2000a54, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x800000, {}, {0x0, 0x0, 0x0, 0x0, 0xfc, 0xff, "e6dd3c3d"}, 0xb20f, 0x1, {0x0}}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4801000041000701fcfffffffddbdf25017c0000040036802e0101801400"], 0x148}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$addseals(r5, 0x409, 0x3f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x1d, &(0x7f00000008c0)=0x1, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="7d793073f5899f1d46f9a515acee064a2e902d73fa5c4499806dab65812b14915a4a802457f6fe0119b95d7b14d78c33bc3f14d1bdab6f7367bc37c8b0debaa0d111c8f9c052ce7a3d97e9ddfa9b7dbb839a74a402c9fd21db0c35214fe5402f0e91af9f76dfe71c586655157c9a04d66386db043f138f5c95a95b0a3d5a06f9", 0x80}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmmsg$inet(r3, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @multicast1}}}], 0x20}}], 0x1, 0x4000004) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x10d8020, &(0x7f0000000040)=ANY=[@ANYBLOB="6d6fee5c54affd19822464653d3030303030303030303030303030303030"]) r6 = socket$inet6_udp(0xa, 0x2, <> 90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82925ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d2185ddfa9098d327d9559e82fceb2b1b1c0000000000000000009755895856100181468e5208cd5c31a2e885eebb4da150c11d2990a3eb022220ddf0b04e6ad32e1d510de77db5fb58e37663e67ee6ebbde332", 0x115}, {&(0x7f00000003c0)="f2a0f0f863621a483b19e7ecfce0d34e53fbf295927214684f4d69e973ac2fa5fd0ddf47c314ac0cdfd79dc1815274c3ee57068b1793c25fab48eb353478689f452328afb023f75f93227bbe5a4a93e14eb44aacf27f9060bc2c82dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e600000000f5be12a64e075c60dd63e0b00e8f42bfb7671a56925477029cec7e7f16b358404edfb5e7a0552c317f587f591626ceed08555ca0b2f31a3e7bf5ba7541db275e6a6b6501b87cc74c4804f6da7d3de93327287204cc97f9cb747576d2ab23a6e35c6da6b3240c92ae18b31cb6e7bc60066994e2cb401c76b1840d3e231621355f10ff35ea91ffd463228d000000000000000e454d3c36efee949f6311c6ad78b5a8f091d2ebb008925107e4a4584dab83f7f0cb5ad94266e71e2b7aaa01cf4f9f5e1d52e1e5086e9633cbee8126a2", 0x14f}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125971357630b6f3eb4fb4064c42c2b2519a1c77824df6f0653fb116149fcb5c7e46fce32b1de7f511951d4b1ae47781250afdb11680684c1d2854810a90d", 0xe8}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb", 0x53}, {&(0x7f0000000dc0)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d623cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3", 0xd4}], 0x7, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x1c}}}}], 0x20}, 0x0) recvmmsg(r2, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000b00)=""/192, 0xc0}, {&(0x7f0000000080)=""/85, 0x55}], 0x3, &(0x7f0000000bc0)=""/195, 0xc3}, 0x6}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000cc0)=""/184, 0xb8}, {&(0x7f0000004840)=""/128, 0x80}, {&(0x7f0000000ec0)=""/230, 0xe6}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/90, 0x5a}], 0x5, &(0x7f0000004800)=""/18, 0x12}, 0x7f}, {{&(0x7f00000026c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002740)=""/216, 0xd8}, {&(0x7f0000002840)=""/118, 0x76}, {&(0x7f00000028c0)=""/180, 0xb4}, {&(0x7f0000002980)=""/238, 0xee}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f00000048c0)=""/198, 0xc6}, {&(0x7f0000002b80)=""/186, 0xba}, {&(0x7f0000002c40)=""/179, 0xb3}, {&(0x7f0000002d00)=""/223, 0xdf}, {&(0x7f0000002e00)=""/142, 0x8e}], 0xa, &(0x7f0000002f80)=""/127, 0x7f}}, {{&(0x7f0000003000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000003080)=""/119, 0x77}], 0x1, &(0x7f0000003100)=""/174, 0xae}, 0x2}, {{&(0x7f00000031c0)=@alg, 0x80, &(0x7f0000000d80)=[{&(0x7f0000003240)=""/205, 0xcd}, {&(0x7f0000000a40)=""/56, 0x38}, {&(0x7f0000003340)=""/83, 0x53}], 0x3, &(0x7f00000033c0)=""/226, 0xe2}, 0x8}, {{&(0x7f00000034c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000003540)=""/250, 0xfa}], 0x1, &(0x7f0000003640)=""/4096, 0x1000}, 0x7265}], 0x6, 0xf796edee3d7da175, &(0x7f00000047c0)) (async) recvmmsg(r2, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000b00)=""/192, 0xc0}, {&(0x7f0000000080)=""/85, 0x55}], 0x3, &(0x7f0000000bc0)=""/195, 0xc3}, 0x6}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000cc0)=""/184, 0xb8}, {&(0x7f0000004840)=""/128, 0x80}, {&(0x7f0000000ec0)=""/230, 0xe6}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/90, 0x5a}], 0x5, &(0x7f0000004800)=""/18, 0x12}, 0x7f}, {{&(0x7f00000026c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002740)=""/216, 0xd8}, {&(0x7f0000002840)=""/118, 0x76}, {&(0x7f00000028c0)=""/180, 0xb4}, {&(0x7f0000002980)=""/238, 0xee}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f00000048c0)=""/198, 0xc6}, {&(0x7f0000002b80)=""/186, 0xba}, {&(0x7f0000002c40)=""/179, 0xb3}, {&(0x7f0000002d00)=""/223, 0xdf}, {&(0x7f0000002e00)=""/142, 0x8e}], 0xa, &(0x7f0000002f80)=""/127, 0x7f}}, {{&(0x7f0000003000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000003080)=""/119, 0x77}], 0x1, &(0x7f0000003100)=""/174, 0xae}, 0x2}, {{&(0x7f00000031c0)=@alg, 0x80, &(0x7f0000000d80)=[{&(0x7f0000003240)=""/205, 0xcd}, {&(0x7f0000000a40)=""/56, 0x38}, {&(0x7f0000003340)=""/83, 0x53}], 0x3, &(0x7f00000033c0)=""/226, 0xe2}, 0x8}, {{&(0x7f00000034c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000003540)=""/250, 0xfa}], 0x1, &(0x7f0000003640)=""/4096, 0x1000}, 0x7265}], 0x6, 0xf796edee3d7da175, &(0x7f00000047c0)) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 38, 17, 30, 30, 8, 23, 30, 9] detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) fsync(0xffffffffffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x4c, 0x30, 0xcac229faa96ee7df, 0x0, 0xfffffffc, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0x4}, {0xc, 0x4, {0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e032", 0x3a}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "51a1cb4e9e8a319f", "c0d55a000d0026c98c8da80a9015ad00", '\x00', "bb10000000000001"}, 0x28) readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}, {&(0x7f0000003300)=""/4095, 0xfff}], 0x2) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000000c0)={{r3}, "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"}) sendmsg$nl_route(r3, &(0x7f00000010c0)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r0, @ANYBLOB="10c0000000e1000028001280090201807665746808dd000000000000", @ANYRES8=r3, @ANYRESDEC=r2], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x4c, 0x30, 0xcac229faa96ee7df, 0x0, 0xfffffffc, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0x4}, {0xc, 0x4, {0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e032", 0x3a}], 0x2}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "51a1cb4e9e8a319f", "c0d55a000d0026c98c8da80a9015ad00", '\x00', "bb10000000000001"}, 0x28) (async) readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}, {&(0x7f0000003300)=""/4095, 0xfff}], 0x2) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000000c0)={{r3}, "2cefec11ad23f218cd96313d9d1ab072b4c70e798310d5f3301ed2f9360eebfae6c06018d6cbc8bd4508a616018ec5dd2af3aea74807a69ffbc59d2156e7bf754b03238487d219c9c711c3a85e2a018652a0ddcf6fe2103ee00edbe3ccebfb5f98d21441cedefbb3b682a3d82c771fa2489e5bcdc18b2a728ace7c4ac6774b97f62274681e021d02b0de80c020c39356fb8c50481a54511cc329e2aef44c70c807b19631459b80d91c826e91bbf81b63e946a3a838a17731a53023885f77b5c72180f109ac5478b3b74c143a60e9fa64c8c264a41c451be759107cdbdaa80030c17ab7d062b34b0412c662517e51ca5aa6212907b83e7f8fda23c8e21e1fa2cb62f2176b29de309627013d2ac85e515b96d5be9c04cdfcfd5f9b20e09cbf4b74092ce50115f72913fe69ac295685fdce808d3f1fdc4493d489a15cf02a88ff5b372de41c0bf83691047122bfef85e120877d60d474567aaac325ab6dc35ce2090b83b5aa2de4eff76ffea08129cce37363ddb1905501936a1038f87f3577e8ffcd72d77186a79b64ee066e91445c52f9d341abf312f209af0719fc2569af8a5d3b521d0c58d9c413de669e6a01c6c0fed4f4e80f3148d2539d83e2e9f40da910fd818566f4b00581e8beb9a5b6d8af9f35c3233f5e76c37a43aa237626fe89d656a854a07643d0bbb50c43381dd7a6ece6f3ac6b5582fba7e9d38fd767a1bd1d4e6a374f48e498c354da1c43e244a365e5c4ebeb41adb6ad35f578bad0dbda511f1f28cad0c04bc708d276a1398b717bc7f9b9aac831d621e5117724f7367df392a9f538bbb7b5a59b1b4f190a3c9676b2b053da439c6e225f152885c11a960e0f738e0df8666f4741f562498774cf97d019fc39ba03d7201542f8d78f15c7ca33c4f5885b1ebed972b64efa0dfa5513f27b1a20792c4796298c28c47903d29efcf6c633c62cbcd0c1cbc15b4f6b36ddfe19218cee6917a422ba496a55fc2659d0e936b6ee2dfc88d5405b0f6013aff2ae584f46f21f23904f6409801d0170a6c1a92b42417b797458c36b443ab9548462a7f06ff4c85f93e497bb38858e9fad9d7c24f107d65c182957644ad08305a763f2136ff0c0153df378627cba970cc5e5d7ce983fba616df94a30d9a3cb3fa31484c34510eca8a4d885ad514a39bc32f67eca1b5d1435e9e84762f676c1912415bcb0ad773b468fc964fd6e38ac08f969c91b7cb8733295249c40f1e313752ce4ce1092daf563cee361d5ff09d2e8d8c4b61a1230e416d589c26b4f5c8de4475773e3d2cceef2487bcfa779820c568c41d7982518afbd4b084c4b184a5b23591b5dcb3b8940d780f66d3884b732744160b4c44f71de6187a2c33b7337386f893682798cb882970dc0cebf918748127d6586cad5ee8d831297bef64ddc6ffa43e86c9d3e344b2b808d55e8d5f3c41790d67fb34948b8dc3efa8201bcfe468c73a2858b563ad929f99b0c4059587a930228e8580720f641fefbad1d19556a37418809162c0e0334a4181dc056d72ca1964b68243a88e0a75db11bbdcb28f026a226a2ea209d59bb1ebc771fc99734dedf8e4c0bf9910ffe9b6ae6a7dfb3db12eebd54b55d2a6f20688a9d5610ccbe64944b0c99e05326bd6ca059030e8b7a4eafd27d60e3430705fce601e76385da8076f14cab9f8982948e63cbe8b1b51983093c94b1dcc286d11c6130d10d32e16933cda96ac3a1f887187558b6c0f986c9455b5ded7f5249fe76ca9b9aca89fe02a34d2c0ad4aa765b0ac40fc8cc8cdd5c05f87fa644013624ac9ebf826f50af0df73aafa0636af11cec4b4fb0384029a215a9f80ca2b2605dfef844ed57b9249f5d5dd83c7a843661ff39f71ba16d086c415b772f4a2644879163042d3b1bc511f8ebb44c58a787778d688462fa102bb1033e3bd71902e8748cf56c544259c89ec31e4b94f2f6fa71e47621c2ef4c9cdb42d2a2bcfcb9a74cf213cd626277bfa1f7c58cecf4178bdd1ab2bb76fadc0c6278180f52a9cdfbcb95f14eab4d4747ad452e9c98bef778f0ed4349f85d2516fe9533a2fa22dad0115df2603a205ebe13ecd358116a4ff41cf6b9a121b520a80e4d02dd3c45b905c66b794a58c092e15f8efc756f1e63681f883936eaf7576d465a1631fed7c39dbfd6da6b884bd9e2699ddc91a4bff3bf812cf8ead8cdca7409295505ea29a34171125984d4676ab56b03ca6e477e8013e700c233b8248f29aed6e0d664f4fc1b4322cdf988a3ea8085d1c7254d1ed8aa561e4f59520aab1609f96588f281a4d20805e2515955bf28bb8883f1841fd1de266f0ff7295289e63c4049aaa2cecb1ff30df1b67b1a69e09f042b2aaaddf3fba6489f31e7b7ccae012901dcb8faf84b30f63873124e277da3ade13d49da8a74587cb1af19d33e6dead3e718bc3618b297ac6563128f9204f68de23e9b8b31d86b7c439a40edfc70acd14088b63bd96f5da69310b2ee73853d5a5a9bbe8f6b767267c47d59e33ae191310c5c59b2266964068a20996fd1d8e437a7c2d08759572b22a2c21d3e645ceba6318e6d6646c5dce35dcaf70bae34a8d6d2bfc98c212b59e66b1044cdee34fbc661b8ed99c77f8ab29b5cfe412392ccfb02ebab0e6b5826073195c5158046857e516e694e54fc56f5ddd2c9a3b9b90e43a805eb5d72c0bf545593899a7f623e65809094377f2fdd1fb3fc4ee27728449919862426052d1e2d050c57e823d621fa7c5b75d1217a8c094dcd6c027cdda6ecde4d34608270d8997a9a6d237ad980e1e9b9564cc3ff014de805f2739bdc31081e7c0ab23089970dce27535f2c6e47c82f9e3b55337eca7f49a5fcb8ad9d68725d2d7dcdc7b78a0f62090b8efbd6fe5669ac458b8b360b64b56fcaa02ae826bfcda51b502b1657a84f827ebf86d06e17d9a1e4ab586bb41e83dce37bfc7848beff43f8bd5b62bb95857e7f18b3bc81aab40f048391e896d331c4d0d7ae4dc2f73cd0d75002e607c3e8855455af69ece32d00c26eac2b2f0073b9e09ff7eae36110f52e5d0dd6294fdfb59f9417c3e26349922e8f9fe3d319d829fbf44fea6508d3c80e154a672f9f526b21dd0b25ff246f7d7b2142484fec268db04268a9a8e920c9794d7b7798dc629fd8171886d70c75d1ced9328a76bbebd4ef2d4b356104d36dd9282ae96e104411587b59d71d7bb2c04ad6d2249688c44942bd3fcc7273f3da7b2f50d9c66ab0305dc966aec7694e15277519f8adc2827458320c9e83df93b387cf00e4b3bd13cf43080e14bb0ed789db3303c2c3bd0c621211c47d5d5056752d1684c4e8f8b8c4c9e0eca9498947b57ed22cb9094ea6376df39df116dc46729f70f903505b508aa70bb9407ece539583fdba67ec92e481f5252e94a193a5fe881cc6d84dd1c390f845fbe39115ef7e5c7522e9b9871ad7c14ec8c099b522131e50bbf8ca3f2a1df6e9284bb1c6c1c061d594d51acafc50ad4470d821010f1a8ce77968508081eca33088ee27f9588917cd4ad26c76ae2c4291d027ca7f11612e4099f1dfcb4e746e6f8f899be29468a459570808210c93f4cfa49e713601d7e74f03f0519b951c31669361c6eece69ab9da9dde213371d33daa70d9ba6b78275aae5f191275cf097d20b8c806c99eaff4ace02329cc20642dfe5401dda8ae23c0cbc9acf91e45fc13f7f0b468def92ca60944f43319eb57c777e541ba6b6c4834689b6c86b58b2c668c99b4880898bfe2aa7056805cb1b2bd1f3dfff4c746fe6ae1412103b1463417cf69dac7a358aa9e0887bf7d1ada70cf5bd44a29058e83bb8d7de7f3e069af0740b4a6b4ec42796b03951ccfb03faf4a537eb42ed97981163bc9c98024f50a65dae5dbc4e02d2893812a869c33a628b9a1b6c4f38ef86e725a374224c2c4ec05a55b38a141140f1cd246d0bb7f44968be59f4926faaa27defc186a75b8d2e7100f5a3c2e0b47df8299853dc7829465e9a0f3c4ae6b747b6261442b945b310354c607e191177865ba8355bad7cfb4c1de3086d9154da72122a343d1277ae1a829cb703bbd09bd5b80e30532393da271c010bf17e39676bc11b3a5bb9f462fb7ee22646bd69bcde399c3e36794be0b1e4d2074d7bdb33105bff0f5ac27cd50f243ae6afeed7d64fa2e970d7cf1c9e267405f953ee02f062a12da47073af957787f89e06cde946d7bb6871e12d2676738d8d662127b1c0649890b489ad1d85aa06aee5b5ba96831a95cccba82e7d844476d5f14ff1614c8aef5011607a2c5432a7867dac813fb64cfb0a0f5cfc3c24ed9c891aee68ad273090acc6eead35d5eb3291090bbb53300b7812c4db51a4ac3b73e1d816a4d2fb40647292e8d45e64cc76e6883736a370cf1401f881b96871f5a106732afd2a72a5c6f59a1427fbf169bbad6da35025bc7fcb69323c5e1f0aa2ea263a2839bda78225bcff82efb9b00c8db063d1df4ca312086bf91c6ef11296d525f0c1ec75ec31881f8dcf5ed53c7883f05f87ba14c5325a2a0141f7858217ee0a7a038a79b9125c5f844069b37b6066f31140e0dd95bac3367ce8a2116411ee054cbaac83adc91d441f3a4d86d83cdb5729aea2b03dbf8f3f961c8f7939b07cfa8ee4022e0569c8a9dedbe443e0c5c06c729dca26ecf66b78cb083127d3602765cb203dda28f104d3e88e9b02d61462a7d4863d2dd5bee1cafe93e9b130c9906a7c4bf952ec426f34ae5ddda0f45298213e9465a6a58579761bfbac0ec0ef679253d86f252a57f4b8761acde5b63250f7b9fd3e0f6b6373eb63a5cc1b455a2815a20012fac73a6f8cf0da98ec4d7ba2dfcafd09ee3aa0acbe10dcfa19ff0ea69cedaeb8979459381daeb362220147e235a30ad263fb48dabe7b3b4c5a215a5b8b5ef0dc9586d85c8f6713b8a5a004b4a50d35d3254f72208cb2a8d444db986171e58f7a484957d6fe9136dd050de3f4144b0a246861e7655b7b98862d37bd0fe2a5a48ad5c098be9e99599864885dea63aa7cbcd87da8523981adf7826a55cbbac060a0ba898d2410e93fb8c69e5b59c66b980984b2e35a75b515b5117564a1c9c9fb37fd926d4f9654abb16f5c3678762036e27c6d820e3addddda61e56b288a712ff6b23195d58ad6952800406876e53ed5182571266103157257f2d352bc6be622ab6640fc1039d911daa10678eb31205d5443063f4c3367417e4427c15c7bf66fd0052e9e133ea6e43a5ee676f52fd323512966a95b319f671bd417a34e5560a1354508c23e75d3a2363dc4dc07c82fae15991552418fcbc632c2488b2befce47f37ba8742f1f0fa26184506848c442c5dc1d5a52c3cf1b0028ef9be208e4d53780109aea06f32bd96dc2a5baae6f6a5fb850081bc3bfe090de1b7c7667656734f675ead907d77aea6172e2d049dcfaa03e35754dc4a1f88c511dd88c60a680181cb64dcf2779b0029b8d4e50bccb776bab75bc21ace5b2e324ea20d931065b2264e8e5362cec16c121bb27a6d79a273c56e3a89c0ea19307bcfb6168cd41057caf401776f94a92b0752d0635fa90f1234f802521c60eccc2c20a6b97e2687d19b040857673fb9145e27297c0e39b105b16758aa8142e3953f2fa4e4e08480843497b805a61d24c6d4dd107679a07539fb0a0a97cada21a9fbe7c97ecf2a9c842a9ddd384df326964b2803dea6af6ecd7352d1c54323ffc0abb6092f7053573fb5c7077937071837d222a377d18acefa89b7b5975a9822e77338f1d01450c6046f53f2865aa2ad398367f20311c759b3b5a45e80b66b97f4e2e3c"}) (async) sendmsg$nl_route(r3, &(0x7f00000010c0)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r0, @ANYBLOB="10c0000000e1000028001280090201807665746808dd000000000000", @ANYRES8=r3, @ANYRESDEC=r2], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000200)=[{'OGAIN', @val={' \'', 'Line Capture Switch'}}, {'OGAIN', @void}], 0x37) close(r1) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @private}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x44}}, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x80) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="842a0a65bd8c2b2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) writev(r2, &(0x7f00000019c0)=[{&(0x7f0000000280)="755f7db94098061ba845fd132609dbeebc7e70d0f1ba2dd7531ba30cf41ed9bb026a26c9b206d5353feb560b4bbaf2eab0cedd2f919b91c89c8abad2b494c2e9464c333093e6ffb89e7d1d1c69b7d5084e59447b3f51175d6944884016331cac32acd12f8036e27b91e6966481c890f8b1d6a6476325a28acae31b40f885292ad784b28a1ecbc3088344baf0fca90442c934eaff15c2dc6ac231c7450deff996db67061af60de6b05225c5cd32a9116621632689cee45453a390fff5", 0xbc}, {&(0x7f00000001c0)="8280b8ec7360ab554bdba7aed58900c47bf75c7375d33a2e69045f428fc3883cb65c531b54ef68dcdc22484a03b908435b9177f58810cd31b1ffc5c5bed50421b306472b4767fa100d1465c6fcb05425865eb990dd8a1f2f135a00554b438e32c8428a089c7ceddd", 0x68}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="0c76284b57a1591313ed4d75f492c43a5248d026a6df4ec8487b81d42897884ccd6f4f7da93a14230ce5f1bc9f185df21133d3f601c4ab05010e9e0b1448575c909b6b753eab59ee0eab5dea9c2d49c1cabb140ebc7d009e5ed4840a4c88c46d3949196edf54b4e6bce2d473a9c8a8785928335ab0dec807c6c0c4a363dae3ad04df548996777e246cefbd715e247a9e66f8d11217ad2cf7647268e33e5dd14336c6e642e9ab6a3ab18328a2466350081eccd6049857721fbeb2bd13c957f3088544d59d4e67f5514018627ef4d8deb1dd5ee27b2facc0374f91c6fcfbb3840baf87136717139a45aa5a10b69a126629591fbb28", 0xf4}, {&(0x7f0000001500)="7e9dfcb99e9d2e011bcbbf1e5f6b7f6c5f2121a1c70c70dcab54fb11ef14f169bb2a69b8b0169599c16d332dd1e9a396d6c0dae906af9fb30eb29999a249cbcc09b8ccc5cf024fe875cc98fa54e2894257ca659461d739b602f253a9b5e0bb85f3f4abe9e08312e365998d1733859a18b991771931b8508793646b525f831e909450d3192ce29ae719246fd2521fb155308e2327b95c345235bfff2cbf58b0ec021c34d9e7edcde59a1db70c18f46dfcf1b6a6b922f8110d688bb894a5a52f98350bd355bb5459719bc6cbc5b92163af2deae46a0bab10f19feba8081029a60b1865", 0xe2}, {&(0x7f0000001600)="f735a65da03c8822be8e1c07312e8ae8bf9c657006b880ab640ff5247f9896002ab7fb803d74cbe754c3c6fca87d2d4190d078f0005e058433a6ff5e2a8c7c71b924e9aeeb9a5561deab105df441a1f3b1004d7c824e64c8c027525295d2bf34ef11fc43d6915596a445a07daa54b7fe95421382e98afebc294c5f14838e1391ff102dc2791a9f015739ce99e04120dd73484d35ae69b4be13d4626034134c42c8419d5502b3e8fb9a97429c7a4290b844408cf84df765d416cab6573e2d2f3c02b390e2d12a756a6ab19efaae7a1e7515368eb05531c6c995f40b5ac63bb106aabc7e47b1a5", 0xe6}, {&(0x7f0000001700)="5a155418e047ff84fdd2cac4f9257598ea6a76edaf88cee68ebdf57f40329f88a7ca78082206060a71d30c56714ea0cfea86807a9a12c84690df9b36edfa6956ce4aa7a8a73bdd647bc0194c1378633ec6e284af6591f79883d9fe34d6fc53eb28f740778d0b714a98d6c70cce16840d9fe35fefbb3d9da6350cfd0395b57cdb5b6cfdaca6895947563a556392b956e386c33d7a64f3552d965ede4208e96a3c96ab803525552001dcbb82be8a0ab3f2c0f5f80298f137730d09ba68db3b9e61aaaa233b1e1afbe17c4f4fee9b5632c766a1fb693f1193082db65991474c475e592281bcd38e0676b8b682367be05525f0a493a5985ba288f8", 0xf9}, {&(0x7f0000000000)="6d654b63aeae9cd1e06c6a573150e3b20405aa9289ee6628310c2a996c16f639964c4527ee1af99a1568e40238c47cf5abff8a5074aae7ace10af3d3f0", 0x3d}, {&(0x7f0000001800)="628a430ecbdc3c2734bd0ada54f86b54cb92a098ef03567afd638f37d51686e511cd99c7eef3cd691a713c078a22c5a63de625f9f7415dd41e7402a7f1f5770395f0d4132aa6158e79a4fc390ba612b58340198bd17fec9643a7b31142d678c92e7a0d1aa9836cbba7a58326a5865f3c478d1d103bf5d60cb2970e45ea8ba71c14ece85f021eea3aa48ba238c1898b08cda3fcc5b4fc40f5fa52090cddc026e14332fb7767e34c4f213ea7d51bb0a0e48f047593bd6ea60fd0648e16a47b2f9cd67c388f", 0xc4}, {&(0x7f0000001900)="d4c676ceead52d4992f22c7920c60ee2b01d2235abf48653969bff9f42d52668a8b8ea506a266464ee9f6b630fdd465926c9516a98931b95a76b15693cef6f5862cb571f2962a061228a2b1f381926a277d83a67c7599baa117b408bfaad431c36c2fde88c0aa0da800b8766833165e07cf1e957cbc580a205d8dc6fcdc470497fda247e73", 0x85}], 0xa) executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x166) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) getsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) chdir(&(0x7f00000003c0)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000050000000000006100f8b4e70b45f1431f264e3c92e38554002086b40c086a083e39e7a32d50a7c0e174688a0f39beaa709f49de134961a8bcfe736c570a0fa2a6819e6a09558497982092e4f74a8df2054e6cad0adeee871dc4"], 0x0, 0x1d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_clone(0x100, 0x0, 0xfffffffffffffc2a, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC=r3]) listxattr(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="9ca965fe3c29a99103c89b63fd9feb0100180000000000e100180000000001000084400000000f000000020000000200000000000700306100707cda9c812460a9d58e13d611221db4ff0f000000000000350a6ed05f854fc1a38d1fc71a196a2540804e1afe9f18a0403681267680"], &(0x7f0000001200)=""/145, 0x37, 0x91, 0x0, 0x1, 0x10000, @value}, 0x28) r4 = openat2(r1, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x80000, 0x140, 0x8}, 0x18) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x401c2103, 0x0) utime(&(0x7f0000000240)='./file0\x00', &(0x7f0000000440)={0x5, 0x5}) readv(r2, &(0x7f0000000180)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1) syz_emit_ethernet(0xfc1, &(0x7f00000035c0)=ANY=[@ANYBLOB="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"], 0x0) r6 = fspick(r1, &(0x7f0000000000)='./file1\x00', 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r7, 0x8910, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000040)='upperdir', &(0x7f0000000100)='./bus\x00', 0xffffffffffffffff) executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r4, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r5, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r6 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r6, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r8 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r7, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r5, r5, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r7, r8, 0x14, 0x2003, r9, @value=r7}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x1, 0x6, 0x7, 0x8, 0x3, 0x3, 0x0, 0x32e, 0x40, 0x58, 0x6b562831, 0x8, 0x38, 0x2, 0x5, 0x4, 0x5}, [{0x3, 0x7, 0x93, 0x1, 0x9, 0x9, 0x631d, 0x5}, {0x4, 0x7fffffff, 0x2, 0xfffffffffffffbff, 0x8, 0x9, 0x3b3, 0x3}], "3fee323c26318f44cf9b5f036ccedc61dc952380321bac85d779c801f85c5b39449e73d33d5b9eeeb201cd714075aa5406426ea9c834fcaea562f43d1ae3e3446319cdfaee179cb456170a541a9736b56c5b746ded39014bd53135fff14954d31ffed516b21a23a54f028bd2a16d893d7fe2bd1bc77825717d6b4b760136e81c969fc6c5067d10511fa659eb52b906f6b28638b3eaa0f0286ab964b0b5dfbe2245247fafa7d3f9964abdf3bebe71b0b664c1f52d9d57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) (async) accept4$alg(r7, 0x0, 0x0, 0x80000) (async) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000014c0)=r5, 0x1) rename(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0\x00') (async) read$FUSE(r8, &(0x7f0000001580)={0x2020}, 0x2020) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000035c0)={0x1, 0x3, 0x6}) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) close_range(r0, r0, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r2], 0x1}, 0x58) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x0, 0x40000121, &(0x7f0000000400)={0x0, 0x3938700}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022dbd7000fddbdf2501000000060006004e240000540508809c0300801400040002000005ac1414bb0000000000000000240002003008062b50b06c4769f6dbcec85a5a9ef60feaab3bea8f8eb0b15322be121b0824000200929f14647655f2e99ca07ec50362fa8ef2387732f4d98a1a0f1855b6ed961c503c0309807c000080060001000a00000014000200fc0100000000000000000000000000010500030003000000060001000200000008000200ac1e01010500030003000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb050003000000000088000080060001000200000008000200ac1414bb0500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030003000000060001000a00000014000200fc020000000000000000000000000001050003000000000088000080060001000a00000014000200fc0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030001000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a0000001400020000000000000000000000000000000000050003000200000048010080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fe8800000000000000000000000001010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fc00000000000000000000000000000105000300000000000600010002000000080002000a0101000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ffffffff0500030001000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a000000140002000000000000000000000000000000000005000300030000000600010002000000080002007f000001050003000200000064000080060001000200000008000200000000000500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a00000014000200000000000000000000000000000000010500030001000000b4010080640109801c000080060001000200000008000200640101000500030002000000400000800600010002000000080002000a0101020500030002000000060001000a00000014000200ff010000000000000000000000000001050003000000000028000080060001000a00000014000200ff020000000000000000000000000001050003000200000094000080060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030003000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000a00000014000200fc00000000000000000000000000000105000300010000001c000080060001000200000008000200ac1414bb050003000000000028000080060001000a0000001400020000000000000000000000000000000000050003000100000004000080200004000a00000d00000004ff010000000000000000000000000001fa08000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff08000a0001000000"], 0x570}, 0x1, 0x0, 0x0, 0x8080}, 0x8010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket(0x2, 0x80805, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') preadv(r10, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r11 = socket$inet6(0xa, 0x800, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r11, 0x0) sendto$inet6(r11, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r11, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="72da", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000028c0)="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", 0xffe}], 0x1}}], 0x2, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000b95000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7e, 0x0, 0x0}, &(0x7f0000000180)=0x40) sendmmsg$inet(r9, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000200)={r8, 0x7}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x5) (async) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000aeb000/0x3000)=nil, 0x3000}, 0x4}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode bisect: the chunk can be dropped bisect: split chunks (needed=true): <5>, <4> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 8, 23, 30, 9] detailed listing: executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x166) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) getsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) chdir(&(0x7f00000003c0)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000050000000000006100f8b4e70b45f1431f264e3c92e38554002086b40c086a083e39e7a32d50a7c0e174688a0f39beaa709f49de134961a8bcfe736c570a0fa2a6819e6a09558497982092e4f74a8df2054e6cad0adeee871dc4"], 0x0, 0x1d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_clone(0x100, 0x0, 0xfffffffffffffc2a, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC=r3]) listxattr(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="9ca965fe3c29a99103c89b63fd9feb0100180000000000e100180000000001000084400000000f000000020000000200000000000700306100707cda9c812460a9d58e13d611221db4ff0f000000000000350a6ed05f854fc1a38d1fc71a196a2540804e1afe9f18a0403681267680"], &(0x7f0000001200)=""/145, 0x37, 0x91, 0x0, 0x1, 0x10000, @value}, 0x28) r4 = openat2(r1, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x80000, 0x140, 0x8}, 0x18) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x401c2103, 0x0) utime(&(0x7f0000000240)='./file0\x00', &(0x7f0000000440)={0x5, 0x5}) readv(r2, &(0x7f0000000180)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1) syz_emit_ethernet(0xfc1, &(0x7f00000035c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000002080045000fb3000000000084907800000000ffffffffdd9dec79219eb549dbd024c796335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3abd27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc65b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b32d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324dde85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b6805913e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc368ef4ac38874"], 0x0) r6 = fspick(r1, &(0x7f0000000000)='./file1\x00', 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r7, 0x8910, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000040)='upperdir', &(0x7f0000000100)='./bus\x00', 0xffffffffffffffff) executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r4, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r5, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r6 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r6, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r8 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r7, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r5, r5, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r7, r8, 0x14, 0x2003, r9, @value=r7}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x1, 0x6, 0x7, 0x8, 0x3, 0x3, 0x0, 0x32e, 0x40, 0x58, 0x6b562831, 0x8, 0x38, 0x2, 0x5, 0x4, 0x5}, [{0x3, 0x7, 0x93, 0x1, 0x9, 0x9, 0x631d, 0x5}, {0x4, 0x7fffffff, 0x2, 0xfffffffffffffbff, 0x8, 0x9, 0x3b3, 0x3}], "3fee323c26318f44cf9b5f036ccedc61dc952380321bac85d779c801f85c5b39449e73d33d5b9eeeb201cd714075aa5406426ea9c834fcaea562f43d1ae3e3446319cdfaee179cb456170a541a9736b56c5b746ded39014bd53135fff14954d31ffed516b21a23a54f028bd2a16d893d7fe2bd1bc77825717d6b4b760136e81c969fc6c5067d10511fa659eb52b906f6b28638b3eaa0f0286ab964b0b5dfbe2245247fafa7d3f9964abdf3bebe71b0b664c1f52d9d57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) (async) accept4$alg(r7, 0x0, 0x0, 0x80000) (async) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000014c0)=r5, 0x1) rename(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0\x00') (async) read$FUSE(r8, &(0x7f0000001580)={0x2020}, 0x2020) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000035c0)={0x1, 0x3, 0x6}) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) close_range(r0, r0, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r2], 0x1}, 0x58) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x0, 0x40000121, &(0x7f0000000400)={0x0, 0x3938700}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x570}, 0x1, 0x0, 0x0, 0x8080}, 0x8010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket(0x2, 0x80805, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') preadv(r10, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r11 = socket$inet6(0xa, 0x800, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r11, 0x0) sendto$inet6(r11, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r11, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="72da", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000028c0)="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", 0xffe}], 0x1}}], 0x2, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000b95000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7e, 0x0, 0x0}, &(0x7f0000000180)=0x40) sendmmsg$inet(r9, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000200)={r8, 0x7}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x5) (async) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000aeb000/0x3000)=nil, 0x3000}, 0x4}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 30, 9] detailed listing: executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x166) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) getsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) chdir(&(0x7f00000003c0)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000050000000000006100f8b4e70b45f1431f264e3c92e38554002086b40c086a083e39e7a32d50a7c0e174688a0f39beaa709f49de134961a8bcfe736c570a0fa2a6819e6a09558497982092e4f74a8df2054e6cad0adeee871dc4"], 0x0, 0x1d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_clone(0x100, 0x0, 0xfffffffffffffc2a, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC=r3]) listxattr(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="9ca965fe3c29a99103c89b63fd9feb0100180000000000e100180000000001000084400000000f000000020000000200000000000700306100707cda9c812460a9d58e13d611221db4ff0f000000000000350a6ed05f854fc1a38d1fc71a196a2540804e1afe9f18a0403681267680"], &(0x7f0000001200)=""/145, 0x37, 0x91, 0x0, 0x1, 0x10000, @value}, 0x28) r4 = openat2(r1, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x80000, 0x140, 0x8}, 0x18) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x401c2103, 0x0) utime(&(0x7f0000000240)='./file0\x00', &(0x7f0000000440)={0x5, 0x5}) readv(r2, &(0x7f0000000180)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1) syz_emit_ethernet(0xfc1, &(0x7f00000035c0)=ANY=[@ANYBLOB="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"], 0x0) r6 = fspick(r1, &(0x7f0000000000)='./file1\x00', 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r7, 0x8910, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000040)='upperdir', &(0x7f0000000100)='./bus\x00', 0xffffffffffffffff) executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r4, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r5, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r6 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r6, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r8 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r7, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r5, r5, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r7, r8, 0x14, 0x2003, r9, @value=r7}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x1, 0x6, 0x7, 0x8, 0x3, 0x3, 0x0, 0x32e, 0x40, 0x58, 0x6b562831, 0x8, 0x38, 0x2, 0x5, 0x4, 0x5}, [{0x3, 0x7, 0x93, 0x1, 0x9, 0x9, 0x631d, 0x5}, {0x4, 0x7fffffff, 0x2, 0xfffffffffffffbff, 0x8, 0x9, 0x3b3, 0x3}], "3fee323c26318f44cf9b5f036ccedc61dc952380321bac85d779c801f85c5b39449e73d33d5b9eeeb201cd714075aa5406426ea9c834fcaea562f43d1ae3e3446319cdfaee179cb456170a541a9736b56c5b746ded39014bd53135fff14954d31ffed516b21a23a54f028bd2a16d893d7fe2bd1bc77825717d6b4b760136e81c969fc6c5067d10511fa659eb52b906f6b28638b3eaa0f0286ab964b0b5dfbe2245247fafa7d3f9964abdf3bebe71b0b664c1f52d9d57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) (async) accept4$alg(r7, 0x0, 0x0, 0x80000) (async) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000014c0)=r5, 0x1) rename(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0\x00') (async) read$FUSE(r8, &(0x7f0000001580)={0x2020}, 0x2020) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000035c0)={0x1, 0x3, 0x6}) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) close_range(r0, r0, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r2], 0x1}, 0x58) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x0, 0x40000121, &(0x7f0000000400)={0x0, 0x3938700}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x570}, 0x1, 0x0, 0x0, 0x8080}, 0x8010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket(0x2, 0x80805, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') preadv(r10, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r11 = socket$inet6(0xa, 0x800, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r11, 0x0) sendto$inet6(r11, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r11, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="72da", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000028c0)="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", 0xffe}], 0x1}}], 0x2, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000b95000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7e, 0x0, 0x0}, &(0x7f0000000180)=0x40) sendmmsg$inet(r9, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000200)={r8, 0x7}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x5) (async) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000aeb000/0x3000)=nil, 0x3000}, 0x4}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 8, 23] detailed listing: executing program 0: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x166) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) getsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) chdir(&(0x7f00000003c0)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000050000000000006100f8b4e70b45f1431f264e3c92e38554002086b40c086a083e39e7a32d50a7c0e174688a0f39beaa709f49de134961a8bcfe736c570a0fa2a6819e6a09558497982092e4f74a8df2054e6cad0adeee871dc4"], 0x0, 0x1d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_clone(0x100, 0x0, 0xfffffffffffffc2a, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC=r3]) listxattr(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="9ca965fe3c29a99103c89b63fd9feb0100180000000000e100180000000001000084400000000f000000020000000200000000000700306100707cda9c812460a9d58e13d611221db4ff0f000000000000350a6ed05f854fc1a38d1fc71a196a2540804e1afe9f18a0403681267680"], &(0x7f0000001200)=""/145, 0x37, 0x91, 0x0, 0x1, 0x10000, @value}, 0x28) r4 = openat2(r1, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x80000, 0x140, 0x8}, 0x18) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x401c2103, 0x0) utime(&(0x7f0000000240)='./file0\x00', &(0x7f0000000440)={0x5, 0x5}) readv(r2, &(0x7f0000000180)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1) syz_emit_ethernet(0xfc1, &(0x7f00000035c0)=ANY=[@ANYBLOB="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"], 0x0) r6 = fspick(r1, &(0x7f0000000000)='./file1\x00', 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r7, 0x8910, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000040)='upperdir', &(0x7f0000000100)='./bus\x00', 0xffffffffffffffff) executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r4, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r5, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r6 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r6, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r8 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r7, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r5, r5, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r7, r8, 0x14, 0x2003, r9, @value=r7}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x1, 0x6, 0x7, 0x8, 0x3, 0x3, 0x0, 0x32e, 0x40, 0x58, 0x6b562831, 0x8, 0x38, 0x2, 0x5, 0x4, 0x5}, [{0x3, 0x7, 0x93, 0x1, 0x9, 0x9, 0x631d, 0x5}, {0x4, 0x7fffffff, 0x2, 0xfffffffffffffbff, 0x8, 0x9, 0x3b3, 0x3}], "3fee323c26318f44cf9b5f036ccedc61dc952380321bac85d779c801f85c5b39449e73d33d5b9eeeb201cd714075aa5406426ea9c834fcaea562f43d1ae3e3446319cdfaee179cb456170a541a9736b56c5b746ded39014bd53135fff14954d31ffed516b21a23a54f028bd2a16d893d7fe2bd1bc77825717d6b4b760136e81c969fc6c5067d10511fa659eb52b906f6b28638b3eaa0f0286ab964b0b5dfbe2245247fafa7d3f9964abdf3bebe71b0b664c1f52d9d57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) (async) accept4$alg(r7, 0x0, 0x0, 0x80000) (async) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000014c0)=r5, 0x1) rename(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0\x00') (async) read$FUSE(r8, &(0x7f0000001580)={0x2020}, 0x2020) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000035c0)={0x1, 0x3, 0x6}) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode bisect: the chunk can be dropped bisect: split chunks (needed=true): <2>, <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r4, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r5, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r6 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r6, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r8 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r7, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r5, r5, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r7, r8, 0x14, 0x2003, r9, @value=r7}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x1, 0x6, 0x7, 0x8, 0x3, 0x3, 0x0, 0x32e, 0x40, 0x58, 0x6b562831, 0x8, 0x38, 0x2, 0x5, 0x4, 0x5}, [{0x3, 0x7, 0x93, 0x1, 0x9, 0x9, 0x631d, 0x5}, {0x4, 0x7fffffff, 0x2, 0xfffffffffffffbff, 0x8, 0x9, 0x3b3, 0x3}], "3fee323c26318f44cf9b5f036ccedc61dc952380321bac85d779c801f85c5b39449e73d33d5b9eeeb201cd714075aa5406426ea9c834fcaea562f43d1ae3e3446319cdfaee179cb456170a541a9736b56c5b746ded39014bd53135fff14954d31ffed516b21a23a54f028bd2a16d893d7fe2bd1bc77825717d6b4b760136e81c969fc6c5067d10511fa659eb52b906f6b28638b3eaa0f0286ab964b0b5dfbe2245247fafa7d3f9964abdf3bebe71b0b664c1f52d9d57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) (async) accept4$alg(r7, 0x0, 0x0, 0x80000) (async) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000014c0)=r5, 0x1) rename(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0\x00') (async) read$FUSE(r8, &(0x7f0000001580)={0x2020}, 0x2020) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000035c0)={0x1, 0x3, 0x6}) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: WARNING: suspicious RCU usage in fib6_del bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r4, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r5, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r6 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r6, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r8 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r7, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r5, r5, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r7, r8, 0x14, 0x2003, r9, @value=r7}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x1, 0x6, 0x7, 0x8, 0x3, 0x3, 0x0, 0x32e, 0x40, 0x58, 0x6b562831, 0x8, 0x38, 0x2, 0x5, 0x4, 0x5}, [{0x3, 0x7, 0x93, 0x1, 0x9, 0x9, 0x631d, 0x5}, {0x4, 0x7fffffff, 0x2, 0xfffffffffffffbff, 0x8, 0x9, 0x3b3, 0x3}], "3fee323c26318f44cf9b5f036ccedc61dc952380321bac85d779c801f85c5b39449e73d33d5b9eeeb201cd714075aa5406426ea9c834fcaea562f43d1ae3e3446319cdfaee179cb456170a541a9736b56c5b746ded39014bd53135fff14954d31ffed516b21a23a54f028bd2a16d893d7fe2bd1bc77825717d6b4b760136e81c969fc6c5067d10511fa659eb52b906f6b28638b3eaa0f0286ab964b0b5dfbe2245247fafa7d3f9964abdf3bebe71b0b664c1f52d9d57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) (async) accept4$alg(r7, 0x0, 0x0, 0x80000) (async) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000014c0)=r5, 0x1) rename(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0\x00') (async) read$FUSE(r8, &(0x7f0000001580)={0x2020}, 0x2020) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000035c0)={0x1, 0x3, 0x6}) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 8] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r4, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r5, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r6 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r6, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r8 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r7, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r5, r5, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r7, r8, 0x14, 0x2003, r9, @value=r7}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x1, 0x6, 0x7, 0x8, 0x3, 0x3, 0x0, 0x32e, 0x40, 0x58, 0x6b562831, 0x8, 0x38, 0x2, 0x5, 0x4, 0x5}, [{0x3, 0x7, 0x93, 0x1, 0x9, 0x9, 0x631d, 0x5}, {0x4, 0x7fffffff, 0x2, 0xfffffffffffffbff, 0x8, 0x9, 0x3b3, 0x3}], "3fee323c26318f44cf9b5f036ccedc61dc952380321bac85d779c801f85c5b39449e73d33d5b9eeeb201cd714075aa5406426ea9c834fcaea562f43d1ae3e3446319cdfaee179cb456170a541a9736b56c5b746ded39014bd53135fff14954d31ffed516b21a23a54f028bd2a16d893d7fe2bd1bc77825717d6b4b760136e81c969fc6c5067d10511fa659eb52b906f6b28638b3eaa0f0286ab964b0b5dfbe2245247fafa7d3f9964abdf3bebe71b0b664c1f52d9d57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) (async) accept4$alg(r7, 0x0, 0x0, 0x80000) (async) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000014c0)=r5, 0x1) rename(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0\x00') (async) read$FUSE(r8, &(0x7f0000001580)={0x2020}, 0x2020) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000035c0)={0x1, 0x3, 0x6}) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) program did not crash bisect: split chunks (needed=true): <1>, <1>, <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #2 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 3 programs left: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r4, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r5, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r6 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r6, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r8 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r7, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r5, r5, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r7, r8, 0x14, 0x2003, r9, @value=r7}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x1, 0x6, 0x7, 0x8, 0x3, 0x3, 0x0, 0x32e, 0x40, 0x58, 0x6b562831, 0x8, 0x38, 0x2, 0x5, 0x4, 0x5}, [{0x3, 0x7, 0x93, 0x1, 0x9, 0x9, 0x631d, 0x5}, {0x4, 0x7fffffff, 0x2, 0xfffffffffffffbff, 0x8, 0x9, 0x3b3, 0x3}], "3fee323c26318f44cf9b5f036ccedc61dc952380321bac85d779c801f85c5b39449e73d33d5b9eeeb201cd714075aa5406426ea9c834fcaea562f43d1ae3e3446319cdfaee179cb456170a541a9736b56c5b746ded39014bd53135fff14954d31ffed516b21a23a54f028bd2a16d893d7fe2bd1bc77825717d6b4b760136e81c969fc6c5067d10511fa659eb52b906f6b28638b3eaa0f0286ab964b0b5dfbe2245247fafa7d3f9964abdf3bebe71b0b664c1f52d9d57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) (async) accept4$alg(r7, 0x0, 0x0, 0x80000) (async) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000014c0)=r5, 0x1) rename(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0\x00') (async) read$FUSE(r8, &(0x7f0000001580)={0x2020}, 0x2020) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000035c0)={0x1, 0x3, 0x6}) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) bisect: trying to concatenate bisect: concatenate 3 entries minimizing program #0 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r4, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r5, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r6 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r6, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r8 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r7, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r5, r5, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r7, r8, 0x14, 0x2003, r9, @value=r7}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x1, 0x6, 0x7, 0x8, 0x3, 0x3, 0x0, 0x32e, 0x40, 0x58, 0x6b562831, 0x8, 0x38, 0x2, 0x5, 0x4, 0x5}, [{0x3, 0x7, 0x93, 0x1, 0x9, 0x9, 0x631d, 0x5}, {0x4, 0x7fffffff, 0x2, 0xfffffffffffffbff, 0x8, 0x9, 0x3b3, 0x3}], "3fee323c26318f44cf9b5f036ccedc61dc952380321bac85d779c801f85c5b39449e73d33d5b9eeeb201cd714075aa5406426ea9c834fcaea562f43d1ae3e3446319cdfaee179cb456170a541a9736b56c5b746ded39014bd53135fff14954d31ffed516b21a23a54f028bd2a16d893d7fe2bd1bc77825717d6b4b760136e81c969fc6c5067d10511fa659eb52b906f6b28638b3eaa0f0286ab964b0b5dfbe2245247fafa7d3f9964abdf3bebe71b0b664c1f52d9d57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) (async) accept4$alg(r7, 0x0, 0x0, 0x80000) (async) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000014c0)=r5, 0x1) rename(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0\x00') (async) read$FUSE(r8, &(0x7f0000001580)={0x2020}, 0x2020) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000035c0)={0x1, 0x3, 0x6}) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r4, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r5 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r7 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r6, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r4, r4, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r6, r7, 0x14, 0x2003, r8, @value=r6}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x1, 0x6, 0x7, 0x8, 0x3, 0x3, 0x0, 0x32e, 0x40, 0x58, 0x6b562831, 0x8, 0x38, 0x2, 0x5, 0x4, 0x5}, [{0x3, 0x7, 0x93, 0x1, 0x9, 0x9, 0x631d, 0x5}, {0x4, 0x7fffffff, 0x2, 0xfffffffffffffbff, 0x8, 0x9, 0x3b3, 0x3}], "3fee323c26318f44cf9b5f036ccedc61dc952380321bac85d779c801f85c5b39449e73d33d5b9eeeb201cd714075aa5406426ea9c834fcaea562f43d1ae3e3446319cdfaee179cb456170a541a9736b56c5b746ded39014bd53135fff14954d31ffed516b21a23a54f028bd2a16d893d7fe2bd1bc77825717d6b4b760136e81c969fc6c5067d10511fa659eb52b906f6b28638b3eaa0f0286ab964b0b5dfbe2245247fafa7d3f9964abdf3bebe71b0b664c1f52d9d57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) (async) accept4$alg(r6, 0x0, 0x0, 0x80000) (async) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000014c0)=r4, 0x1) rename(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0\x00') (async) read$FUSE(r7, &(0x7f0000001580)={0x2020}, 0x2020) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r4, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r5 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r7 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r6, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r4, r4, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r6, r7, 0x14, 0x2003, r8, @value=r6}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x1, 0x6, 0x7, 0x8, 0x3, 0x3, 0x0, 0x32e, 0x40, 0x58, 0x6b562831, 0x8, 0x38, 0x2, 0x5, 0x4, 0x5}, [{0x3, 0x7, 0x93, 0x1, 0x9, 0x9, 0x631d, 0x5}, {0x4, 0x7fffffff, 0x2, 0xfffffffffffffbff, 0x8, 0x9, 0x3b3, 0x3}], "3fee323c26318f44cf9b5f036ccedc61dc952380321bac85d779c801f85c5b39449e73d33d5b9eeeb201cd714075aa5406426ea9c834fcaea562f43d1ae3e3446319cdfaee179cb456170a541a9736b56c5b746ded39014bd53135fff14954d31ffed516b21a23a54f028bd2a16d893d7fe2bd1bc77825717d6b4b760136e81c969fc6c5067d10511fa659eb52b906f6b28638b3eaa0f0286ab964b0b5dfbe2245247fafa7d3f9964abdf3bebe71b0b664c1f52d9d57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) (async) accept4$alg(r6, 0x0, 0x0, 0x80000) (async) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000014c0)=r4, 0x1) rename(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0\x00') (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r4, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r5 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r7 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r6, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r4, r4, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r6, r7, 0x14, 0x2003, r8, @value=r6}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x1, 0x6, 0x7, 0x8, 0x3, 0x3, 0x0, 0x32e, 0x40, 0x58, 0x6b562831, 0x8, 0x38, 0x2, 0x5, 0x4, 0x5}, [{0x3, 0x7, 0x93, 0x1, 0x9, 0x9, 0x631d, 0x5}, {0x4, 0x7fffffff, 0x2, 0xfffffffffffffbff, 0x8, 0x9, 0x3b3, 0x3}], "3fee323c26318f44cf9b5f036ccedc61dc952380321bac85d779c801f85c5b39449e73d33d5b9eeeb201cd714075aa5406426ea9c834fcaea562f43d1ae3e3446319cdfaee179cb456170a541a9736b56c5b746ded39014bd53135fff14954d31ffed516b21a23a54f028bd2a16d893d7fe2bd1bc77825717d6b4b760136e81c969fc6c5067d10511fa659eb52b906f6b28638b3eaa0f0286ab964b0b5dfbe2245247fafa7d3f9964abdf3bebe71b0b664c1f52d9d57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) (async) accept4$alg(r6, 0x0, 0x0, 0x80000) (async) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000014c0)=r4, 0x1) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-out-of-bounds Read in fib6_del testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r4, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r5 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r7 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r6, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r4, r4, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r6, r7, 0x14, 0x2003, r8, @value=r6}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x1, 0x6, 0x7, 0x8, 0x3, 0x3, 0x0, 0x32e, 0x40, 0x58, 0x6b562831, 0x8, 0x38, 0x2, 0x5, 0x4, 0x5}, [{0x3, 0x7, 0x93, 0x1, 0x9, 0x9, 0x631d, 0x5}, {0x4, 0x7fffffff, 0x2, 0xfffffffffffffbff, 0x8, 0x9, 0x3b3, 0x3}], "3fee323c26318f44cf9b5f036ccedc61dc952380321bac85d779c801f85c5b39449e73d33d5b9eeeb201cd714075aa5406426ea9c834fcaea562f43d1ae3e3446319cdfaee179cb456170a541a9736b56c5b746ded39014bd53135fff14954d31ffed516b21a23a54f028bd2a16d893d7fe2bd1bc77825717d6b4b760136e81c969fc6c5067d10511fa659eb52b906f6b28638b3eaa0f0286ab964b0b5dfbe2245247fafa7d3f9964abdf3bebe71b0b664c1f52d9d57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) (async) accept4$alg(r6, 0x0, 0x0, 0x80000) (async) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: general protection fault in nsim_fib_event_work testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r4, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r5 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r7 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r6, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r4, r4, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r6, r7, 0x14, 0x2003, r8, @value=r6}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x1, 0x6, 0x7, 0x8, 0x3, 0x3, 0x0, 0x32e, 0x40, 0x58, 0x6b562831, 0x8, 0x38, 0x2, 0x5, 0x4, 0x5}, [{0x3, 0x7, 0x93, 0x1, 0x9, 0x9, 0x631d, 0x5}, {0x4, 0x7fffffff, 0x2, 0xfffffffffffffbff, 0x8, 0x9, 0x3b3, 0x3}], "3fee323c26318f44cf9b5f036ccedc61dc952380321bac85d779c801f85c5b39449e73d33d5b9eeeb201cd714075aa5406426ea9c834fcaea562f43d1ae3e3446319cdfaee179cb456170a541a9736b56c5b746ded39014bd53135fff14954d31ffed516b21a23a54f028bd2a16d893d7fe2bd1bc77825717d6b4b760136e81c969fc6c5067d10511fa659eb52b906f6b28638b3eaa0f0286ab964b0b5dfbe2245247fafa7d3f9964abdf3bebe71b0b664c1f52d9d57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) (async) accept4$alg(r6, 0x0, 0x0, 0x80000) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: global-out-of-bounds Read in fib6_ifdown testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r4, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r5 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r7 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r6, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r4, r4, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r6, r7, 0x14, 0x2003, r8, @value=r6}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x1, 0x6, 0x7, 0x8, 0x3, 0x3, 0x0, 0x32e, 0x40, 0x58, 0x6b562831, 0x8, 0x38, 0x2, 0x5, 0x4, 0x5}, [{0x3, 0x7, 0x93, 0x1, 0x9, 0x9, 0x631d, 0x5}, {0x4, 0x7fffffff, 0x2, 0xfffffffffffffbff, 0x8, 0x9, 0x3b3, 0x3}], "3fee323c26318f44cf9b5f036ccedc61dc952380321bac85d779c801f85c5b39449e73d33d5b9eeeb201cd714075aa5406426ea9c834fcaea562f43d1ae3e3446319cdfaee179cb456170a541a9736b56c5b746ded39014bd53135fff14954d31ffed516b21a23a54f028bd2a16d893d7fe2bd1bc77825717d6b4b760136e81c969fc6c5067d10511fa659eb52b906f6b28638b3eaa0f0286ab964b0b5dfbe2245247fafa7d3f9964abdf3bebe71b0b664c1f52d9d57", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r4, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r5 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r7 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r6, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r4, r4, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r6, r7, 0x14, 0x2003, r8, @value=r6}, 0x20) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r4, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r5 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffffc, 0x1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xe}, @generic={0x40, 0x3, 0x2, 0xb28}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x696}, @generic={0x81, 0x3, 0x8, 0x7fff, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @generic={0x0, 0x9, 0x3, 0x3d, 0xa}], &(0x7f0000000700)='syzkaller\x00', 0x3, 0xd1, &(0x7f0000000740)=""/209, 0x41000, 0x10, '\x00', 0x0, @netfilter=0x2d, r6, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r4, r4, 0x1], &(0x7f0000000900)=[{0x3, 0x1, 0x1, 0x4}, {0x2, 0x2, 0x6}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x2, 0x5, 0x3}], 0x10, 0x692, @void, @value}, 0x94) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: general protection fault in refill_obj_stock testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r4, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r5 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) syz_open_dev$vcsn(&(0x7f0000000600), 0x4, 0x218080) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: general protection fault in refill_obj_stock testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r4, &(0x7f0000000440)='./file1\x00', 0xc8) (async) r5 = socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) getsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: general protection fault in binder_thread_release testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r4, &(0x7f0000000440)='./file1\x00', 0xc8) (async) socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x2) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: general protection fault in fib6_del testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r4, &(0x7f0000000440)='./file1\x00', 0xc8) (async) socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Read in fib6_ifdown testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r4, &(0x7f0000000440)='./file1\x00', 0xc8) (async) socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: WARNING: suspicious RCU usage in fib6_del testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r4, &(0x7f0000000440)='./file1\x00', 0xc8) (async) socket(0x18, 0xa, 0x7) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Read in fib6_ifdown testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r4, &(0x7f0000000440)='./file1\x00', 0xc8) (async) socket(0x18, 0xa, 0x7) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: INFO: trying to register non-static key in ip6_ins_rt testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) mkdirat(r4, &(0x7f0000000440)='./file1\x00', 0xc8) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: WARNING: suspicious RCU usage in __fib6_update_sernum_upto_root testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/68, 0x44) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: global-out-of-bounds Read in fib6_ifdown testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: WARNING: suspicious RCU usage in fib6_del testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) write$P9_RLERRORu(r3, &(0x7f0000000300)={0xd, 0x7, 0x2, {{}, 0x7}}, 0xd) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: WARNING: suspicious RCU usage in fib6_del testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) pipe2$9p(&(0x7f00000002c0), 0x40) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Read in fib6_ifdown testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x141000, &(0x7f0000000240)={[{@uuid_on}], [{@context={'context', 0x3d, 'user_u'}}]}) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x10) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x2000) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: global-out-of-bounds Read in fib6_ifup testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080), 0x80) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x404000) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 8, 23] detailed listing: executing program 0: pipe2$9p(&(0x7f0000000080), 0x80) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 8, 23] detailed listing: executing program 0: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode minimized 30 calls -> 0 calls minimizing program #1 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 23] detailed listing: executing program 0: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 23] detailed listing: executing program 0: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: general protection fault in binder_deferred_func testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 23] detailed listing: executing program 0: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 5, 23] detailed listing: executing program 0: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 4, 23] detailed listing: executing program 0: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 3, 23] detailed listing: executing program 0: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 3, 23] detailed listing: executing program 0: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 23] detailed listing: executing program 0: executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @remote, @netrom, @null, @netrom]}, &(0x7f0000000080)=0x48) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode minimized 8 calls -> 2 calls minimizing program #2 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 22] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) program crashed: KASAN: slab-use-after-free Write in binder_add_device testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 21] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00'}) program crashed: WARNING: locking bug in binder_deferred_func testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 20] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ptrace$getregset(0x15, r4, 0x2, 0x0) (async) program crashed: KASAN: slab-use-after-free Read in refill_obj_stock testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 19] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 18] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 18] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 18] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r8 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 18] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 17] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 17] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) ptrace(0x10, r4) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program crashed: WARNING: suspicious RCU usage in fib6_del testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 16] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000000100)) ptrace(0x10, r4) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 16] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) ptrace(0x10, r4) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 16] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) ptrace(0x10, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 16] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: socket(0x400000000010, 0x3, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) ptrace(0x10, r3) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 16] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) ptrace(0x10, r4) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 16] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) ptrace(0x10, r4) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program crashed: KASAN: slab-use-after-free Read in fib6_ifdown testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 15] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) ptrace(0x10, r4) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 14] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) ptrace(0x10, r3) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program crashed: general protection fault in binder_deferred_func testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 13] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) ptrace(0x10, r2) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 12] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) ptrace(0x10, r2) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 11] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) ptrace(0x10, r1) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program crashed: KASAN: global-out-of-bounds Read in fib6_ifdown testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 10] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) ptrace(0x10, r1) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 10] detailed listing: executing program 0: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) ptrace(0x10, r0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program crashed: KASAN: global-out-of-bounds Read in fib6_ifdown minimized 23 calls -> 10 calls testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_SIOCGIFINDEX_80211-sendmsg$nl_route-openat$binderfs-ioctl$VIDIOC_S_AUDOUT-setsockopt$inet_sctp6_SCTP_AUTOCLOSE-syz_clone-syz_io_uring_setup-syz_io_uring_submit-ptrace-bind$alg-mmap-setsockopt$ALG_SET_KEY detailed listing: executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) ptrace(0x10, r0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) program crashed: KASAN: global-out-of-bounds Read in fib6_ifdown bisect: concatenation succeeded found reproducer with 12 syscalls minimizing guilty program testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_SIOCGIFINDEX_80211-sendmsg$nl_route-openat$binderfs-ioctl$VIDIOC_S_AUDOUT-setsockopt$inet_sctp6_SCTP_AUTOCLOSE-syz_clone-syz_io_uring_setup-syz_io_uring_submit-ptrace-bind$alg-mmap detailed listing: executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) ptrace(0x10, r0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_SIOCGIFINDEX_80211-sendmsg$nl_route-openat$binderfs-ioctl$VIDIOC_S_AUDOUT-setsockopt$inet_sctp6_SCTP_AUTOCLOSE-syz_clone-syz_io_uring_setup-syz_io_uring_submit-ptrace-bind$alg detailed listing: executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) ptrace(0x10, r0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_SIOCGIFINDEX_80211-sendmsg$nl_route-openat$binderfs-ioctl$VIDIOC_S_AUDOUT-setsockopt$inet_sctp6_SCTP_AUTOCLOSE-syz_clone-syz_io_uring_setup-syz_io_uring_submit-ptrace detailed listing: executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) ptrace(0x10, r0) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_SIOCGIFINDEX_80211-sendmsg$nl_route-openat$binderfs-ioctl$VIDIOC_S_AUDOUT-setsockopt$inet_sctp6_SCTP_AUTOCLOSE-syz_clone-syz_io_uring_setup-syz_io_uring_submit detailed listing: executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_SIOCGIFINDEX_80211-sendmsg$nl_route-openat$binderfs-ioctl$VIDIOC_S_AUDOUT-setsockopt$inet_sctp6_SCTP_AUTOCLOSE-syz_clone-syz_io_uring_setup detailed listing: executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000000100)) program crashed: KASAN: global-out-of-bounds Read in __find_rr_leaf testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_SIOCGIFINDEX_80211-sendmsg$nl_route-openat$binderfs-ioctl$VIDIOC_S_AUDOUT-setsockopt$inet_sctp6_SCTP_AUTOCLOSE-syz_clone detailed listing: executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) program crashed: WARNING in depot_fetch_stack testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_SIOCGIFINDEX_80211-sendmsg$nl_route-openat$binderfs-ioctl$VIDIOC_S_AUDOUT-setsockopt$inet_sctp6_SCTP_AUTOCLOSE detailed listing: executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_SIOCGIFINDEX_80211-sendmsg$nl_route-openat$binderfs-ioctl$VIDIOC_S_AUDOUT-syz_clone detailed listing: executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000100)={0x100, "3d2b864f35368a6487723ab8f7f876ad13eb2b283eaed0f662ff51c5059bbbb6", 0x0, 0x1}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) program crashed: KASAN: slab-use-after-free Read in fib6_ifdown testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_SIOCGIFINDEX_80211-sendmsg$nl_route-openat$binderfs-syz_clone detailed listing: executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_SIOCGIFINDEX_80211-sendmsg$nl_route-syz_clone detailed listing: executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_SIOCGIFINDEX_80211-openat$binderfs-syz_clone detailed listing: executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) program crashed: KASAN: slab-use-after-free Write in binderfs_evict_inode testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-syz_clone detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) program crashed: KASAN: global-out-of-bounds Read in fib6_ifup testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-syz_clone detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: KASAN: slab-use-after-free Read in fib6_ifdown testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-syz_clone detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-syz_clone program did not crash simplifying guilty program options testing program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-syz_clone detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: general protection fault in in_dev_finish_destroy a never seen crash title: general protection fault in in_dev_finish_destroy, ignore testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-syz_clone detailed listing: executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: KASAN: slab-use-after-free Write in binder_add_device extracting C reproducer testing compiled C program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-syz_clone program did not crash reproducing took 3h39m55.935935266s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in hlist_add_head include/linux/list.h:1026 [inline] BUG: KASAN: slab-use-after-free in binder_add_device+0xa4/0xb0 drivers/android/binder.c:6932 Write of size 8 at addr ffff88802864c808 by task syz-executor/7870 CPU: 0 UID: 0 PID: 7870 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:408 [inline] print_report+0xc3/0x670 mm/kasan/report.c:521 kasan_report+0xe0/0x110 mm/kasan/report.c:634 hlist_add_head include/linux/list.h:1026 [inline] binder_add_device+0xa4/0xb0 drivers/android/binder.c:6932 binderfs_binder_device_create.isra.0+0x95f/0xb70 drivers/android/binderfs.c:210 binderfs_fill_super+0x8d4/0x1360 drivers/android/binderfs.c:730 vfs_get_super fs/super.c:1280 [inline] get_tree_nodev+0xda/0x190 fs/super.c:1299 vfs_get_tree+0x8b/0x340 fs/super.c:1759 do_new_mount fs/namespace.c:3884 [inline] path_mount+0x14d4/0x1f20 fs/namespace.c:4211 do_mount fs/namespace.c:4224 [inline] __do_sys_mount fs/namespace.c:4435 [inline] __se_sys_mount fs/namespace.c:4412 [inline] __x64_sys_mount+0x28d/0x310 fs/namespace.c:4412 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f98aff9010a Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffdad9145e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f98b0010e74 RCX: 00007f98aff9010a RDX: 00007f98b00208cb RSI: 00007f98b0010e74 RDI: 00007f98b00208cb RBP: 00007f98b00110bd R08: 0000000000000000 R09: 00007ffdad914690 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98affec1a8 R13: 00007f98affec180 R14: 0000000000000009 R15: 0000000000000000 Allocated by task 6027: kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394 kmalloc_noprof include/linux/slab.h:905 [inline] kzalloc_noprof include/linux/slab.h:1039 [inline] binderfs_binder_device_create.isra.0+0x17a/0xb70 drivers/android/binderfs.c:147 binderfs_fill_super+0x8d4/0x1360 drivers/android/binderfs.c:730 vfs_get_super fs/super.c:1280 [inline] get_tree_nodev+0xda/0x190 fs/super.c:1299 vfs_get_tree+0x8b/0x340 fs/super.c:1759 do_new_mount fs/namespace.c:3884 [inline] path_mount+0x14d4/0x1f20 fs/namespace.c:4211 do_mount fs/namespace.c:4224 [inline] __do_sys_mount fs/namespace.c:4435 [inline] __se_sys_mount fs/namespace.c:4412 [inline] __x64_sys_mount+0x28d/0x310 fs/namespace.c:4412 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 58: kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576 poison_slab_object mm/kasan/common.c:247 [inline] __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264 kasan_slab_free include/linux/kasan.h:233 [inline] slab_free_hook mm/slub.c:2380 [inline] slab_free mm/slub.c:4642 [inline] kfree+0x2b6/0x4d0 mm/slub.c:4841 binder_free_proc drivers/android/binder.c:5248 [inline] binder_proc_dec_tmpref drivers/android/binder.c:1565 [inline] binder_proc_dec_tmpref+0x4c3/0x590 drivers/android/binder.c:1558 binder_deferred_release drivers/android/binder.c:6292 [inline] binder_deferred_func+0xe87/0x12c0 drivers/android/binder.c:6319 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 The buggy address belongs to the object at ffff88802864c800 which belongs to the cache kmalloc-512 of size 512 The buggy address is located 8 bytes inside of freed 512-byte region [ffff88802864c800, ffff88802864ca00) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2864c head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000040 ffff88801b442c80 ffffea000098f000 dead000000000003 raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 head: 00fff00000000040 ffff88801b442c80 ffffea000098f000 dead000000000003 head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 head: 00fff00000000002 ffffea0000a19301 00000000ffffffff 00000000ffffffff head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6027, tgid 6027 (syz-executor), ts 79917169175, free_ts 79885346014 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1718 prep_new_page mm/page_alloc.c:1726 [inline] get_page_from_freelist+0x135c/0x3920 mm/page_alloc.c:3688 __alloc_frozen_pages_noprof+0x263/0x23a0 mm/page_alloc.c:4970 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2301 alloc_slab_page mm/slub.c:2450 [inline] allocate_slab mm/slub.c:2618 [inline] new_slab+0x244/0x340 mm/slub.c:2672 ___slab_alloc+0xd9c/0x1940 mm/slub.c:3858 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3948 __slab_alloc_node mm/slub.c:4023 [inline] slab_alloc_node mm/slub.c:4184 [inline] __kmalloc_cache_noprof+0xfb/0x3e0 mm/slub.c:4353 kmalloc_noprof include/linux/slab.h:905 [inline] kzalloc_noprof include/linux/slab.h:1039 [inline] shmem_fill_super+0xd1/0x1320 mm/shmem.c:4996 vfs_get_super fs/super.c:1280 [inline] get_tree_nodev+0xda/0x190 fs/super.c:1299 vfs_get_tree+0x8b/0x340 fs/super.c:1759 do_new_mount fs/namespace.c:3884 [inline] path_mount+0x14d4/0x1f20 fs/namespace.c:4211 do_mount fs/namespace.c:4224 [inline] __do_sys_mount fs/namespace.c:4435 [inline] __se_sys_mount fs/namespace.c:4412 [inline] __x64_sys_mount+0x28d/0x310 fs/namespace.c:4412 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f page last free pid 6027 tgid 6027 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1262 [inline] __free_frozen_pages+0x69d/0xff0 mm/page_alloc.c:2725 stack_depot_save_flags+0x354/0xa50 lib/stackdepot.c:678 kasan_save_stack+0x42/0x60 mm/kasan/common.c:48 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 unpoison_slab_object mm/kasan/common.c:319 [inline] __kasan_slab_alloc+0x89/0x90 mm/kasan/common.c:345 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4147 [inline] slab_alloc_node mm/slub.c:4196 [inline] kmem_cache_alloc_noprof+0x1cb/0x3b0 mm/slub.c:4203 skb_clone+0x190/0x3f0 net/core/skbuff.c:2056 __netlink_deliver_tap_skb net/netlink/af_netlink.c:300 [inline] __netlink_deliver_tap net/netlink/af_netlink.c:325 [inline] netlink_deliver_tap+0xabd/0xd30 net/netlink/af_netlink.c:338 __netlink_sendskb net/netlink/af_netlink.c:1256 [inline] netlink_sendskb net/netlink/af_netlink.c:1265 [inline] netlink_unicast+0x6b2/0x7f0 net/netlink/af_netlink.c:1354 nlmsg_unicast include/net/netlink.h:1162 [inline] rtnl_unicast net/core/rtnetlink.c:949 [inline] rtnl_getlink+0x8db/0xb10 net/core/rtnetlink.c:4192 rtnetlink_rcv_msg+0x3c6/0xe90 net/core/rtnetlink.c:6964 netlink_rcv_skb+0x16a/0x440 net/netlink/af_netlink.c:2534 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] netlink_unicast+0x53a/0x7f0 net/netlink/af_netlink.c:1339 netlink_sendmsg+0x8d1/0xdd0 net/netlink/af_netlink.c:1883 sock_sendmsg_nosec net/socket.c:712 [inline] __sock_sendmsg net/socket.c:727 [inline] __sys_sendto+0x495/0x510 net/socket.c:2180 __do_sys_sendto net/socket.c:2187 [inline] __se_sys_sendto net/socket.c:2183 [inline] __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2183 Memory state around the buggy address: ffff88802864c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff88802864c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc >ffff88802864c800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff88802864c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff88802864c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in hlist_add_head include/linux/list.h:1026 [inline] BUG: KASAN: slab-use-after-free in binder_add_device+0xa4/0xb0 drivers/android/binder.c:6932 Write of size 8 at addr ffff88802864c808 by task syz-executor/7870 CPU: 0 UID: 0 PID: 7870 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:408 [inline] print_report+0xc3/0x670 mm/kasan/report.c:521 kasan_report+0xe0/0x110 mm/kasan/report.c:634 hlist_add_head include/linux/list.h:1026 [inline] binder_add_device+0xa4/0xb0 drivers/android/binder.c:6932 binderfs_binder_device_create.isra.0+0x95f/0xb70 drivers/android/binderfs.c:210 binderfs_fill_super+0x8d4/0x1360 drivers/android/binderfs.c:730 vfs_get_super fs/super.c:1280 [inline] get_tree_nodev+0xda/0x190 fs/super.c:1299 vfs_get_tree+0x8b/0x340 fs/super.c:1759 do_new_mount fs/namespace.c:3884 [inline] path_mount+0x14d4/0x1f20 fs/namespace.c:4211 do_mount fs/namespace.c:4224 [inline] __do_sys_mount fs/namespace.c:4435 [inline] __se_sys_mount fs/namespace.c:4412 [inline] __x64_sys_mount+0x28d/0x310 fs/namespace.c:4412 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f98aff9010a Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffdad9145e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f98b0010e74 RCX: 00007f98aff9010a RDX: 00007f98b00208cb RSI: 00007f98b0010e74 RDI: 00007f98b00208cb RBP: 00007f98b00110bd R08: 0000000000000000 R09: 00007ffdad914690 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98affec1a8 R13: 00007f98affec180 R14: 0000000000000009 R15: 0000000000000000 Allocated by task 6027: kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394 kmalloc_noprof include/linux/slab.h:905 [inline] kzalloc_noprof include/linux/slab.h:1039 [inline] binderfs_binder_device_create.isra.0+0x17a/0xb70 drivers/android/binderfs.c:147 binderfs_fill_super+0x8d4/0x1360 drivers/android/binderfs.c:730 vfs_get_super fs/super.c:1280 [inline] get_tree_nodev+0xda/0x190 fs/super.c:1299 vfs_get_tree+0x8b/0x340 fs/super.c:1759 do_new_mount fs/namespace.c:3884 [inline] path_mount+0x14d4/0x1f20 fs/namespace.c:4211 do_mount fs/namespace.c:4224 [inline] __do_sys_mount fs/namespace.c:4435 [inline] __se_sys_mount fs/namespace.c:4412 [inline] __x64_sys_mount+0x28d/0x310 fs/namespace.c:4412 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 58: kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576 poison_slab_object mm/kasan/common.c:247 [inline] __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264 kasan_slab_free include/linux/kasan.h:233 [inline] slab_free_hook mm/slub.c:2380 [inline] slab_free mm/slub.c:4642 [inline] kfree+0x2b6/0x4d0 mm/slub.c:4841 binder_free_proc drivers/android/binder.c:5248 [inline] binder_proc_dec_tmpref drivers/android/binder.c:1565 [inline] binder_proc_dec_tmpref+0x4c3/0x590 drivers/android/binder.c:1558 binder_deferred_release drivers/android/binder.c:6292 [inline] binder_deferred_func+0xe87/0x12c0 drivers/android/binder.c:6319 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 The buggy address belongs to the object at ffff88802864c800 which belongs to the cache kmalloc-512 of size 512 The buggy address is located 8 bytes inside of freed 512-byte region [ffff88802864c800, ffff88802864ca00) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2864c head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000040 ffff88801b442c80 ffffea000098f000 dead000000000003 raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 head: 00fff00000000040 ffff88801b442c80 ffffea000098f000 dead000000000003 head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 head: 00fff00000000002 ffffea0000a19301 00000000ffffffff 00000000ffffffff head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6027, tgid 6027 (syz-executor), ts 79917169175, free_ts 79885346014 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1718 prep_new_page mm/page_alloc.c:1726 [inline] get_page_from_freelist+0x135c/0x3920 mm/page_alloc.c:3688 __alloc_frozen_pages_noprof+0x263/0x23a0 mm/page_alloc.c:4970 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2301 alloc_slab_page mm/slub.c:2450 [inline] allocate_slab mm/slub.c:2618 [inline] new_slab+0x244/0x340 mm/slub.c:2672 ___slab_alloc+0xd9c/0x1940 mm/slub.c:3858 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3948 __slab_alloc_node mm/slub.c:4023 [inline] slab_alloc_node mm/slub.c:4184 [inline] __kmalloc_cache_noprof+0xfb/0x3e0 mm/slub.c:4353 kmalloc_noprof include/linux/slab.h:905 [inline] kzalloc_noprof include/linux/slab.h:1039 [inline] shmem_fill_super+0xd1/0x1320 mm/shmem.c:4996 vfs_get_super fs/super.c:1280 [inline] get_tree_nodev+0xda/0x190 fs/super.c:1299 vfs_get_tree+0x8b/0x340 fs/super.c:1759 do_new_mount fs/namespace.c:3884 [inline] path_mount+0x14d4/0x1f20 fs/namespace.c:4211 do_mount fs/namespace.c:4224 [inline] __do_sys_mount fs/namespace.c:4435 [inline] __se_sys_mount fs/namespace.c:4412 [inline] __x64_sys_mount+0x28d/0x310 fs/namespace.c:4412 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f page last free pid 6027 tgid 6027 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1262 [inline] __free_frozen_pages+0x69d/0xff0 mm/page_alloc.c:2725 stack_depot_save_flags+0x354/0xa50 lib/stackdepot.c:678 kasan_save_stack+0x42/0x60 mm/kasan/common.c:48 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 unpoison_slab_object mm/kasan/common.c:319 [inline] __kasan_slab_alloc+0x89/0x90 mm/kasan/common.c:345 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4147 [inline] slab_alloc_node mm/slub.c:4196 [inline] kmem_cache_alloc_noprof+0x1cb/0x3b0 mm/slub.c:4203 skb_clone+0x190/0x3f0 net/core/skbuff.c:2056 __netlink_deliver_tap_skb net/netlink/af_netlink.c:300 [inline] __netlink_deliver_tap net/netlink/af_netlink.c:325 [inline] netlink_deliver_tap+0xabd/0xd30 net/netlink/af_netlink.c:338 __netlink_sendskb net/netlink/af_netlink.c:1256 [inline] netlink_sendskb net/netlink/af_netlink.c:1265 [inline] netlink_unicast+0x6b2/0x7f0 net/netlink/af_netlink.c:1354 nlmsg_unicast include/net/netlink.h:1162 [inline] rtnl_unicast net/core/rtnetlink.c:949 [inline] rtnl_getlink+0x8db/0xb10 net/core/rtnetlink.c:4192 rtnetlink_rcv_msg+0x3c6/0xe90 net/core/rtnetlink.c:6964 netlink_rcv_skb+0x16a/0x440 net/netlink/af_netlink.c:2534 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] netlink_unicast+0x53a/0x7f0 net/netlink/af_netlink.c:1339 netlink_sendmsg+0x8d1/0xdd0 net/netlink/af_netlink.c:1883 sock_sendmsg_nosec net/socket.c:712 [inline] __sock_sendmsg net/socket.c:727 [inline] __sys_sendto+0x495/0x510 net/socket.c:2180 __do_sys_sendto net/socket.c:2187 [inline] __se_sys_sendto net/socket.c:2183 [inline] __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2183 Memory state around the buggy address: ffff88802864c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff88802864c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc >ffff88802864c800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff88802864c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff88802864c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ==================================================================