Extracting prog: 6h6m8.613226454s Minimizing prog: 1h11m9.640010838s Simplifying prog options: 0s Extracting C: 1m38.842678927s Simplifying C: 28m28.036730427s extracting reproducer from 66 programs testing a last program of every proc single: executing 16 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$netlink-socket$inet-socket$nl_generic-socket$nl_netfilter-openat$vhost_vsock-eventfd2-socket$key-socket$nl_xfrm-socket$nl_netfilter-socketpair$unix-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-socket$inet6_tcp-dup-syz_ublk_setup_queues-sendmsg$inet-openat$kvm-socket$nl_netfilter-socket$nl_generic-socketpair$unix-sendmsg$inet-socket$nl_route-recvmsg$unix-socketpair$unix-socket$inet6_tcp-dup-syz_ublk_add_dev-syz_ublk_setup_queues detailed listing: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0x1, 0x1) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x90}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x40, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r3, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xbb6, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x12d}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r11, r12, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x0, 0x7e}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x80000, 0x1000002, 0x3e8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0xcc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10000, 0x0, 0x2b9, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x8020, 0xc, 0x271}}], 0x1, 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPSET_CMD_TYPE-mkdirat-mkdirat-mount-openat-write-mount-mount$overlay-openat-getdents64-lseek-socket$nl_netfilter-setsockopt$netlink_NETLINK_DROP_MEMBERSHIP-ioctl$KVM_SET_USER_MEMORY_REGION detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='tdp 2', 0x5) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x4000, 0x80) getdents64(r2, &(0x7f00000010c0)=""/4096, 0x1000) lseek(r2, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000001080)=0x5, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x10201, 0x5, 0xffc, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_smc-setsockopt$inet_tcp_TCP_MD5SIG-openat$kvm-capset-mkdirat-mount-openat-write-shutdown-mkdirat-mount-openat-syz_usb_connect$hid-write-ioctl$KVM_CREATE_VM-finit_module-write-ioctl$KVM_IOEVENTFD-openat$userfaultfd-madvise-madvise-write$binfmt_format-syz_open_procfs-fchdir-write$P9_RREADDIR-fsconfig$FSCONFIG_SET_STRING-setns-socket-connect detailed listing: executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r2, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040ac05300200000000000109022400010000e80a0904000001030002"], 0x0) write(r3, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27) finit_module(r3, &(0x7f0000000500)='smaps_rollup\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='27', 0x2) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000440)={0x4, 0xdddd0000, 0x4, 0xffffffffffffffff, 0x8}) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) write$binfmt_format(r3, &(0x7f0000000380)='-1\x00', 0x3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='smaps_rollup\x00') fchdir(r4) write$P9_RREADDIR(r4, &(0x7f0000000540)={0x137, 0x29, 0x2, {0x5, [{{0x80, 0x3, 0x4}, 0x8, 0x0, 0x30, './proc/net/rpc/auth.rpcsec.context/channel/file0'}, {{0x20, 0x0, 0x8}, 0x6, 0x88, 0x6, './proc'}, {{0x4, 0x0, 0x3}, 0x3, 0x3, 0x30, './proc/net/rpc/auth.rpcsec.context/channel/file0'}, {{0x2, 0x0, 0x1}, 0x1, 0x5c, 0x2a, './proc/net/rpc/auth.rpcsec.context/channel'}, {{0x1, 0x0, 0x6}, 0x6, 0x4, 0x6, './proc'}, {{0x10, 0x1, 0x1}, 0x9, 0x9, 0x6, './proc'}]}}, 0x137) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='/dev/kvm\x00', &(0x7f0000000100)='\x00', 0x0) setns(0xc9, 0x0) r5 = socket(0x2a, 0x2, 0x9) connect(r5, &(0x7f0000000780)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-write-close-mkdirat-mount-openat-write-openat-mmap-openat-write-socket-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$evdev-ioctl$EVIOCGKEYCODE-socket$inet_mptcp-setsockopt$inet_tcp_int-socket-setsockopt$bt_l2cap_L2CAP_LM-ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS detailed listing: executing program 0: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1ff) write(r0, &(0x7f0000000300)="662e0f1f840000000000c3b80f0000000f05", 0x12) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000400000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/events/uprobes/p1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x2) r4 = socket(0x2b, 0x80801, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f00000001c0)=""/241) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000580)=0xe2, 0x4) socket(0x10, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x17, &(0x7f0000000040)=0x46, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000000540)) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-close-socket$alg-bind$alg-munmap-mkdirat-mount-openat-read$FUSE-setsockopt$ALG_SET_KEY-ioctl$DVB_DEMUX_DMX_EXPBUF-getsockopt$WPAN_SECURITY_LEVEL-socket$inet6-setsockopt$inet6_group_source_req-setsockopt$inet6_group_source_req-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-setresuid-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-close-mmap-close_range-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_WOL_GET-accept4$tipc-ioctl$NILFS_IOCTL_GET_SUINFO-sendmsg$ETHTOOL_MSG_PAUSE_GET-accept4 detailed listing: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./proc_mnt\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000a80)={0x2020}, 0x2020) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x101, 0x80000, r0}) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000680)={0x1, {{0xa, 0x4e20, 0x9, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000007c0)={0x0, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x4e11, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000940)=[{0x6, 0x3, 0x8, 0x7fff0000}]}) setresuid(0xee01, 0xee01, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r6, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x24000840) close(0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r7) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000ffffffff1b0000002000018008000400", @ANYRES32, @ANYBLOB="140002007465616d30"], 0x34}}, 0x0) r9 = accept4$tipc(r3, &(0x7f0000000540)=@id, &(0x7f0000000580)=0x10, 0x800) ioctl$NILFS_IOCTL_GET_SUINFO(r9, 0x80186e84, &(0x7f0000000640)={&(0x7f0000000600)=[{0xb6f, 0x0, 0x2}, {0x3, 0x7}], 0x2, 0x10, 0x3, 0xffffffff}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, r8, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4015) accept4(r0, 0x0, 0x0, 0x800) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-close-socket$alg-bind$alg-munmap-mkdirat-mount-openat-read$FUSE-setsockopt$ALG_SET_KEY-ioctl$DVB_DEMUX_DMX_EXPBUF-getsockopt$WPAN_SECURITY_LEVEL-socket$inet6-setsockopt$inet6_group_source_req-setsockopt$inet6_group_source_req-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-setresuid-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-close-mmap-close_range-socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_WOL_GET-accept4$tipc-ioctl$NILFS_IOCTL_GET_SUINFO-sendmsg$ETHTOOL_MSG_PAUSE_GET-accept4 detailed listing: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./proc_mnt\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000a80)={0x2020}, 0x2020) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x101, 0x80000, r0}) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000680)={0x1, {{0xa, 0x4e20, 0x9, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000007c0)={0x0, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x4e11, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000940)=[{0x6, 0x3, 0x8, 0x7fff0000}]}) setresuid(0xee01, 0xee01, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r6, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x24000840) close(0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r7) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000ffffffff1b0000002000018008000400", @ANYRES32, @ANYBLOB="140002007465616d30"], 0x34}}, 0x0) r9 = accept4$tipc(r3, &(0x7f0000000540)=@id, &(0x7f0000000580)=0x10, 0x800) ioctl$NILFS_IOCTL_GET_SUINFO(r9, 0x80186e84, &(0x7f0000000640)={&(0x7f0000000600)=[{0xb6f, 0x0, 0x2}, {0x3, 0x7}], 0x2, 0x10, 0x3, 0xffffffff}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, r8, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4015) accept4(r0, 0x0, 0x0, 0x800) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/set_event\x00', 0x3, 0x135) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/set_event\x00', 0x3, 0x135) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$inet6-setsockopt$inet6_tcp_TCP_FASTOPEN_KEY-close_range-ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD-openat-write-ioctl$KVM_CAP_HYPERV_SYNIC2 detailed listing: executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="0200", 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './sys_sec/tomoyo/domain_policy\x00'}) r1 = openat(r0, &(0x7f0000000080)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='select \n', 0x10) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000100)) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$inet6-setsockopt$inet6_tcp_TCP_FASTOPEN_KEY-close_range-ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD-openat-write-ioctl$KVM_CAP_HYPERV_SYNIC2 detailed listing: executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="0200", 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './sys_sec/tomoyo/domain_policy\x00'}) r1 = openat(r0, &(0x7f0000000080)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='select \n', 0x10) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000100)) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RELOAD-socket$nl_generic-socket$inet-syz_open_procfs-read$eventfd-socket$nl_generic-socket-socket$nl_netfilter-socket$nl_xfrm-socket$nl_netfilter-mmap$IORING_OFF_SQ_RING-socketpair$unix-socket$l2tp6-setsockopt$inet6_opts-sendmsg$inet-socketpair$unix-sendmsg$inet-openat$pidfd-recvmsg$unix-socketpair$unix-syz_ublk_add_dev-socket$inet6_tcp-dup-syz_ublk_setup_queues-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-iopl detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4c000}, 0x30) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000840)='net/psched\x00') read$eventfd(r2, &(0x7f0000000880), 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x128}, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x10003, 0x0) recvmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000500)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f0000000540)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x3, 0x1e6, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x37b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e8, 0x2000, 0x4003bfff, 0x234, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e85, 0x10, 0x1, 0x26d}, 0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0, 0x0) r11 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100020009020200000000000000040005030300010009210000090122180009058103100000158700"/54], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYRES8=r10], 0x0}, 0x0) iopl(0x40) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RELOAD-socket$nl_generic-socket$inet-syz_open_procfs-read$eventfd-socket$nl_generic-socket-socket$nl_netfilter-socket$nl_xfrm-socket$nl_netfilter-mmap$IORING_OFF_SQ_RING-socketpair$unix-socket$l2tp6-setsockopt$inet6_opts-sendmsg$inet-socketpair$unix-sendmsg$inet-openat$pidfd-recvmsg$unix-socketpair$unix-syz_ublk_add_dev-socket$inet6_tcp-dup-syz_ublk_setup_queues-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-iopl detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4c000}, 0x30) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000840)='net/psched\x00') read$eventfd(r2, &(0x7f0000000880), 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x128}, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x10003, 0x0) recvmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000500)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f0000000540)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x3, 0x1e6, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x37b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e8, 0x2000, 0x4003bfff, 0x234, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e85, 0x10, 0x1, 0x26d}, 0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0, 0x0) r11 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100020009020200000000000000040005030300010009210000090122180009058103100000158700"/54], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYRES8=r10], 0x0}, 0x0) iopl(0x40) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): dup-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$VIDIOC_OVERLAY-ioctl$VIDIOC_QUERY_EXT_CTRL-socket$inet_udp-mkdirat-mkdirat-mkdirat-mkdirat-mkdirat-mount-openat-getdents64-connect$inet-socket$netlink-writev-capset-socketpair$unix-socket-listen-socket$netlink-setsockopt$sock_int-pread64-socket-sendmsg$inet-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_generic detailed listing: executing program 0: r0 = dup(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000008c0)={0x2c, &(0x7f0000000900)={0x40, 0x31, 0x18, {0x18, 0xf, "c8878a5c44b4f4b679e55d4c1cb09a5c76fee3f94edc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000040)=0x14) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000080)={0x80000000, 0x274, "fff36ab55c12f199d3991e3d9d905d0cea2d3fd26f7e47dfc8f7a2a23a95ab69", 0x1, 0x8, 0xfffffffffffffad0, 0x9, 0x8, 0x9, 0xd3e, 0x7, [0x7, 0x80003, 0x6685974d]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)='overlay\x00', 0x0, &(0x7f00000004c0)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000580)=""/192, 0xc0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)) r5 = socket(0xa, 0x5, 0x0) listen(r5, 0x267) socket$netlink(0x10, 0x3, 0x13) setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f00000002c0)=0x1, 0x4) pread64(0xffffffffffffffff, &(0x7f0000019080)=""/102358, 0x18fd6, 0xc2a) r6 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb", 0x57}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000780)={0x80000001, 0x0, 0x0, 0x100}, 0x10) sendmsg$nl_generic(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000001a000100000000000000000080"], 0x84}}, 0x20048010) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): dup-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$VIDIOC_OVERLAY-ioctl$VIDIOC_QUERY_EXT_CTRL-socket$inet_udp-mkdirat-mkdirat-mkdirat-mkdirat-mkdirat-mount-openat-getdents64-connect$inet-socket$netlink-writev-capset-socketpair$unix-socket-listen-socket$netlink-setsockopt$sock_int-pread64-socket-sendmsg$inet-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_generic detailed listing: executing program 0: r0 = dup(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000008c0)={0x2c, &(0x7f0000000900)={0x40, 0x31, 0x18, {0x18, 0xf, "c8878a5c44b4f4b679e55d4c1cb09a5c76fee3f94edc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000040)=0x14) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000080)={0x80000000, 0x274, "fff36ab55c12f199d3991e3d9d905d0cea2d3fd26f7e47dfc8f7a2a23a95ab69", 0x1, 0x8, 0xfffffffffffffad0, 0x9, 0x8, 0x9, 0xd3e, 0x7, [0x7, 0x80003, 0x6685974d]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)='overlay\x00', 0x0, &(0x7f00000004c0)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000580)=""/192, 0xc0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)) r5 = socket(0xa, 0x5, 0x0) listen(r5, 0x267) socket$netlink(0x10, 0x3, 0x13) setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f00000002c0)=0x1, 0x4) pread64(0xffffffffffffffff, &(0x7f0000019080)=""/102358, 0x18fd6, 0xc2a) r6 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb", 0x57}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000780)={0x80000001, 0x0, 0x0, 0x100}, 0x10) sendmsg$nl_generic(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000001a000100000000000000000080"], 0x84}}, 0x20048010) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-prlimit64-ioprio_set$uid-sched_setscheduler-syz_open_procfs-read$FUSE-openat$tun-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_SREGS-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_RESOLVE_IP-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND-syz_kvm_add_vcpu$x86-ioctl$KVM_RUN-ioctl$KVM_RUN-syz_init_net_socket$bt_l2cap-syz_ublk_setup_io_uring-syz_io_uring_submit-syz_ublk_add_dev-socket-connect$unix-getsockopt$bt_BT_FLUSHABLE-ioctl$SIOCSIFHWADDR detailed listing: executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x1) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps\x00') read$FUSE(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010002, 0x20000, 0x80ffffff}]}) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0x70000, 0x0, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x4, 0x1, 0x3, 0x1d}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0xf, 0x5, 0xff, 0xc3, 0x6, 0x3, 0x6, 0x1, 0x3}, {0x3000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x8, 0xb5, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000001, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000840)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000880)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000980)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000009c0)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000480)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r10 = syz_ublk_setup_io_uring(0x1f, &(0x7f0000000500)={0x0, 0xf8c8, 0x80, 0x2, 0x35}, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000640)=@IORING_OP_RECVMSG={0xa, 0x34, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x121, 0x0, {0x1}}) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f00000006c0)={0x2e, 0x41, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x1, 0xee5, 0x0, 0x0, 0x1000, 0x6489, 0x0, 0x0, 0x114560f04ac8842e}}}, &(0x7f0000000780)) (async) r14 = socket(0x15, 0x5, 0x0) connect$unix(r14, &(0x7f0000000100)=@abs={0xa}, 0x6e) getsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f0000000080)=0xfffffffb, &(0x7f00000000c0)=0x4) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'ip6gretap0\x00', @random="00002400fd5f"}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-prlimit64-ioprio_set$uid-sched_setscheduler-syz_open_procfs-read$FUSE-openat$tun-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_SREGS-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_RESOLVE_IP-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND-syz_kvm_add_vcpu$x86-ioctl$KVM_RUN-ioctl$KVM_RUN-syz_init_net_socket$bt_l2cap-syz_ublk_setup_io_uring-syz_io_uring_submit-syz_ublk_add_dev-socket-connect$unix-getsockopt$bt_BT_FLUSHABLE-ioctl$SIOCSIFHWADDR detailed listing: executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x1) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps\x00') read$FUSE(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010002, 0x20000, 0x80ffffff}]}) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0x70000, 0x0, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x4, 0x1, 0x3, 0x1d}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0xf, 0x5, 0xff, 0xc3, 0x6, 0x3, 0x6, 0x1, 0x3}, {0x3000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x8, 0xb5, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000001, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000840)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000880)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000980)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000009c0)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000480)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r10 = syz_ublk_setup_io_uring(0x1f, &(0x7f0000000500)={0x0, 0xf8c8, 0x80, 0x2, 0x35}, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000640)=@IORING_OP_RECVMSG={0xa, 0x34, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x121, 0x0, {0x1}}) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f00000006c0)={0x2e, 0x41, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x1, 0xee5, 0x0, 0x0, 0x1000, 0x6489, 0x0, 0x0, 0x114560f04ac8842e}}}, &(0x7f0000000780)) (async) r14 = socket(0x15, 0x5, 0x0) connect$unix(r14, &(0x7f0000000100)=@abs={0xa}, 0x6e) getsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f0000000080)=0xfffffffb, &(0x7f00000000c0)=0x4) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'ip6gretap0\x00', @random="00002400fd5f"}) program did not crash single: failed to extract reproducer bisect: bisecting 66 programs with base timeout 6m0s testing program (duration=6m16s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 4, 2, 6, 9, 30, 30, 6, 5, 4, 8, 13, 30, 30, 18, 9, 30, 29, 16, 30, 30, 8, 7, 29, 30, 8, 7, 7, 7, 2, 6, 5, 8, 3, 3, 8, 9, 13, 17, 8, 30, 30, 12, 14, 20, 27, 22, 17, 4, 30, 4, 13, 4, 5, 3, 14, 12, 27, 30, 5, 22, 24, 29, 3, 15, 29] detailed listing: executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x10}}, 0x0) r1 = memfd_secret(0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, &(0x7f0000000000)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100), 0x4) fchmod(r1, 0x8) executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001180), 0x1, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf000040", @ANYRES64=r0], 0x2a) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="0f79775836f2a50f01c9670f01c866daad7a0066b8750000000b6ed80f21f86635800000100f23f80f01d166ed3edf1a0f20e06635080000000f22e0", 0x3c}], 0x1, 0xb, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000080)={0x8080000, 0x4000}) (rerun: 32) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2c) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000080, 0x0, 0xffffffff00000001}]}) syz_clone3(&(0x7f00000003c0)={0x100001000, &(0x7f0000000040), 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x66) executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x1) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps\x00') read$FUSE(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010002, 0x20000, 0x80ffffff}]}) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0x70000, 0x0, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x4, 0x1, 0x3, 0x1d}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0xf, 0x5, 0xff, 0xc3, 0x6, 0x3, 0x6, 0x1, 0x3}, {0x3000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x8, 0xb5, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000001, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000840)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000880)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000980)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000009c0)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000480)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r10 = syz_ublk_setup_io_uring(0x1f, &(0x7f0000000500)={0x0, 0xf8c8, 0x80, 0x2, 0x35}, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000640)=@IORING_OP_RECVMSG={0xa, 0x34, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x121, 0x0, {0x1}}) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f00000006c0)={0x2e, 0x41, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x1, 0xee5, 0x0, 0x0, 0x1000, 0x6489, 0x0, 0x0, 0x114560f04ac8842e}}}, &(0x7f0000000780)) (async) r14 = socket(0x15, 0x5, 0x0) connect$unix(r14, &(0x7f0000000100)=@abs={0xa}, 0x6e) getsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f0000000080)=0xfffffffb, &(0x7f00000000c0)=0x4) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'ip6gretap0\x00', @random="00002400fd5f"}) executing program 32: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x1) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps\x00') read$FUSE(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010002, 0x20000, 0x80ffffff}]}) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0x70000, 0x0, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x4, 0x1, 0x3, 0x1d}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0xf, 0x5, 0xff, 0xc3, 0x6, 0x3, 0x6, 0x1, 0x3}, {0x3000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x8, 0xb5, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000001, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000840)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000880)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000980)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000009c0)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000480)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r10 = syz_ublk_setup_io_uring(0x1f, &(0x7f0000000500)={0x0, 0xf8c8, 0x80, 0x2, 0x35}, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000640)=@IORING_OP_RECVMSG={0xa, 0x34, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x121, 0x0, {0x1}}) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f00000006c0)={0x2e, 0x41, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x1, 0xee5, 0x0, 0x0, 0x1000, 0x6489, 0x0, 0x0, 0x114560f04ac8842e}}}, &(0x7f0000000780)) (async) r14 = socket(0x15, 0x5, 0x0) connect$unix(r14, &(0x7f0000000100)=@abs={0xa}, 0x6e) getsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f0000000080)=0xfffffffb, &(0x7f00000000c0)=0x4) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'ip6gretap0\x00', @random="00002400fd5f"}) executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000002600)={0x78, 0x0, r2, {0x2000000007, 0x20000, 0x0, {0x80000000000000, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x3, 0x2, 0x0, 0x40000000, 0xa000, 0xa0000000, r3, r4, 0x4, 0x0, 0x1000000}}}, 0x78) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5d00010002"], 0x8) executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='p:p1 ./file0:0x0\n', 0x11) (fail_nth: 11) executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001180), 0x1, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf000040", @ANYRES64=r0], 0xb2) (fail_nth: 96) executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000000)={@local, @loopback, @loopback}, 0xc) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1d66a5b17f699d04) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x81000) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open$dir(&(0x7f0000000240)='./file1\x00', 0x400000, 0x98) r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_SETRSUBD(r1, 0x6410) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) executing program 4: r0 = dup(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000008c0)={0x2c, &(0x7f0000000900)={0x40, 0x31, 0x18, {0x18, 0xf, "c8878a5c44b4f4b679e55d4c1cb09a5c76fee3f94edc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000040)=0x14) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000080)={0x80000000, 0x274, "fff36ab55c12f199d3991e3d9d905d0cea2d3fd26f7e47dfc8f7a2a23a95ab69", 0x1, 0x8, 0xfffffffffffffad0, 0x9, 0x8, 0x9, 0xd3e, 0x7, [0x7, 0x80003, 0x6685974d]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)='overlay\x00', 0x0, &(0x7f00000004c0)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000580)=""/192, 0xc0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)) r5 = socket(0xa, 0x5, 0x0) listen(r5, 0x267) socket$netlink(0x10, 0x3, 0x13) setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f00000002c0)=0x1, 0x4) pread64(0xffffffffffffffff, &(0x7f0000019080)=""/102358, 0x18fd6, 0xc2a) r6 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb", 0x57}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000780)={0x80000001, 0x0, 0x0, 0x100}, 0x10) sendmsg$nl_generic(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000001a000100000000000000000080"], 0x84}}, 0x20048010) executing program 33: r0 = dup(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000008c0)={0x2c, &(0x7f0000000900)={0x40, 0x31, 0x18, {0x18, 0xf, "c8878a5c44b4f4b679e55d4c1cb09a5c76fee3f94edc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000040)=0x14) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000080)={0x80000000, 0x274, "fff36ab55c12f199d3991e3d9d905d0cea2d3fd26f7e47dfc8f7a2a23a95ab69", 0x1, 0x8, 0xfffffffffffffad0, 0x9, 0x8, 0x9, 0xd3e, 0x7, [0x7, 0x80003, 0x6685974d]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)='overlay\x00', 0x0, &(0x7f00000004c0)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000580)=""/192, 0xc0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)) r5 = socket(0xa, 0x5, 0x0) listen(r5, 0x267) socket$netlink(0x10, 0x3, 0x13) setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f00000002c0)=0x1, 0x4) pread64(0xffffffffffffffff, &(0x7f0000019080)=""/102358, 0x18fd6, 0xc2a) r6 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb", 0x57}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000780)={0x80000001, 0x0, 0x0, 0x100}, 0x10) sendmsg$nl_generic(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000001a000100000000000000000080"], 0x84}}, 0x20048010) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00', @ANYBLOB="010000000000000000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, 0x0, 0x8) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newsa={0xf0, 0x11, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x4, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x8000) ioctl$KVM_RUN(r5, 0xae80, 0x0) executing program 2: r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424020009058103"], 0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/92, 0x5c}], 0x1) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) executing program 2: r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) (async) syz_io_uring_setup(0x83, &(0x7f0000000140)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) (async) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f00000000c0)) (async) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, 0x0) (async) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='syz0:127.0.0.1', 0xe) (async) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000005c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1ff) (async) mount$afs(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x11, 0xffffffffffffffff, 0x0) (async) r5 = openat(r1, &(0x7f0000000740)='./file0\x00', 0x82c1, 0x143) pwritev(r5, &(0x7f0000000400)=[{&(0x7f0000000440)='l', 0x1}], 0x1, 0x7fffffffffffffff, 0x7) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, 0x0, &(0x7f0000000940)={0x0, 0x20000, 0x0, 0x1, 0x154, 0x0, r7}, 0x0, 0x1, &(0x7f00000009c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x42, 0x0, 0x0}}, 0x0) (async) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000a40)=@multiplanar_mmap={0x80000000, 0x8, 0x4, 0x200, 0x1, {}, {0x2, 0x2, 0x3, 0x7, 0x6, 0x1, "2f4ba889"}, 0x6, 0x1, {&(0x7f00000007c0)=[{0x8, 0x1, {0x7fffffff}, 0x81}, {0x10001, 0x7fff, {0x3}, 0x9}]}, 0x1, 0x0, r7}) (async) close(r5) (async) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r8, 0x5421, &(0x7f0000000000)=0x6) (async) connect$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xa) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b000100000000090400390009"], 0x0) (async) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)='1') process_vm_readv(r9, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/264, 0x108}], 0x1, &(0x7f0000002780)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, 0x0) executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000dc0), r0) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) write$binfmt_script(r3, &(0x7f0000000080), 0xfffffd9d) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xf0) mount(&(0x7f00000003c0)=@filename='mtd0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='jffs2\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f00000004c0)='test2\x00', 0x42, 0x1ff) syz_open_dev$usbfs(&(0x7f0000000500), 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write(r5, &(0x7f0000000580)='B', 0x1000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000140)}) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000005c0)) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x5) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000180)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) ioctl$SG_SET_RESERVED_SIZE(r8, 0x2275, &(0x7f00000001c0)=0x7) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x350, 0x10000) fcntl$getown(r3, 0x9) r9 = gettid() kcmp(r9, r9, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$pokeuser(0x6, r7, 0x7f, 0xffff7fffffffff7f) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r11, 0x4d, &(0x7f0000000280)=[&(0x7f00000002c0)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r10, &(0x7f0000000300)="9880378312a63e112602d9670ab688dbd0d40a0f4d8b9cb3af17658e2e4f8be7a2f40caf8cadd95b1c97eda546798277b267dc15abe1a12eaf2f0ce524588df014e8d7e56e49bf5e852f0b98aa", 0x3e8000072a, 0x7000000, 0x0, 0x10}]) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x860}, 0x0) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffe) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000140)={0xc1, 0x0, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x5}, [@typed={0x14, 0x15e, 0x0, 0x0, @binary="6f178a01040000f8d80979b3c6698cc3"}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c085}, 0x48054) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x20541, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x10010, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}]}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffe) (async) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000140)={0xc1, 0x0, 0x3}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x5}, [@typed={0x14, 0x15e, 0x0, 0x0, @binary="6f178a01040000f8d80979b3c6698cc3"}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c085}, 0x48054) (async) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x20541, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x10010, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}]}}) (async) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4c000}, 0x30) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000840)='net/psched\x00') read$eventfd(r2, &(0x7f0000000880), 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x128}, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x10003, 0x0) recvmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000500)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f0000000540)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x3, 0x1e6, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x37b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e8, 0x2000, 0x4003bfff, 0x234, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e85, 0x10, 0x1, 0x26d}, 0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0, 0x0) r11 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100020009020200000000000000040005030300010009210000090122180009058103100000158700"/54], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYRES8=r10], 0x0}, 0x0) iopl(0x40) executing program 34: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4c000}, 0x30) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000840)='net/psched\x00') read$eventfd(r2, &(0x7f0000000880), 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x128}, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x10003, 0x0) recvmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000500)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f0000000540)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x3, 0x1e6, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x37b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e8, 0x2000, 0x4003bfff, 0x234, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e85, 0x10, 0x1, 0x26d}, 0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0, 0x0) r11 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100020009020200000000000000040005030300010009210000090122180009058103100000158700"/54], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYRES8=r10], 0x0}, 0x0) iopl(0x40) executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000031c0), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000003200)) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000003240)=0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x8914, &(0x7f0000003280)="736c300000000000000000000000000001") write(r0, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000003300)=0xc0) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0x1, 0x1) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_add_dev(r10, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x40, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r3, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xbb6, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x12d}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r12, r13, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x0, 0x7e}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x80000, 0x1000002, 0x3e8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0xcc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10000, 0x0, 0x2b9, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x8020, 0xc, 0x271}}], 0x1, 0x0, 0x0) executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f00000001c0)={0x0, 0xc8}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000002f40)={{0x0, 0x3, 0x1, 0x7, 0x3}, &(0x7f0000002ac0)=[{}, {}, {}, {}, {}, {}]}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000540)={0x6, 0xd9, 0x2}) socket$kcm(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000880)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000008c0)='\x00', 0x9801) move_mount(r5, &(0x7f0000000900)='.\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0) mount$bind(&(0x7f0000000980)='./file0/../file0\x00', &(0x7f00000009c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000a00)='\x00', 0x89901) move_mount(r6, &(0x7f0000000a40)='.\x00', 0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x204) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r3, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d20ddfc4c30c85f4447f25a48b"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040801}, 0x2000c080) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) mount(&(0x7f0000003340)=@nullb, &(0x7f0000003380)='./cgroup\x00', &(0x7f00000033c0)='ocfs2\x00', 0x200000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000000)={0x2, 0xca, "a3c94aa13983588bf0bd7d68abe90d32f30f73fbb18dfc2d090f58722a7db065a992f63130a2fafa5e995dc14408aca0bb6aeecc4b5505c253f5f27a571f188bd413134e194f430037aeb4d51506b48627e984888d27da9ee3a5a603ba75ff1d38d97bb3c9984ef0be52fa9349ee0f7cbaa50b0caa46b196e55e3492865cf5c12db3d8ff91a40c04d1790c4bddce2c7ce1f9af41fd2c31c73f13ea2ce553553d72984289f24d7ea76808153eeb9024b430f70ef471d005195d5b158bf9bf36948651db5fe4bd353cd02d"}, &(0x7f0000000100)=0xd2) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r8, 0xe}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e23, 0xfffffff9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}, 0x1, 0x80}, &(0x7f00000002c0)=0x90) r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120110012f399fd65caeff10ef9e010203010902120001060350080904280100a9ff5609"], &(0x7f00000003c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x300, 0x60, 0x3, 0xa, 0xff}, 0x1b, &(0x7f0000000440)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0xc0, 0xcf}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x8, 0xf, 0x6}]}}) write(r9, &(0x7f0000003240)='27', 0x2) executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000031c0), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000003200)) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000003240)=0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x8914, &(0x7f0000003280)="736c300000000000000000000000000001") write(r0, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000003300)=0xc0) executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="0200", 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './sys_sec/tomoyo/domain_policy\x00'}) r1 = openat(r0, &(0x7f0000000080)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='select \n', 0x10) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000100)) executing program 35: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="0200", 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './sys_sec/tomoyo/domain_policy\x00'}) r1 = openat(r0, &(0x7f0000000080)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='select \n', 0x10) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000100)) executing program 7: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='ppl', 0x3) executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@mcast2}, 0x14) executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff010}, {0x50, 0x0, 0x2}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a9", 0x3}], 0x1}}], 0x1, 0x2090) executing program 7: r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x2d45, 0x800, 0x1}, &(0x7f0000ffe000), 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x826e02) socket$inet6(0xa, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/set_event\x00', 0x3, 0x135) executing program 36: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/set_event\x00', 0x3, 0x135) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./sys\x00', 0x14400, 0x40) mkdirat(r0, &(0x7f0000000100)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x29) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x88082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'wg2\x00', 0x4000}) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) read(r2, &(0x7f0000000940)=""/256, 0x100) executing program 6: socket$inet_smc(0x2b, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)=""/228, &(0x7f0000000040)=0xe4) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000800)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) dup2(r0, r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sec\x00', &(0x7f0000000480)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sec/tomoyo/query\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000003f80)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x2e, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x6, 0x80007, 0x7f, 0x20000006, 0xc9, 0x26, 0x5f, 0x9, 0x5, 0xffef2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000000, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x5, 0x89d1, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0x400000e, 0xe7, 0x80008171, 0xffff, 0x17, 0x10, 0x74c71973, 0x2, 0x42, 0x8f, 0xfffffffc, 0x6, 0x80000000, 0x0, 0x0, 0xb, 0x6, 0x80, 0x0, 0x4, 0xa, 0xb, 0x4, 0x3, 0x40], [0x401, 0xf0000000, 0x80000131, 0x8004, 0x6, 0x6, 0xbc3, 0xc8, 0xf9, 0xe, 0x82bf, 0x6c7, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x2, 0x5, 0x2f, 0x10, 0x10000, 0xd, 0x8, 0x7, 0x4, 0x7, 0x0, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x1, 0x3, 0x14, 0x20009, 0x8, 0xf, 0x9, 0x43, 0x8000, 0x1, 0xfe000000, 0x3, 0xfffffffe, 0x2, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x8003, 0x6c0, 0xbc47, 0xfffffffa, 0x44, 0x9e9], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x100008d2, 0x3, 0xff, 0x7fff, 0x0, 0x2, 0xb, 0x4, 0x6, 0x9e6, 0x2000000, 0x80, 0x5, 0x8470, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0xc2, 0x2, 0x9, 0x20000008, 0x4, 0x6d01, 0xa, 0x1, 0x800002, 0x1fe, 0x7e, 0x7, 0x0, 0x2950bfaf, 0xd3c, 0x5ae, 0x7, 0x4000a9, 0x5, 0x9, 0xacb, 0x2000af, 0xfffffffe, 0xfffffffd, 0x7ff, 0x12b, 0x4, 0x1, 0x95, 0x0, 0x5, 0x1c, 0x1, 0x3f, 0x2004, 0x80a2ed, 0x8004, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x242c2, 0x2, 0x2, 0x0, 0x0, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x7, 0x401, 0xffff, 0x2000a620, 0x2, 0x1, 0x0, 0x2, 0x5, 0xe7, 0x8, 0x4, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0x100, 0x10000, 0xe63, 0x7e, 0x2000006, 0x2, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x1000, 0x4d, 0x8, 0x2, 0x5, 0x1f40, 0x7, 0x4041, 0x5, 0x7ff, 0x804, 0xac1, 0x6, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ppoll(&(0x7f0000004400)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="000000004fa65ca73aafe10f4aa57c10820bae0de47627b60068794f98a142e3e0f4", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="25003300d00000000802110000010802110000005050505050500040030007dc0007008500000000"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x80, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe7d8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x39}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x412d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9ec}]}, 0x80}, 0x1, 0x0, 0x0, 0xc090}, 0x1) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r4, &(0x7f00000002c0)=""/75, 0x4b, 0x0) r5 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0]) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x40, 0x19, 0x2, "b80d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, &(0x7f0000000400)={0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="00000000008b2800f154f8c732fb1a559ace604e7c15f1b63d9ab84ef3eed6d9264675ab402d40611dc0b6a842c0ed1e8cfb4c21be424e72dfa6155f4b0f1c51f9b7e078354e233682c0a7e2abf40c884891ee38e4ad27c31ac7c857f91f56eb940bf8eb1ccd89c3cf301b987e2a52a01f9e93859d"], 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./dev\x00', 0x10) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) executing program 6: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) write$cgroup_pid(r0, &(0x7f0000000140)=r1, 0x12) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) syz_usb_connect(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff400816010200010000000109023f0001010080320904000005ffffff00090581020002000000090502020002000000090583020002000000090504020002000000090585034000010000"], 0x0) (async) clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x1}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2b8c28bd7000fddbdd25050000000800020003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4820}, 0x1c010) executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./proc_mnt\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000a80)={0x2020}, 0x2020) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x101, 0x80000, r0}) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000680)={0x1, {{0xa, 0x4e20, 0x9, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000007c0)={0x0, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x4e11, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000940)=[{0x6, 0x3, 0x8, 0x7fff0000}]}) setresuid(0xee01, 0xee01, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r6, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x24000840) close(0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r7) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000ffffffff1b0000002000018008000400", @ANYRES32, @ANYBLOB="140002007465616d30"], 0x34}}, 0x0) r9 = accept4$tipc(r3, &(0x7f0000000540)=@id, &(0x7f0000000580)=0x10, 0x800) ioctl$NILFS_IOCTL_GET_SUINFO(r9, 0x80186e84, &(0x7f0000000640)={&(0x7f0000000600)=[{0xb6f, 0x0, 0x2}, {0x3, 0x7}], 0x2, 0x10, 0x3, 0xffffffff}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, r8, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4015) accept4(r0, 0x0, 0x0, 0x800) executing program 37: r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./proc_mnt\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000a80)={0x2020}, 0x2020) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x101, 0x80000, r0}) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000680)={0x1, {{0xa, 0x4e20, 0x9, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000007c0)={0x0, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x4e11, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000940)=[{0x6, 0x3, 0x8, 0x7fff0000}]}) setresuid(0xee01, 0xee01, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r6, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x24000840) close(0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r7) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000ffffffff1b0000002000018008000400", @ANYRES32, @ANYBLOB="140002007465616d30"], 0x34}}, 0x0) r9 = accept4$tipc(r3, &(0x7f0000000540)=@id, &(0x7f0000000580)=0x10, 0x800) ioctl$NILFS_IOCTL_GET_SUINFO(r9, 0x80186e84, &(0x7f0000000640)={&(0x7f0000000600)=[{0xb6f, 0x0, 0x2}, {0x3, 0x7}], 0x2, 0x10, 0x3, 0xffffffff}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, r8, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4015) accept4(r0, 0x0, 0x0, 0x800) executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r1, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r1, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040ac05300200000000000109022400010000e80a0904000001030002"], 0x0) write(r2, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) executing program 9: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000380)={&(0x7f00000003c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x4000000) setns(0xffffffffffffffff, 0x20000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="aba6", 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) ioctl$UBLK_U_CMD_GET_FEATURES(0xffffffffffffffff, 0x80207513, &(0x7f0000000300)={0x0, 0xffff, 0x8, &(0x7f00000002c0)}) sendto$inet(r1, &(0x7f0000000280)='<', 0x381, 0x805, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0xfffffff9) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000480)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x80c42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4620040000000000000000000003003e00ebffffff7c000000000000004000000000000000890200000000000000000000060038000200feff030000480600000007000000ffffffffffffffff0200000000000000060000000000000005000000000000000100010000000000020000000000000003"], 0xb0) close(r3) setsockopt$inet_tcp_int(r3, 0x6, 0x2b, &(0x7f0000000580)=0x80000001, 0x4) executing program 9: socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_add_dev(r10, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x40, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r3, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xbb6, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x12d}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r12, r13, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x0, 0x7e}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x80000, 0x1000002, 0x3e8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0xcc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10000, 0x0, 0x2b9, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x8020, 0xc, 0x271}}], 0x1, 0x0, 0x0) executing program 8: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1ff) write(r0, &(0x7f0000000300)="662e0f1f840000000000c3b80f0000000f05", 0x12) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000400000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/events/uprobes/p1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x2) r4 = socket(0x2b, 0x80801, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f00000001c0)=""/241) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000580)=0xe2, 0x4) socket(0x10, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x17, &(0x7f0000000040)=0x46, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000000540)) executing program 9: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x2, 0x68, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)={0x20, 0x7, 0x6, "a18a020ae42f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_usb_connect(0x2, 0x7c, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x64, 0xe8, 0x4b, 0x20, 0xd46, 0x78, 0xd7cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x3, 0x8, 0x4, 0x40, 0x7, "", [{{0x9, 0x4, 0xba, 0xa, 0x1, 0x39, 0x9e, 0x32, 0xa, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x13b8, 0x6, 0x9}, {0x6, 0x24, 0x1a, 0xffff, 0x4}}], [{{0x9, 0x5, 0xb, 0x3, 0x40, 0xf8, 0x3, 0x7}}]}}, {{0x9, 0x4, 0x3, 0x4, 0x1, 0x17, 0xe5, 0x9, 0x1, [], [{{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x9, 0x20, 0x80}}]}}, {{0x9, 0x4, 0x4d, 0x60, 0x0, 0x2, 0x6, 0x0, 0x3, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7280, 0x9, 0xb}}]}}]}}]}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040800}, 0x0) write$binfmt_script(r0, &(0x7f0000000140), 0x4) executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$binfmt_script(r0, &(0x7f0000000040), 0xfd45) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a48000000060a0b04000000000000020000001c00048018000180080001006c6f67000c0002800600014000e400000900011073797a300000000009000200737a7a3200000000140000001100010000000000000000000300000a0000"], 0x70}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000640)={0x0, 0x4, "000200", 0x1, 0xff}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f00000006c0)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000740)='0', 0x1) io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000002}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="180199610aabc102416d2e00000008000300", @ANYRES32=r9, @ANYBLOB="0400e2001800e3801400000008000200ff7f0000080002000900000004009300"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x8800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = dup(r10) sendmsg$inet6(r10, &(0x7f0000000800)={&(0x7f0000000840)={0xa, 0x4e22, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000008c0)="88", 0x1}], 0x1}, 0x24040057) readv(r11, &(0x7f0000000900)=[{&(0x7f0000000940)=""/4080, 0xff0}], 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) write(r12, &(0x7f0000000180)='disable=', 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000003c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00') executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x0) (fail_nth: 3) syz_usb_connect(0x5, 0x24, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0xc3, 0x23, 0xd4, 0x10, 0x830, 0x70, 0x9672, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0xa0, 0x45}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x41, 0x0}]}) executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x14, 0x0, &(0x7f0000000240)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xa6003, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) r8 = timerfd_create(0x5, 0x80000) (async) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000480)=@IORING_OP_UNLINKAT={0x24, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000500)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000580)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) getpeername(r3, &(0x7f0000000040)=@ieee802154={0x24, @short}, &(0x7f0000000300)=0x80) (async) ioctl$XFS_IOC_ERROR_CLEARALL(r8, 0x40085875) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x8, r2, 0x0, 0x3, 0xcf, &(0x7f00000000c0)="bc619471ed07d29a726a7cc04e4b19341926398fe3c38a2478dfac60561f5fc95dd08c347e46d1994accd53f4e62f072e717b9e4e88e15e05bdfe94c0ca0bc685bcca6ae59f1765ff6f610d6f35ffec6562598bb82adadddab5769d01ff16eccb9183a825392fe440059d996d4496f2c64e018370a7745b5d801f9ea4de06bd88d8041b7201b15696f0bcfdec199be49d0d8802fd98703937741e3cf9d9fc3e418148d8592520d533a1fb602f594306a64583d0aac99b22080109a1af388b67fd7e3e7534b0d198a4738c2bf06bce1", 0x4}) executing program 8: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) ftruncate(0xffffffffffffffff, 0x2000000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000340)={0xffffffffffffffff, 0x1f, 0x0, 0x1000000}) executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4082000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd8, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xca}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x16}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8c0}, 0x400c4) syz_usb_connect(0x5, 0x24, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0xc3, 0x23, 0xd4, 0x10, 0x830, 0x70, 0x9672, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0xa0, 0x45}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x41, 0x0}]}) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) executing program 8: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r1, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040ac05300200000000000109022400010000e80a0904000001030002"], 0x0) write(r2, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) executing program 9: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r1, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) executing program 9: socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_add_dev(r10, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x40, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r3, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xbb6, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x12d}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r12, r13, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x0, 0x7e}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x80000, 0x1000002, 0x3e8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0xcc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10000, 0x0, 0x2b9, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x8020, 0xc, 0x271}}], 0x1, 0x0, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r6 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendfile(r5, r4, &(0x7f0000000640)=0x9, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="312f86f9bd1df4aefa47841c6f42abd182fb8a4dffe432853b30c2ed8825990b743360ad96263a32022771b1eee386676bc6d00e5ea5a51fd5932a02ddffb859cc8d7a70fcec67549ab9e2f62294111f7ff5199152259fdb45809b2c3d845380cef819d8180e645a42910e1f60e639db74dd21a414c53500000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25020000000900010073797a31000000000900010073797a3100000000050004000200000005000400020000001400020070696d726567310000000000000000000900010073797a31000000000900030073797a3000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8085) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r7, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@hyper}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) r10 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r10, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) executing program 8: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1ff) write(r0, &(0x7f0000000300)="662e0f1f840000000000c3b80f0000000f05", 0x12) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000400000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/events/uprobes/p1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x2) r4 = socket(0x2b, 0x80801, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f00000001c0)=""/241) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000580)=0xe2, 0x4) socket(0x10, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x17, &(0x7f0000000040)=0x46, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000000540)) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002240), 0x20802, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x2) writev(r0, &(0x7f0000002280)=[{&(0x7f0000002b00)='\b', 0x1}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000002a80)) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f0000002880), &(0x7f00000028c0)=ANY=[@ANYBLOB="9400090008021100000108021100000107000080640001a87d2e13aac927"], 0x1e) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000022c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0xe8, 0x0, 0xe8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0xffffff00, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast, @multicast1}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000140)="0100ddff", 0x507b420f2d51f971) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) r4 = memfd_create(&(0x7f0000002700)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\x15\xc3\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000002900)=@assoc_value={0x0}, &(0x7f0000002940)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000002980)={r7, 0x3}, &(0x7f00000029c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000002a00)={r7, 0x7}, &(0x7f0000002a40)=0x8) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r8, 0x0, 0x0) executing program 9: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r2, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040ac05300200000000000109022400010000e80a0904000001030002"], 0x0) write(r3, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27) finit_module(r3, &(0x7f0000000500)='smaps_rollup\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='27', 0x2) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000440)={0x4, 0xdddd0000, 0x4, 0xffffffffffffffff, 0x8}) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) write$binfmt_format(r3, &(0x7f0000000380)='-1\x00', 0x3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='smaps_rollup\x00') fchdir(r4) write$P9_RREADDIR(r4, &(0x7f0000000540)={0x137, 0x29, 0x2, {0x5, [{{0x80, 0x3, 0x4}, 0x8, 0x0, 0x30, './proc/net/rpc/auth.rpcsec.context/channel/file0'}, {{0x20, 0x0, 0x8}, 0x6, 0x88, 0x6, './proc'}, {{0x4, 0x0, 0x3}, 0x3, 0x3, 0x30, './proc/net/rpc/auth.rpcsec.context/channel/file0'}, {{0x2, 0x0, 0x1}, 0x1, 0x5c, 0x2a, './proc/net/rpc/auth.rpcsec.context/channel'}, {{0x1, 0x0, 0x6}, 0x6, 0x4, 0x6, './proc'}, {{0x10, 0x1, 0x1}, 0x9, 0x9, 0x6, './proc'}]}}, 0x137) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='/dev/kvm\x00', &(0x7f0000000100)='\x00', 0x0) setns(0xc9, 0x0) r5 = socket(0x2a, 0x2, 0x9) connect(r5, &(0x7f0000000780)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='tdp 2', 0x5) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x4000, 0x80) getdents64(r2, &(0x7f00000010c0)=""/4096, 0x1000) lseek(r2, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000001080)=0x5, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x10201, 0x5, 0xffc, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0x1, 0x1) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x90}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x40, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r3, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xbb6, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x12d}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r11, r12, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x0, 0x7e}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x80000, 0x1000002, 0x3e8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0xcc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10000, 0x0, 0x2b9, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x8020, 0xc, 0x271}}], 0x1, 0x0, 0x0) program crashed: possible deadlock in lookup_slow bisect: bisecting 66 programs bisect: split chunks (needed=false): <66> bisect: split chunk #0 of len 66 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m11s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 29, 30, 8, 7, 7, 7, 2, 6, 5, 8, 3, 3, 8, 9, 13, 17, 8, 30, 30, 12, 14, 20, 27, 22, 17, 4, 30, 4, 13, 4, 5, 3, 14, 12, 27, 30, 5, 22, 24, 29, 3, 15, 29] detailed listing: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0x1, 0x1) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_add_dev(r10, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x40, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r3, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xbb6, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x12d}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r12, r13, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x0, 0x7e}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x80000, 0x1000002, 0x3e8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0xcc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10000, 0x0, 0x2b9, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x8020, 0xc, 0x271}}], 0x1, 0x0, 0x0) executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f00000001c0)={0x0, 0xc8}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000002f40)={{0x0, 0x3, 0x1, 0x7, 0x3}, &(0x7f0000002ac0)=[{}, {}, {}, {}, {}, {}]}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000540)={0x6, 0xd9, 0x2}) socket$kcm(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000880)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000008c0)='\x00', 0x9801) move_mount(r5, &(0x7f0000000900)='.\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0) mount$bind(&(0x7f0000000980)='./file0/../file0\x00', &(0x7f00000009c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000a00)='\x00', 0x89901) move_mount(r6, &(0x7f0000000a40)='.\x00', 0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x204) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r3, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d20ddfc4c30c85f4447f25a48b"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040801}, 0x2000c080) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) mount(&(0x7f0000003340)=@nullb, &(0x7f0000003380)='./cgroup\x00', &(0x7f00000033c0)='ocfs2\x00', 0x200000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000000)={0x2, 0xca, "a3c94aa13983588bf0bd7d68abe90d32f30f73fbb18dfc2d090f58722a7db065a992f63130a2fafa5e995dc14408aca0bb6aeecc4b5505c253f5f27a571f188bd413134e194f430037aeb4d51506b48627e984888d27da9ee3a5a603ba75ff1d38d97bb3c9984ef0be52fa9349ee0f7cbaa50b0caa46b196e55e3492865cf5c12db3d8ff91a40c04d1790c4bddce2c7ce1f9af41fd2c31c73f13ea2ce553553d72984289f24d7ea76808153eeb9024b430f70ef471d005195d5b158bf9bf36948651db5fe4bd353cd02d"}, &(0x7f0000000100)=0xd2) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r8, 0xe}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e23, 0xfffffff9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}, 0x1, 0x80}, &(0x7f00000002c0)=0x90) r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120110012f399fd65caeff10ef9e010203010902120001060350080904280100a9ff5609"], &(0x7f00000003c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x300, 0x60, 0x3, 0xa, 0xff}, 0x1b, &(0x7f0000000440)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0xc0, 0xcf}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x8, 0xf, 0x6}]}}) write(r9, &(0x7f0000003240)='27', 0x2) executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000031c0), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000003200)) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000003240)=0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x8914, &(0x7f0000003280)="736c300000000000000000000000000001") write(r0, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000003300)=0xc0) executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="0200", 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './sys_sec/tomoyo/domain_policy\x00'}) r1 = openat(r0, &(0x7f0000000080)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='select \n', 0x10) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000100)) executing program 35: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="0200", 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './sys_sec/tomoyo/domain_policy\x00'}) r1 = openat(r0, &(0x7f0000000080)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='select \n', 0x10) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000100)) executing program 7: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='ppl', 0x3) executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@mcast2}, 0x14) executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff010}, {0x50, 0x0, 0x2}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a9", 0x3}], 0x1}}], 0x1, 0x2090) executing program 7: r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x2d45, 0x800, 0x1}, &(0x7f0000ffe000), 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x826e02) socket$inet6(0xa, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/set_event\x00', 0x3, 0x135) executing program 36: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/set_event\x00', 0x3, 0x135) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./sys\x00', 0x14400, 0x40) mkdirat(r0, &(0x7f0000000100)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x29) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x88082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'wg2\x00', 0x4000}) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) read(r2, &(0x7f0000000940)=""/256, 0x100) executing program 6: socket$inet_smc(0x2b, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)=""/228, &(0x7f0000000040)=0xe4) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000800)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) dup2(r0, r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sec\x00', &(0x7f0000000480)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sec/tomoyo/query\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000003f80)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x2e, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x6, 0x80007, 0x7f, 0x20000006, 0xc9, 0x26, 0x5f, 0x9, 0x5, 0xffef2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000000, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x5, 0x89d1, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0x400000e, 0xe7, 0x80008171, 0xffff, 0x17, 0x10, 0x74c71973, 0x2, 0x42, 0x8f, 0xfffffffc, 0x6, 0x80000000, 0x0, 0x0, 0xb, 0x6, 0x80, 0x0, 0x4, 0xa, 0xb, 0x4, 0x3, 0x40], [0x401, 0xf0000000, 0x80000131, 0x8004, 0x6, 0x6, 0xbc3, 0xc8, 0xf9, 0xe, 0x82bf, 0x6c7, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x2, 0x5, 0x2f, 0x10, 0x10000, 0xd, 0x8, 0x7, 0x4, 0x7, 0x0, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x1, 0x3, 0x14, 0x20009, 0x8, 0xf, 0x9, 0x43, 0x8000, 0x1, 0xfe000000, 0x3, 0xfffffffe, 0x2, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x8003, 0x6c0, 0xbc47, 0xfffffffa, 0x44, 0x9e9], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x100008d2, 0x3, 0xff, 0x7fff, 0x0, 0x2, 0xb, 0x4, 0x6, 0x9e6, 0x2000000, 0x80, 0x5, 0x8470, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0xc2, 0x2, 0x9, 0x20000008, 0x4, 0x6d01, 0xa, 0x1, 0x800002, 0x1fe, 0x7e, 0x7, 0x0, 0x2950bfaf, 0xd3c, 0x5ae, 0x7, 0x4000a9, 0x5, 0x9, 0xacb, 0x2000af, 0xfffffffe, 0xfffffffd, 0x7ff, 0x12b, 0x4, 0x1, 0x95, 0x0, 0x5, 0x1c, 0x1, 0x3f, 0x2004, 0x80a2ed, 0x8004, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x242c2, 0x2, 0x2, 0x0, 0x0, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x7, 0x401, 0xffff, 0x2000a620, 0x2, 0x1, 0x0, 0x2, 0x5, 0xe7, 0x8, 0x4, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0x100, 0x10000, 0xe63, 0x7e, 0x2000006, 0x2, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x1000, 0x4d, 0x8, 0x2, 0x5, 0x1f40, 0x7, 0x4041, 0x5, 0x7ff, 0x804, 0xac1, 0x6, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ppoll(&(0x7f0000004400)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="000000004fa65ca73aafe10f4aa57c10820bae0de47627b60068794f98a142e3e0f4", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="25003300d00000000802110000010802110000005050505050500040030007dc0007008500000000"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x80, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe7d8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x39}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x412d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9ec}]}, 0x80}, 0x1, 0x0, 0x0, 0xc090}, 0x1) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r4, &(0x7f00000002c0)=""/75, 0x4b, 0x0) r5 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0]) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x40, 0x19, 0x2, "b80d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, &(0x7f0000000400)={0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="00000000008b2800f154f8c732fb1a559ace604e7c15f1b63d9ab84ef3eed6d9264675ab402d40611dc0b6a842c0ed1e8cfb4c21be424e72dfa6155f4b0f1c51f9b7e078354e233682c0a7e2abf40c884891ee38e4ad27c31ac7c857f91f56eb940bf8eb1ccd89c3cf301b987e2a52a01f9e93859d"], 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./dev\x00', 0x10) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) executing program 6: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) write$cgroup_pid(r0, &(0x7f0000000140)=r1, 0x12) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) syz_usb_connect(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff400816010200010000000109023f0001010080320904000005ffffff00090581020002000000090502020002000000090583020002000000090504020002000000090585034000010000"], 0x0) (async) clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x1}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2b8c28bd7000fddbdd25050000000800020003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4820}, 0x1c010) executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./proc_mnt\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000a80)={0x2020}, 0x2020) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x101, 0x80000, r0}) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000680)={0x1, {{0xa, 0x4e20, 0x9, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000007c0)={0x0, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x4e11, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000940)=[{0x6, 0x3, 0x8, 0x7fff0000}]}) setresuid(0xee01, 0xee01, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r6, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x24000840) close(0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r7) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000ffffffff1b0000002000018008000400", @ANYRES32, @ANYBLOB="140002007465616d30"], 0x34}}, 0x0) r9 = accept4$tipc(r3, &(0x7f0000000540)=@id, &(0x7f0000000580)=0x10, 0x800) ioctl$NILFS_IOCTL_GET_SUINFO(r9, 0x80186e84, &(0x7f0000000640)={&(0x7f0000000600)=[{0xb6f, 0x0, 0x2}, {0x3, 0x7}], 0x2, 0x10, 0x3, 0xffffffff}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, r8, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4015) accept4(r0, 0x0, 0x0, 0x800) executing program 37: r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./proc_mnt\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000a80)={0x2020}, 0x2020) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x101, 0x80000, r0}) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000680)={0x1, {{0xa, 0x4e20, 0x9, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000007c0)={0x0, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x4e11, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000940)=[{0x6, 0x3, 0x8, 0x7fff0000}]}) setresuid(0xee01, 0xee01, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r6, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x24000840) close(0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r7) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000ffffffff1b0000002000018008000400", @ANYRES32, @ANYBLOB="140002007465616d30"], 0x34}}, 0x0) r9 = accept4$tipc(r3, &(0x7f0000000540)=@id, &(0x7f0000000580)=0x10, 0x800) ioctl$NILFS_IOCTL_GET_SUINFO(r9, 0x80186e84, &(0x7f0000000640)={&(0x7f0000000600)=[{0xb6f, 0x0, 0x2}, {0x3, 0x7}], 0x2, 0x10, 0x3, 0xffffffff}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, r8, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4015) accept4(r0, 0x0, 0x0, 0x800) executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r1, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r1, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040ac05300200000000000109022400010000e80a0904000001030002"], 0x0) write(r2, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) executing program 9: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000380)={&(0x7f00000003c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x4000000) setns(0xffffffffffffffff, 0x20000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="aba6", 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) ioctl$UBLK_U_CMD_GET_FEATURES(0xffffffffffffffff, 0x80207513, &(0x7f0000000300)={0x0, 0xffff, 0x8, &(0x7f00000002c0)}) sendto$inet(r1, &(0x7f0000000280)='<', 0x381, 0x805, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0xfffffff9) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000480)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x80c42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4620040000000000000000000003003e00ebffffff7c000000000000004000000000000000890200000000000000000000060038000200feff030000480600000007000000ffffffffffffffff0200000000000000060000000000000005000000000000000100010000000000020000000000000003"], 0xb0) close(r3) setsockopt$inet_tcp_int(r3, 0x6, 0x2b, &(0x7f0000000580)=0x80000001, 0x4) executing program 9: socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_add_dev(r10, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x40, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r3, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xbb6, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x12d}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r12, r13, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x0, 0x7e}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x80000, 0x1000002, 0x3e8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0xcc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10000, 0x0, 0x2b9, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x8020, 0xc, 0x271}}], 0x1, 0x0, 0x0) executing program 8: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1ff) write(r0, &(0x7f0000000300)="662e0f1f840000000000c3b80f0000000f05", 0x12) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000400000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/events/uprobes/p1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x2) r4 = socket(0x2b, 0x80801, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f00000001c0)=""/241) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000580)=0xe2, 0x4) socket(0x10, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x17, &(0x7f0000000040)=0x46, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000000540)) executing program 9: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x2, 0x68, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)={0x20, 0x7, 0x6, "a18a020ae42f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_usb_connect(0x2, 0x7c, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x64, 0xe8, 0x4b, 0x20, 0xd46, 0x78, 0xd7cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x3, 0x8, 0x4, 0x40, 0x7, "", [{{0x9, 0x4, 0xba, 0xa, 0x1, 0x39, 0x9e, 0x32, 0xa, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x13b8, 0x6, 0x9}, {0x6, 0x24, 0x1a, 0xffff, 0x4}}], [{{0x9, 0x5, 0xb, 0x3, 0x40, 0xf8, 0x3, 0x7}}]}}, {{0x9, 0x4, 0x3, 0x4, 0x1, 0x17, 0xe5, 0x9, 0x1, [], [{{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x9, 0x20, 0x80}}]}}, {{0x9, 0x4, 0x4d, 0x60, 0x0, 0x2, 0x6, 0x0, 0x3, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7280, 0x9, 0xb}}]}}]}}]}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040800}, 0x0) write$binfmt_script(r0, &(0x7f0000000140), 0x4) executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$binfmt_script(r0, &(0x7f0000000040), 0xfd45) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a48000000060a0b04000000000000020000001c00048018000180080001006c6f67000c0002800600014000e400000900011073797a300000000009000200737a7a3200000000140000001100010000000000000000000300000a0000"], 0x70}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000640)={0x0, 0x4, "000200", 0x1, 0xff}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f00000006c0)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000740)='0', 0x1) io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000002}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="180199610aabc102416d2e00000008000300", @ANYRES32=r9, @ANYBLOB="0400e2001800e3801400000008000200ff7f0000080002000900000004009300"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x8800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = dup(r10) sendmsg$inet6(r10, &(0x7f0000000800)={&(0x7f0000000840)={0xa, 0x4e22, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000008c0)="88", 0x1}], 0x1}, 0x24040057) readv(r11, &(0x7f0000000900)=[{&(0x7f0000000940)=""/4080, 0xff0}], 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) write(r12, &(0x7f0000000180)='disable=', 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000003c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00') executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x0) (fail_nth: 3) syz_usb_connect(0x5, 0x24, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0xc3, 0x23, 0xd4, 0x10, 0x830, 0x70, 0x9672, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0xa0, 0x45}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x41, 0x0}]}) executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x14, 0x0, &(0x7f0000000240)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xa6003, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) r8 = timerfd_create(0x5, 0x80000) (async) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000480)=@IORING_OP_UNLINKAT={0x24, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000500)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000580)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) getpeername(r3, &(0x7f0000000040)=@ieee802154={0x24, @short}, &(0x7f0000000300)=0x80) (async) ioctl$XFS_IOC_ERROR_CLEARALL(r8, 0x40085875) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x8, r2, 0x0, 0x3, 0xcf, &(0x7f00000000c0)="bc619471ed07d29a726a7cc04e4b19341926398fe3c38a2478dfac60561f5fc95dd08c347e46d1994accd53f4e62f072e717b9e4e88e15e05bdfe94c0ca0bc685bcca6ae59f1765ff6f610d6f35ffec6562598bb82adadddab5769d01ff16eccb9183a825392fe440059d996d4496f2c64e018370a7745b5d801f9ea4de06bd88d8041b7201b15696f0bcfdec199be49d0d8802fd98703937741e3cf9d9fc3e418148d8592520d533a1fb602f594306a64583d0aac99b22080109a1af388b67fd7e3e7534b0d198a4738c2bf06bce1", 0x4}) executing program 8: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) ftruncate(0xffffffffffffffff, 0x2000000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000340)={0xffffffffffffffff, 0x1f, 0x0, 0x1000000}) executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4082000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd8, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xca}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x16}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8c0}, 0x400c4) syz_usb_connect(0x5, 0x24, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0xc3, 0x23, 0xd4, 0x10, 0x830, 0x70, 0x9672, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0xa0, 0x45}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x41, 0x0}]}) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) executing program 8: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r1, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040ac05300200000000000109022400010000e80a0904000001030002"], 0x0) write(r2, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) executing program 9: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r1, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) executing program 9: socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_add_dev(r10, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x40, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r3, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xbb6, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x12d}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r12, r13, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x0, 0x7e}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x80000, 0x1000002, 0x3e8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0xcc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10000, 0x0, 0x2b9, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x8020, 0xc, 0x271}}], 0x1, 0x0, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r6 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendfile(r5, r4, &(0x7f0000000640)=0x9, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="312f86f9bd1df4aefa47841c6f42abd182fb8a4dffe432853b30c2ed8825990b743360ad96263a32022771b1eee386676bc6d00e5ea5a51fd5932a02ddffb859cc8d7a70fcec67549ab9e2f62294111f7ff5199152259fdb45809b2c3d845380cef819d8180e645a42910e1f60e639db74dd21a414c53500000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25020000000900010073797a31000000000900010073797a3100000000050004000200000005000400020000001400020070696d726567310000000000000000000900010073797a31000000000900030073797a3000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8085) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r7, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@hyper}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) r10 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r10, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) executing program 8: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1ff) write(r0, &(0x7f0000000300)="662e0f1f840000000000c3b80f0000000f05", 0x12) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000400000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/events/uprobes/p1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x2) r4 = socket(0x2b, 0x80801, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f00000001c0)=""/241) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000580)=0xe2, 0x4) socket(0x10, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x17, &(0x7f0000000040)=0x46, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000000540)) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002240), 0x20802, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x2) writev(r0, &(0x7f0000002280)=[{&(0x7f0000002b00)='\b', 0x1}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000002a80)) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f0000002880), &(0x7f00000028c0)=ANY=[@ANYBLOB="9400090008021100000108021100000107000080640001a87d2e13aac927"], 0x1e) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000022c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0xe8, 0x0, 0xe8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0xffffff00, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast, @multicast1}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000140)="0100ddff", 0x507b420f2d51f971) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) r4 = memfd_create(&(0x7f0000002700)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\x15\xc3\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000002900)=@assoc_value={0x0}, &(0x7f0000002940)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000002980)={r7, 0x3}, &(0x7f00000029c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000002a00)={r7, 0x7}, &(0x7f0000002a40)=0x8) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r8, 0x0, 0x0) executing program 9: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r2, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040ac05300200000000000109022400010000e80a0904000001030002"], 0x0) write(r3, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27) finit_module(r3, &(0x7f0000000500)='smaps_rollup\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='27', 0x2) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000440)={0x4, 0xdddd0000, 0x4, 0xffffffffffffffff, 0x8}) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) write$binfmt_format(r3, &(0x7f0000000380)='-1\x00', 0x3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='smaps_rollup\x00') fchdir(r4) write$P9_RREADDIR(r4, &(0x7f0000000540)={0x137, 0x29, 0x2, {0x5, [{{0x80, 0x3, 0x4}, 0x8, 0x0, 0x30, './proc/net/rpc/auth.rpcsec.context/channel/file0'}, {{0x20, 0x0, 0x8}, 0x6, 0x88, 0x6, './proc'}, {{0x4, 0x0, 0x3}, 0x3, 0x3, 0x30, './proc/net/rpc/auth.rpcsec.context/channel/file0'}, {{0x2, 0x0, 0x1}, 0x1, 0x5c, 0x2a, './proc/net/rpc/auth.rpcsec.context/channel'}, {{0x1, 0x0, 0x6}, 0x6, 0x4, 0x6, './proc'}, {{0x10, 0x1, 0x1}, 0x9, 0x9, 0x6, './proc'}]}}, 0x137) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='/dev/kvm\x00', &(0x7f0000000100)='\x00', 0x0) setns(0xc9, 0x0) r5 = socket(0x2a, 0x2, 0x9) connect(r5, &(0x7f0000000780)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='tdp 2', 0x5) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x4000, 0x80) getdents64(r2, &(0x7f00000010c0)=""/4096, 0x1000) lseek(r2, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000001080)=0x5, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x10201, 0x5, 0xffc, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0x1, 0x1) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x90}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x40, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r3, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xbb6, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x12d}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r11, r12, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x0, 0x7e}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x80000, 0x1000002, 0x3e8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0xcc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10000, 0x0, 0x2b9, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x8020, 0xc, 0x271}}], 0x1, 0x0, 0x0) program crashed: INFO: task hung in addrconf_verify_work bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 27, 22, 17, 4, 30, 4, 13, 4, 5, 3, 14, 12, 27, 30, 5, 22, 24, 29, 3, 15, 29] detailed listing: executing program 9: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000380)={&(0x7f00000003c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x4000000) setns(0xffffffffffffffff, 0x20000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="aba6", 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) ioctl$UBLK_U_CMD_GET_FEATURES(0xffffffffffffffff, 0x80207513, &(0x7f0000000300)={0x0, 0xffff, 0x8, &(0x7f00000002c0)}) sendto$inet(r1, &(0x7f0000000280)='<', 0x381, 0x805, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0xfffffff9) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000480)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x80c42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4620040000000000000000000003003e00ebffffff7c000000000000004000000000000000890200000000000000000000060038000200feff030000480600000007000000ffffffffffffffff0200000000000000060000000000000005000000000000000100010000000000020000000000000003"], 0xb0) close(r3) setsockopt$inet_tcp_int(r3, 0x6, 0x2b, &(0x7f0000000580)=0x80000001, 0x4) executing program 9: socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_add_dev(r10, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x40, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r3, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xbb6, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x12d}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r12, r13, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x0, 0x7e}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x80000, 0x1000002, 0x3e8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0xcc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10000, 0x0, 0x2b9, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x8020, 0xc, 0x271}}], 0x1, 0x0, 0x0) executing program 8: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1ff) write(r0, &(0x7f0000000300)="662e0f1f840000000000c3b80f0000000f05", 0x12) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000400000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/events/uprobes/p1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x2) r4 = socket(0x2b, 0x80801, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f00000001c0)=""/241) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000580)=0xe2, 0x4) socket(0x10, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x17, &(0x7f0000000040)=0x46, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000000540)) executing program 9: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x2, 0x68, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)={0x20, 0x7, 0x6, "a18a020ae42f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_usb_connect(0x2, 0x7c, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x64, 0xe8, 0x4b, 0x20, 0xd46, 0x78, 0xd7cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x3, 0x8, 0x4, 0x40, 0x7, "", [{{0x9, 0x4, 0xba, 0xa, 0x1, 0x39, 0x9e, 0x32, 0xa, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x13b8, 0x6, 0x9}, {0x6, 0x24, 0x1a, 0xffff, 0x4}}], [{{0x9, 0x5, 0xb, 0x3, 0x40, 0xf8, 0x3, 0x7}}]}}, {{0x9, 0x4, 0x3, 0x4, 0x1, 0x17, 0xe5, 0x9, 0x1, [], [{{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x9, 0x20, 0x80}}]}}, {{0x9, 0x4, 0x4d, 0x60, 0x0, 0x2, 0x6, 0x0, 0x3, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7280, 0x9, 0xb}}]}}]}}]}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040800}, 0x0) write$binfmt_script(r0, &(0x7f0000000140), 0x4) executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$binfmt_script(r0, &(0x7f0000000040), 0xfd45) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a48000000060a0b04000000000000020000001c00048018000180080001006c6f67000c0002800600014000e400000900011073797a300000000009000200737a7a3200000000140000001100010000000000000000000300000a0000"], 0x70}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000640)={0x0, 0x4, "000200", 0x1, 0xff}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f00000006c0)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000740)='0', 0x1) io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000002}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="180199610aabc102416d2e00000008000300", @ANYRES32=r9, @ANYBLOB="0400e2001800e3801400000008000200ff7f0000080002000900000004009300"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x8800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = dup(r10) sendmsg$inet6(r10, &(0x7f0000000800)={&(0x7f0000000840)={0xa, 0x4e22, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000008c0)="88", 0x1}], 0x1}, 0x24040057) readv(r11, &(0x7f0000000900)=[{&(0x7f0000000940)=""/4080, 0xff0}], 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) write(r12, &(0x7f0000000180)='disable=', 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000003c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00') executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x0) (fail_nth: 3) syz_usb_connect(0x5, 0x24, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0xc3, 0x23, 0xd4, 0x10, 0x830, 0x70, 0x9672, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0xa0, 0x45}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x41, 0x0}]}) executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x14, 0x0, &(0x7f0000000240)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xa6003, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) r8 = timerfd_create(0x5, 0x80000) (async) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000480)=@IORING_OP_UNLINKAT={0x24, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000500)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000580)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) getpeername(r3, &(0x7f0000000040)=@ieee802154={0x24, @short}, &(0x7f0000000300)=0x80) (async) ioctl$XFS_IOC_ERROR_CLEARALL(r8, 0x40085875) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x8, r2, 0x0, 0x3, 0xcf, &(0x7f00000000c0)="bc619471ed07d29a726a7cc04e4b19341926398fe3c38a2478dfac60561f5fc95dd08c347e46d1994accd53f4e62f072e717b9e4e88e15e05bdfe94c0ca0bc685bcca6ae59f1765ff6f610d6f35ffec6562598bb82adadddab5769d01ff16eccb9183a825392fe440059d996d4496f2c64e018370a7745b5d801f9ea4de06bd88d8041b7201b15696f0bcfdec199be49d0d8802fd98703937741e3cf9d9fc3e418148d8592520d533a1fb602f594306a64583d0aac99b22080109a1af388b67fd7e3e7534b0d198a4738c2bf06bce1", 0x4}) executing program 8: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) ftruncate(0xffffffffffffffff, 0x2000000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000340)={0xffffffffffffffff, 0x1f, 0x0, 0x1000000}) executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4082000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd8, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xca}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x16}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8c0}, 0x400c4) syz_usb_connect(0x5, 0x24, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0xc3, 0x23, 0xd4, 0x10, 0x830, 0x70, 0x9672, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0xa0, 0x45}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x41, 0x0}]}) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) executing program 8: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r1, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040ac05300200000000000109022400010000e80a0904000001030002"], 0x0) write(r2, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) executing program 9: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r1, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) executing program 9: socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_add_dev(r10, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x40, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r3, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xbb6, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x12d}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r12, r13, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x0, 0x7e}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x80000, 0x1000002, 0x3e8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0xcc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10000, 0x0, 0x2b9, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x8020, 0xc, 0x271}}], 0x1, 0x0, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r6 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendfile(r5, r4, &(0x7f0000000640)=0x9, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="312f86f9bd1df4aefa47841c6f42abd182fb8a4dffe432853b30c2ed8825990b743360ad96263a32022771b1eee386676bc6d00e5ea5a51fd5932a02ddffb859cc8d7a70fcec67549ab9e2f62294111f7ff5199152259fdb45809b2c3d845380cef819d8180e645a42910e1f60e639db74dd21a414c53500000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25020000000900010073797a31000000000900010073797a3100000000050004000200000005000400020000001400020070696d726567310000000000000000000900010073797a31000000000900030073797a3000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8085) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r7, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@hyper}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) r10 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r10, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035594030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603751d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a96d1132b27cff2b57d6a317bc44219cf4f674f356aee2925", 0x1d8, r0) executing program 8: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1ff) write(r0, &(0x7f0000000300)="662e0f1f840000000000c3b80f0000000f05", 0x12) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000400000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/events/uprobes/p1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x2) r4 = socket(0x2b, 0x80801, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f00000001c0)=""/241) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000580)=0xe2, 0x4) socket(0x10, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x17, &(0x7f0000000040)=0x46, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000000540)) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002240), 0x20802, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x2) writev(r0, &(0x7f0000002280)=[{&(0x7f0000002b00)='\b', 0x1}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000002a80)) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f0000002880), &(0x7f00000028c0)=ANY=[@ANYBLOB="9400090008021100000108021100000107000080640001a87d2e13aac927"], 0x1e) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000022c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0xe8, 0x0, 0xe8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0xffffff00, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast, @multicast1}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000140)="0100ddff", 0x507b420f2d51f971) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) r4 = memfd_create(&(0x7f0000002700)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\x15\xc3\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000002900)=@assoc_value={0x0}, &(0x7f0000002940)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000002980)={r7, 0x3}, &(0x7f00000029c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000002a00)={r7, 0x7}, &(0x7f0000002a40)=0x8) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r8, 0x0, 0x0) executing program 9: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r2, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040ac05300200000000000109022400010000e80a0904000001030002"], 0x0) write(r3, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27) finit_module(r3, &(0x7f0000000500)='smaps_rollup\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='27', 0x2) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000440)={0x4, 0xdddd0000, 0x4, 0xffffffffffffffff, 0x8}) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) write$binfmt_format(r3, &(0x7f0000000380)='-1\x00', 0x3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='smaps_rollup\x00') fchdir(r4) write$P9_RREADDIR(r4, &(0x7f0000000540)={0x137, 0x29, 0x2, {0x5, [{{0x80, 0x3, 0x4}, 0x8, 0x0, 0x30, './proc/net/rpc/auth.rpcsec.context/channel/file0'}, {{0x20, 0x0, 0x8}, 0x6, 0x88, 0x6, './proc'}, {{0x4, 0x0, 0x3}, 0x3, 0x3, 0x30, './proc/net/rpc/auth.rpcsec.context/channel/file0'}, {{0x2, 0x0, 0x1}, 0x1, 0x5c, 0x2a, './proc/net/rpc/auth.rpcsec.context/channel'}, {{0x1, 0x0, 0x6}, 0x6, 0x4, 0x6, './proc'}, {{0x10, 0x1, 0x1}, 0x9, 0x9, 0x6, './proc'}]}}, 0x137) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='/dev/kvm\x00', &(0x7f0000000100)='\x00', 0x0) setns(0xc9, 0x0) r5 = socket(0x2a, 0x2, 0x9) connect(r5, &(0x7f0000000780)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='tdp 2', 0x5) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x4000, 0x80) getdents64(r2, &(0x7f00000010c0)=""/4096, 0x1000) lseek(r2, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000001080)=0x5, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x10201, 0x5, 0xffc, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0x1, 0x1) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x90}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x40, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r3, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xbb6, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x12d}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r11, r12, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x0, 0x7e}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x80000, 0x1000002, 0x3e8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0xcc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10000, 0x0, 0x2b9, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x8020, 0xc, 0x271}}], 0x1, 0x0, 0x0) program crashed: no output from test machine bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 bisect: split chunks (needed=true): <22> bisect: split chunk #0 of len 22 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 12, 27, 30, 5, 22, 24, 29, 3, 15, 29] detailed listing: executing program 8: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r1, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040ac05300200000000000109022400010000e80a0904000001030002"], 0x0) write(r2, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) executing program 9: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r1, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) executing program 9: socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_add_dev(r10, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x40, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r3, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xbb6, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x12d}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r12, r13, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x0, 0x7e}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x80000, 0x1000002, 0x3e8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0xcc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10000, 0x0, 0x2b9, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x8020, 0xc, 0x271}}], 0x1, 0x0, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r6 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendfile(r5, r4, &(0x7f0000000640)=0x9, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="312f86f9bd1df4aefa47841c6f42abd182fb8a4dffe432853b30c2ed8825990b743360ad96263a32022771b1eee386676bc6d00e5ea5a51fd5932a02ddffb859cc8d7a70fcec67549ab9e2f62294111f7ff5199152259fdb45809b2c3d845380cef819d8180e645a42910e1f60e639db74dd21a414c53500000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25020000000900010073797a31000000000900010073797a3100000000050004000200000005000400020000001400020070696d726567310000000000000000000900010073797a31000000000900030073797a3000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8085) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r7, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@hyper}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) r10 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r10, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) executing program 8: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1ff) write(r0, &(0x7f0000000300)="662e0f1f840000000000c3b80f0000000f05", 0x12) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000400000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/events/uprobes/p1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x2) r4 = socket(0x2b, 0x80801, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f00000001c0)=""/241) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000580)=0xe2, 0x4) socket(0x10, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x17, &(0x7f0000000040)=0x46, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000000540)) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002240), 0x20802, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x2) writev(r0, &(0x7f0000002280)=[{&(0x7f0000002b00)='\b', 0x1}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000002a80)) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f0000002880), &(0x7f00000028c0)=ANY=[@ANYBLOB="9400090008021100000108021100000107000080640001a87d2e13aac927"], 0x1e) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000022c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0xe8, 0x0, 0xe8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0xffffff00, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast, @multicast1}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000140)="0100ddff", 0x507b420f2d51f971) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) r4 = memfd_create(&(0x7f0000002700)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\x15\xc3\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000002900)=@assoc_value={0x0}, &(0x7f0000002940)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000002980)={r7, 0x3}, &(0x7f00000029c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000002a00)={r7, 0x7}, &(0x7f0000002a40)=0x8) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r8, 0x0, 0x0) executing program 9: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r2, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040ac05300200000000000109022400010000e80a0904000001030002"], 0x0) write(r3, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27) finit_module(r3, &(0x7f0000000500)='smaps_rollup\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='27', 0x2) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000440)={0x4, 0xdddd0000, 0x4, 0xffffffffffffffff, 0x8}) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) write$binfmt_format(r3, &(0x7f0000000380)='-1\x00', 0x3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='smaps_rollup\x00') fchdir(r4) write$P9_RREADDIR(r4, &(0x7f0000000540)={0x137, 0x29, 0x2, {0x5, [{{0x80, 0x3, 0x4}, 0x8, 0x0, 0x30, './proc/net/rpc/auth.rpcsec.context/channel/file0'}, {{0x20, 0x0, 0x8}, 0x6, 0x88, 0x6, './proc'}, {{0x4, 0x0, 0x3}, 0x3, 0x3, 0x30, './proc/net/rpc/auth.rpcsec.context/channel/file0'}, {{0x2, 0x0, 0x1}, 0x1, 0x5c, 0x2a, './proc/net/rpc/auth.rpcsec.context/channel'}, {{0x1, 0x0, 0x6}, 0x6, 0x4, 0x6, './proc'}, {{0x10, 0x1, 0x1}, 0x9, 0x9, 0x6, './proc'}]}}, 0x137) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='/dev/kvm\x00', &(0x7f0000000100)='\x00', 0x0) setns(0xc9, 0x0) r5 = socket(0x2a, 0x2, 0x9) connect(r5, &(0x7f0000000780)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='tdp 2', 0x5) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x4000, 0x80) getdents64(r2, &(0x7f00000010c0)=""/4096, 0x1000) lseek(r2, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000001080)=0x5, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x10201, 0x5, 0xffc, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0x1, 0x1) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x90}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x40, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r3, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xbb6, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x12d}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r11, r12, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x0, 0x7e}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x80000, 0x1000002, 0x3e8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0xcc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10000, 0x0, 0x2b9, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x8020, 0xc, 0x271}}], 0x1, 0x0, 0x0) program crashed: possible deadlock in lookup_slow bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <11> bisect: split chunk #0 of len 11 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 29, 3, 15, 29] detailed listing: executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002240), 0x20802, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x2) writev(r0, &(0x7f0000002280)=[{&(0x7f0000002b00)='\b', 0x1}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000002a80)) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f0000002880), &(0x7f00000028c0)=ANY=[@ANYBLOB="9400090008021100000108021100000107000080640001a87d2e13aac927"], 0x1e) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000022c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0xe8, 0x0, 0xe8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0xffffff00, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast, @multicast1}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000140)="0100ddff", 0x507b420f2d51f971) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) r4 = memfd_create(&(0x7f0000002700)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\x15\xc3\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000002900)=@assoc_value={0x0}, &(0x7f0000002940)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000002980)={r7, 0x3}, &(0x7f00000029c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000002a00)={r7, 0x7}, &(0x7f0000002a40)=0x8) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r8, 0x0, 0x0) executing program 9: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r2, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040ac05300200000000000109022400010000e80a0904000001030002"], 0x0) write(r3, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27) finit_module(r3, &(0x7f0000000500)='smaps_rollup\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='27', 0x2) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000440)={0x4, 0xdddd0000, 0x4, 0xffffffffffffffff, 0x8}) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) write$binfmt_format(r3, &(0x7f0000000380)='-1\x00', 0x3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='smaps_rollup\x00') fchdir(r4) write$P9_RREADDIR(r4, &(0x7f0000000540)={0x137, 0x29, 0x2, {0x5, [{{0x80, 0x3, 0x4}, 0x8, 0x0, 0x30, './proc/net/rpc/auth.rpcsec.context/channel/file0'}, {{0x20, 0x0, 0x8}, 0x6, 0x88, 0x6, './proc'}, {{0x4, 0x0, 0x3}, 0x3, 0x3, 0x30, './proc/net/rpc/auth.rpcsec.context/channel/file0'}, {{0x2, 0x0, 0x1}, 0x1, 0x5c, 0x2a, './proc/net/rpc/auth.rpcsec.context/channel'}, {{0x1, 0x0, 0x6}, 0x6, 0x4, 0x6, './proc'}, {{0x10, 0x1, 0x1}, 0x9, 0x9, 0x6, './proc'}]}}, 0x137) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='/dev/kvm\x00', &(0x7f0000000100)='\x00', 0x0) setns(0xc9, 0x0) r5 = socket(0x2a, 0x2, 0x9) connect(r5, &(0x7f0000000780)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='tdp 2', 0x5) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x4000, 0x80) getdents64(r2, &(0x7f00000010c0)=""/4096, 0x1000) lseek(r2, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000001080)=0x5, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x10201, 0x5, 0xffc, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) executing program 5: socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0x1, 0x1) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x90}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x40, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r3, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xbb6, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x12d}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r11, r12, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x0, 0x7e}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x80000, 0x1000002, 0x3e8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0xcc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10000, 0x0, 0x2b9, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x8020, 0xc, 0x271}}], 0x1, 0x0, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 12, 27, 30, 5, 22] detailed listing: executing program 8: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r1, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040ac05300200000000000109022400010000e80a0904000001030002"], 0x0) write(r2, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) executing program 9: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000680)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1d, 0x2000, "5ec800000000000000e0ae479b418de13e4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e06627d1190000000000000000000000000000000000000200"}, 0xd8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f0000000840)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r1, &(0x7f0000000980)='1', 0x1) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000000000000000000000000000000000000000000000000000000000000000', 0x8b) executing program 9: socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_add_dev(r10, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x40, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r3, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xbb6, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x12d}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r12, r13, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x0, 0x7e}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x80000, 0x1000002, 0x3e8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0xcc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10000, 0x0, 0x2b9, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x8020, 0xc, 0x271}}], 0x1, 0x0, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r6 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendfile(r5, r4, &(0x7f0000000640)=0x9, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="312f86f9bd1df4aefa47841c6f42abd182fb8a4dffe432853b30c2ed8825990b743360ad96263a32022771b1eee386676bc6d00e5ea5a51fd5932a02ddffb859cc8d7a70fcec67549ab9e2f62294111f7ff5199152259fdb45809b2c3d845380cef819d8180e645a42910e1f60e639db74dd21a414c53500000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25020000000900010073797a31000000000900010073797a3100000000050004000200000005000400020000001400020070696d726567310000000000000000000900010073797a31000000000900030073797a3000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8085) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r7, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@hyper}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) r10 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r10, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) executing program 8: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1ff) write(r0, &(0x7f0000000300)="662e0f1f840000000000c3b80f0000000f05", 0x12) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000400000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/events/uprobes/p1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x2) r4 = socket(0x2b, 0x80801, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f00000001c0)=""/241) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000580)=0xe2, 0x4) socket(0x10, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x17, &(0x7f0000000040)=0x46, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000000540)) program crashed: possible deadlock in lookup_slow bisect: the chunk can be dropped bisect: split chunks (needed=true): <6> bisect: split chunk #0 of len 6 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 5, 22] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r6 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendfile(r5, r4, &(0x7f0000000640)=0x9, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="312f86f9bd1df4aefa47841c6f42abd182fb8a4dffe432853b30c2ed8825990b743360ad96263a32022771b1eee386676bc6d00e5ea5a51fd5932a02ddffb859cc8d7a70fcec67549ab9e2f62294111f7ff5199152259fdb45809b2c3d845380cef819d8180e645a42910e1f60e639db74dd21a414c53500000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25020000000900010073797a31000000000900010073797a3100000000050004000200000005000400020000001400020070696d726567310000000000000000000900010073797a31000000000900030073797a3000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8085) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r7, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@hyper}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) r10 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r10, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) executing program 8: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1ff) write(r0, &(0x7f0000000300)="662e0f1f840000000000c3b80f0000000f05", 0x12) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000400000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/events/uprobes/p1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x2) r4 = socket(0x2b, 0x80801, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f00000001c0)=""/241) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000580)=0xe2, 0x4) socket(0x10, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x17, &(0x7f0000000040)=0x46, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000000540)) program crashed: possible deadlock in lookup_slow bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-write-close-mkdirat-mount-openat-write-openat-mmap-openat-write-socket-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$evdev-ioctl$EVIOCGKEYCODE-socket$inet_mptcp-setsockopt$inet_tcp_int-socket-setsockopt$bt_l2cap_L2CAP_LM-ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS detailed listing: executing program 8: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1ff) write(r0, &(0x7f0000000300)="662e0f1f840000000000c3b80f0000000f05", 0x12) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000400000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/events/uprobes/p1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x2) r4 = socket(0x2b, 0x80801, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f00000001c0)=""/241) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000580)=0xe2, 0x4) socket(0x10, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x17, &(0x7f0000000040)=0x46, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000000540)) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 5] detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r6 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendfile(r5, r4, &(0x7f0000000640)=0x9, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="312f86f9bd1df4aefa47841c6f42abd182fb8a4dffe432853b30c2ed8825990b743360ad96263a32022771b1eee386676bc6d00e5ea5a51fd5932a02ddffb859cc8d7a70fcec67549ab9e2f62294111f7ff5199152259fdb45809b2c3d845380cef819d8180e645a42910e1f60e639db74dd21a414c53500000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25020000000900010073797a31000000000900010073797a3100000000050004000200000005000400020000001400020070696d726567310000000000000000000900010073797a31000000000900030073797a3000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8085) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r7, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@hyper}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) r10 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r10, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program crashed: possible deadlock in lookup_slow bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-socket$l2tp-bind$inet-keyctl$KEYCTL_RESTRICT_KEYRING-add_key detailed listing: executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-recvmmsg-mkdirat-mount-open$dir-pread64-syz_open_dev$tty1-mkdirat-openat-mkdir-mount$overlay-linkat-openat$vhost_vsock-openat$sysfs-openat$sysfs-socket-setsockopt$ALG_SET_AEAD_AUTHSIZE-sendfile-openat$tun-ioctl$TUNSETIFF-sendmsg$SMC_PNETID_ADD-socket$inet6_tcp-dup-ioctl$SIOCSIFHWADDR-write$tun-ioctl$VHOST_VSOCK_SET_GUEST_CID-ioctl$VHOST_VSOCK_SET_RUNNING-socket-connect$vsock_stream detailed listing: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r6 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendfile(r5, r4, &(0x7f0000000640)=0x9, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="312f86f9bd1df4aefa47841c6f42abd182fb8a4dffe432853b30c2ed8825990b743360ad96263a32022771b1eee386676bc6d00e5ea5a51fd5932a02ddffb859cc8d7a70fcec67549ab9e2f62294111f7ff5199152259fdb45809b2c3d845380cef819d8180e645a42910e1f60e639db74dd21a414c53500000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25020000000900010073797a31000000000900010073797a3100000000050004000200000005000400020000001400020070696d726567310000000000000000000900010073797a31000000000900030073797a3000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8085) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r7, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@hyper}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) r10 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r10, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) program did not crash bisect: split chunks (needed=true): <1>, <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r6 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendfile(r5, r4, &(0x7f0000000640)=0x9, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="312f86f9bd1df4aefa47841c6f42abd182fb8a4dffe432853b30c2ed8825990b743360ad96263a32022771b1eee386676bc6d00e5ea5a51fd5932a02ddffb859cc8d7a70fcec67549ab9e2f62294111f7ff5199152259fdb45809b2c3d845380cef819d8180e645a42910e1f60e639db74dd21a414c53500000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25020000000900010073797a31000000000900010073797a3100000000050004000200000005000400020000001400020070696d726567310000000000000000000900010073797a31000000000900030073797a3000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8085) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r7, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@hyper}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) r10 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r10, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r6 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendfile(r5, r4, &(0x7f0000000640)=0x9, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="312f86f9bd1df4aefa47841c6f42abd182fb8a4dffe432853b30c2ed8825990b743360ad96263a32022771b1eee386676bc6d00e5ea5a51fd5932a02ddffb859cc8d7a70fcec67549ab9e2f62294111f7ff5199152259fdb45809b2c3d845380cef819d8180e645a42910e1f60e639db74dd21a414c53500000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25020000000900010073797a31000000000900010073797a3100000000050004000200000005000400020000001400020070696d726567310000000000000000000900010073797a31000000000900030073797a3000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8085) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r7, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@hyper}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) socket(0x28, 0x1, 0x6) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035594030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603751d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a96d1132b27cff2b57d6a317bc44219cf4f674f356aee2925", 0x1d8, r0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r6 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendfile(r5, r4, &(0x7f0000000640)=0x9, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="312f86f9bd1df4aefa47841c6f42abd182fb8a4dffe432853b30c2ed8825990b743360ad96263a32022771b1eee386676bc6d00e5ea5a51fd5932a02ddffb859cc8d7a70fcec67549ab9e2f62294111f7ff5199152259fdb45809b2c3d845380cef819d8180e645a42910e1f60e639db74dd21a414c53500000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25020000000900010073797a31000000000900010073797a3100000000050004000200000005000400020000001400020070696d726567310000000000000000000900010073797a31000000000900030073797a3000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8085) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r7, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@hyper}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r6 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendfile(r5, r4, &(0x7f0000000640)=0x9, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="312f86f9bd1df4aefa47841c6f42abd182fb8a4dffe432853b30c2ed8825990b743360ad96263a32022771b1eee386676bc6d00e5ea5a51fd5932a02ddffb859cc8d7a70fcec67549ab9e2f62294111f7ff5199152259fdb45809b2c3d845380cef819d8180e645a42910e1f60e639db74dd21a414c53500000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25020000000900010073797a31000000000900010073797a3100000000050004000200000005000400020000001400020070696d726567310000000000000000000900010073797a31000000000900030073797a3000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8085) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r7, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@hyper}) r10 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r10, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program crashed: possible deadlock in lookup_slow testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r5 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x6) sendfile(r4, r3, &(0x7f0000000640)=0x9, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="312f86f9bd1df4aefa47841c6f42abd182fb8a4dffe432853b30c2ed8825990b743360ad96263a32022771b1eee386676bc6d00e5ea5a51fd5932a02ddffb859cc8d7a70fcec67549ab9e2f62294111f7ff5199152259fdb45809b2c3d845380cef819d8180e645a42910e1f60e639db74dd21a414c53500000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25020000000900010073797a31000000000900010073797a3100000000050004000200000005000400020000001400020070696d726567310000000000000000000900010073797a31000000000900030073797a3000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8085) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r6, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r9 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r9, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035594030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603751d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a96d1132b27cff2b57d6a317bc44219cf4f674f356aee2925", 0x1d8, r0) program crashed: possible deadlock in lookup_slow testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r5 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x6) sendfile(r4, r3, &(0x7f0000000640)=0x9, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="312f86f9bd1df4aefa47841c6f42abd182fb8a4dffe432853b30c2ed8825990b743360ad96263a32022771b1eee386676bc6d00e5ea5a51fd5932a02ddffb859cc8d7a70fcec67549ab9e2f62294111f7ff5199152259fdb45809b2c3d845380cef819d8180e645a42910e1f60e639db74dd21a414c53500000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25020000000900010073797a31000000000900010073797a3100000000050004000200000005000400020000001400020070696d726567310000000000000000000900010073797a31000000000900030073797a3000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8085) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r9 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r9, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r5 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x6) sendfile(r4, r3, &(0x7f0000000640)=0x9, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="312f86f9bd1df4aefa47841c6f42abd182fb8a4dffe432853b30c2ed8825990b743360ad96263a32022771b1eee386676bc6d00e5ea5a51fd5932a02ddffb859cc8d7a70fcec67549ab9e2f62294111f7ff5199152259fdb45809b2c3d845380cef819d8180e645a42910e1f60e639db74dd21a414c53500000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25020000000900010073797a31000000000900010073797a3100000000050004000200000005000400020000001400020070696d726567310000000000000000000900010073797a31000000000900030073797a3000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8085) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) write$tun(r6, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r8 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r8, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r5 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x6) sendfile(r4, r3, &(0x7f0000000640)=0x9, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="312f86f9bd1df4aefa47841c6f42abd182fb8a4dffe432853b30c2ed8825990b743360ad96263a32022771b1eee386676bc6d00e5ea5a51fd5932a02ddffb859cc8d7a70fcec67549ab9e2f62294111f7ff5199152259fdb45809b2c3d845380cef819d8180e645a42910e1f60e639db74dd21a414c53500000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25020000000900010073797a31000000000900010073797a3100000000050004000200000005000400020000001400020070696d726567310000000000000000000900010073797a31000000000900030073797a3000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8085) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r6, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r7 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r7, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program crashed: possible deadlock in lookup_slow testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r5 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x6) sendfile(r4, r3, &(0x7f0000000640)=0x9, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="312f86f9bd1df4aefa47841c6f42abd182fb8a4dffe432853b30c2ed8825990b743360ad96263a32022771b1eee386676bc6d00e5ea5a51fd5932a02ddffb859cc8d7a70fcec67549ab9e2f62294111f7ff5199152259fdb45809b2c3d845380cef819d8180e645a42910e1f60e639db74dd21a414c53500000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25020000000900010073797a31000000000900010073797a3100000000050004000200000005000400020000001400020070696d726567310000000000000000000900010073797a31000000000900030073797a3000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8085) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r6, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r7 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r7, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035594030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603751d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a96d1132b27cff2b57d6a317bc44219cf4f674f356aee2925", 0x1d8, r0) program crashed: possible deadlock in lookup_slow testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r4 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x6) sendfile(r3, r2, &(0x7f0000000640)=0x9, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r5, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r6 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r6, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program crashed: possible deadlock in lookup_slow testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r4 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x6) sendfile(r3, r2, &(0x7f0000000640)=0x9, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xa2f01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r5, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r6 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r6, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program crashed: possible deadlock in lookup_slow testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r4 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x6) sendfile(r3, r2, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r5 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r5, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program crashed: possible deadlock in lookup_slow testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) r2 = socket(0x21, 0xa, 0x5) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r3 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r3, r2, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r4 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program crashed: possible deadlock in lookup_slow testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) sendfile(r3, r2, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r4 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) socket(0x21, 0xa, 0x5) sendfile(0xffffffffffffffff, r2, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r3 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r3 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r3, r2, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r4 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035594030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603751d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a96d1132b27cff2b57d6a317bc44219cf4f674f356aee2925", 0x1d8, r0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r3, r2, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r4 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r3, r2, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r4 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r3, r2, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r4 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035594030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603751d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a96d1132b27cff2b57d6a317bc44219cf4f674f356aee2925", 0x1d8, r0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r3, r2, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r4 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035594030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603751d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a96d1132b27cff2b57d6a317bc44219cf4f674f356aee2925", 0x1d8, r0) program crashed: possible deadlock in lookup_slow testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r3, r2, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r4 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r3, r2, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r4 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) open$dir(0x0, 0x2000, 0x149) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r2, r1, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r3 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./security\x00', 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r2, r1, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r3 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r3, r2, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r4 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035594030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603751d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a96d1132b27cff2b57d6a317bc44219cf4f674f356aee2925", 0x1d8, r0) program crashed: possible deadlock in lookup_slow testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r3, r2, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r4 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 5] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r1 = open$dir(0x0, 0x2000, 0x149) pread64(r1, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r3, r2, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r4 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 5] detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r2, r1, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r3 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035594030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603751d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a96d1132b27cff2b57d6a317bc44219cf4f674f356aee2925", 0x1d8, r0) program crashed: possible deadlock in lookup_slow testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 5] detailed listing: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r2, r1, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r3 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 8: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program did not crash minimized 30 calls -> 19 calls minimizing program #1 before concatenation testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 4] detailed listing: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r2, r1, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r3 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 4] detailed listing: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r2, r1, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r3 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 4] detailed listing: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r2, r1, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r3 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) socket$l2tp(0x2, 0x2, 0x73) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 4] detailed listing: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r2, r1, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r3 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) program crashed: possible deadlock in lookup_slow testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 3] detailed listing: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r2, r1, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r3 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, 0x0) program crashed: possible deadlock in lookup_slow minimized 5 calls -> 3 calls testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-open$dir-pread64-syz_open_dev$tty1-mkdirat-mkdir-mount$overlay-linkat-openat$vhost_vsock-openat$sysfs-openat$sysfs-socket-sendfile-ioctl$SIOCSIFHWADDR-write$tun-socket-connect$vsock_stream-bind$inet-keyctl$KEYCTL_RESTRICT_KEYRING-add_key detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r2, r1, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r3 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, 0x0) program crashed: possible deadlock in lookup_slow bisect: concatenation succeeded found reproducer with 22 syscalls minimizing guilty program testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-open$dir-pread64-syz_open_dev$tty1-mkdirat-mkdir-mount$overlay-linkat-openat$vhost_vsock-openat$sysfs-openat$sysfs-socket-sendfile-ioctl$SIOCSIFHWADDR-write$tun-socket-connect$vsock_stream-bind$inet-keyctl$KEYCTL_RESTRICT_KEYRING detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r2, r1, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r3 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) program crashed: possible deadlock in lookup_slow testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-open$dir-pread64-syz_open_dev$tty1-mkdirat-mkdir-mount$overlay-linkat-openat$vhost_vsock-openat$sysfs-openat$sysfs-socket-sendfile-ioctl$SIOCSIFHWADDR-write$tun-socket-connect$vsock_stream-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r2, r1, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r3 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program crashed: possible deadlock in lookup_slow testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-open$dir-pread64-syz_open_dev$tty1-mkdirat-mkdir-mount$overlay-linkat-openat$vhost_vsock-openat$sysfs-openat$sysfs-socket-sendfile-ioctl$SIOCSIFHWADDR-write$tun-socket-connect$vsock_stream detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r2, r1, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) r3 = socket(0x28, 0x1, 0x6) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-open$dir-pread64-syz_open_dev$tty1-mkdirat-mkdir-mount$overlay-linkat-openat$vhost_vsock-openat$sysfs-openat$sysfs-socket-sendfile-ioctl$SIOCSIFHWADDR-write$tun-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r2, r1, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program crashed: possible deadlock in lookup_slow testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-open$dir-pread64-syz_open_dev$tty1-mkdirat-mkdir-mount$overlay-linkat-openat$vhost_vsock-openat$sysfs-openat$sysfs-socket-sendfile-ioctl$SIOCSIFHWADDR-write$tun-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r2, r1, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x14, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}}, 0x4e) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-open$dir-pread64-syz_open_dev$tty1-mkdirat-mkdir-mount$overlay-linkat-openat$vhost_vsock-openat$sysfs-openat$sysfs-socket-sendfile-ioctl$SIOCSIFHWADDR-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r2, r1, &(0x7f0000000640)=0x9, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program crashed: possible deadlock in lookup_slow testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-open$dir-pread64-syz_open_dev$tty1-mkdirat-mkdir-mount$overlay-linkat-openat$vhost_vsock-openat$sysfs-openat$sysfs-socket-sendfile-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) sendfile(r2, r1, &(0x7f0000000640)=0x9, 0x8) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program crashed: possible deadlock in lookup_slow testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-open$dir-pread64-syz_open_dev$tty1-mkdirat-mkdir-mount$overlay-linkat-openat$vhost_vsock-openat$sysfs-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program crashed: possible deadlock in lookup_slow testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-open$dir-pread64-syz_open_dev$tty1-mkdirat-mkdir-mount$overlay-linkat-openat$vhost_vsock-openat$sysfs-openat$sysfs-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-open$dir-pread64-syz_open_dev$tty1-mkdirat-mkdir-mount$overlay-linkat-openat$vhost_vsock-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x0, 0x4) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-open$dir-pread64-syz_open_dev$tty1-mkdirat-mkdir-mount$overlay-linkat-openat$vhost_vsock-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program crashed: possible deadlock in lookup_slow testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-open$dir-pread64-syz_open_dev$tty1-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program crashed: possible deadlock in lookup_slow testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-open$dir-pread64-syz_open_dev$tty1-mkdirat-mkdir-mount$overlay-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-open$dir-pread64-syz_open_dev$tty1-mkdirat-mkdir-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-open$dir-pread64-syz_open_dev$tty1-mkdirat-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-open$dir-pread64-syz_open_dev$tty1-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-open$dir-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) r0 = open$dir(0x0, 0x2000, 0x149) pread64(r0, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program crashed: possible deadlock in lookup_slow testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-open$dir-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) open$dir(0x0, 0x2000, 0x149) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program crashed: possible deadlock in lookup_slow testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) pread64(0xffffffffffffffff, 0x0, 0x0, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file2\x00', 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program did not crash testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_test', 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program crashed: possible deadlock in lookup_slow testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) program crashed: possible deadlock in lookup_slow testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) program crashed: possible deadlock in lookup_slow extracting C reproducer testing compiled C program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet program crashed: possible deadlock in lookup_slow simplifying C reproducer testing compiled C program (duration=1m23.524470876s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet program did not crash testing compiled C program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet program did not crash testing compiled C program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet program did not crash testing compiled C program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet program did not crash testing compiled C program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet program did not crash testing compiled C program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet program crashed: possible deadlock in lookup_slow testing compiled C program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet program did not crash testing compiled C program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet program crashed: possible deadlock in lookup_slow testing compiled C program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet program did not crash testing compiled C program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet program did not crash testing compiled C program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet program crashed: possible deadlock in lookup_slow testing compiled C program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet program crashed: possible deadlock in lookup_slow testing compiled C program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet program did not crash testing compiled C program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet program did not crash testing compiled C program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet program crashed: possible deadlock in lookup_slow testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) program crashed: possible deadlock in lookup_slow validation run: crashed=true testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) program crashed: possible deadlock in lookup_slow validation run: crashed=true testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) program did not crash validation run: crashed=false testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) program did not crash validation run: crashed=false testing program (duration=1m23.524470876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmmsg-mkdirat-pread64-mkdirat-mkdir-mount$overlay-linkat-openat$sysfs-socket-socket-bind$inet detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./security\x00', 0x1ed) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/259, 0xfffffe7b, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a02, 0x5) socket(0x21, 0xa, 0x5) socket(0x28, 0x1, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) program crashed: possible deadlock in lookup_slow validation run: crashed=true reproducing took 7h56m35.785690456s repro crashed as (corrupted=false): ====================================================== WARNING: possible circular locking dependency detected syzkaller #0 Not tainted ------------------------------------------------------ syz.3.20/5962 is trying to acquire lock: ffff88807800cba8 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] ffff88807800cba8 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80 fs/namei.c:1935 but task is already holding lock: ffff88801390b140 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] ffff88801390b140 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] ffff88801390b140 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 fs/dcache.c:2883 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: d_wait_lookup fs/dcache.c:2840 [inline] __d_alloc_parallel+0xc32/0x1700 fs/dcache.c:2944 __lookup_slow+0x82/0x2f0 fs/namei.c:1904 lookup_slow+0x59/0x80 fs/namei.c:1936 walk_component fs/namei.c:2311 [inline] link_path_walk+0xd22/0x1910 fs/namei.c:2685 path_openat+0x1c4/0x1da0 fs/namei.c:5036 do_file_open+0x23e/0x4a0 fs/namei.c:5069 do_sys_openat2+0x115/0x200 fs/open.c:1442 do_sys_open fs/open.c:1448 [inline] __do_sys_openat fs/open.c:1788 [inline] __se_sys_openat fs/open.c:1783 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1783 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #0 (&type->i_mutex_dir_key#5){++++}-{4:4}: check_prev_add kernel/locking/lockdep.c:3209 [inline] check_prevs_add kernel/locking/lockdep.c:3328 [inline] validate_chain kernel/locking/lockdep.c:3952 [inline] __lock_acquire+0x164c/0x2de0 kernel/locking/lockdep.c:5288 lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5942 down_read+0x45/0x320 kernel/locking/rwsem.c:1574 inode_lock_shared include/linux/fs.h:1039 [inline] lookup_slow+0x46/0x80 fs/namei.c:1935 ovl_lookup_positive_unlocked fs/overlayfs/namei.c:216 [inline] ovl_lookup_single+0x323/0xe90 fs/overlayfs/namei.c:260 ovl_lookup_layer+0x377/0x440 fs/overlayfs/namei.c:365 ovl_lookup_layers fs/overlayfs/namei.c:1109 [inline] ovl_lookup+0x5e5/0x1c80 fs/overlayfs/namei.c:1403 __lookup_slow+0x1fb/0x2f0 fs/namei.c:1919 lookup_slow+0x59/0x80 fs/namei.c:1936 walk_component fs/namei.c:2311 [inline] lookup_last fs/namei.c:2818 [inline] path_lookupat+0x3f5/0x8c0 fs/namei.c:2842 filename_lookup+0x265/0x5d0 fs/namei.c:2871 filename_linkat+0x119/0x5e0 fs/namei.c:6015 __do_sys_linkat fs/namei.c:6061 [inline] __se_sys_linkat+0x60/0x2d0 fs/namei.c:6056 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f other info that might help us debug this: Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(DCACHE_PAR_LOOKUP); lock(&type->i_mutex_dir_key#5); lock(DCACHE_PAR_LOOKUP); rlock(&type->i_mutex_dir_key#5); *** DEADLOCK *** locks held by syz.3.20/5962: 2, last CPU#0: #0: ffff8880693fa230 (&ovl_i_mutex_dir_key[depth]){.+.+}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff8880693fa230 (&ovl_i_mutex_dir_key[depth]){.+.+}-{4:4}, at: lookup_slow+0x46/0x80 fs/namei.c:1935 #1: ffff88801390b140 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffff88801390b140 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffff88801390b140 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 fs/dcache.c:2883 stack backtrace: CPU: 0 UID: 0 PID: 5962 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_circular_bug+0x2e2/0x300 kernel/locking/lockdep.c:2087 check_noncircular+0x12f/0x150 kernel/locking/lockdep.c:2219 check_prev_add kernel/locking/lockdep.c:3209 [inline] check_prevs_add kernel/locking/lockdep.c:3328 [inline] validate_chain kernel/locking/lockdep.c:3952 [inline] __lock_acquire+0x164c/0x2de0 kernel/locking/lockdep.c:5288 lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5942 down_read+0x45/0x320 kernel/locking/rwsem.c:1574 inode_lock_shared include/linux/fs.h:1039 [inline] lookup_slow+0x46/0x80 fs/namei.c:1935 ovl_lookup_positive_unlocked fs/overlayfs/namei.c:216 [inline] ovl_lookup_single+0x323/0xe90 fs/overlayfs/namei.c:260 ovl_lookup_layer+0x377/0x440 fs/overlayfs/namei.c:365 ovl_lookup_layers fs/overlayfs/namei.c:1109 [inline] ovl_lookup+0x5e5/0x1c80 fs/overlayfs/namei.c:1403 __lookup_slow+0x1fb/0x2f0 fs/namei.c:1919 lookup_slow+0x59/0x80 fs/namei.c:1936 walk_component fs/namei.c:2311 [inline] lookup_last fs/namei.c:2818 [inline] path_lookupat+0x3f5/0x8c0 fs/namei.c:2842 filename_lookup+0x265/0x5d0 fs/namei.c:2871 filename_linkat+0x119/0x5e0 fs/namei.c:6015 __do_sys_linkat fs/namei.c:6061 [inline] __se_sys_linkat+0x60/0x2d0 fs/namei.c:6056 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2e52d9e1d9 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f2e53c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 RAX: ffffffffffffffda RBX: 00007f2e53025fa0 RCX: 00007f2e52d9e1d9 RDX: ffffffffffffff9c RSI: 0000200000000540 RDI: ffffffffffffff9c RBP: 00007f2e52e35888 R08: 0000000000001000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f2e53026038 R14: 00007f2e53025fa0 R15: 00007ffee8f710b8 final repro crashed as (corrupted=false): ====================================================== WARNING: possible circular locking dependency detected syzkaller #0 Not tainted ------------------------------------------------------ syz.3.20/5962 is trying to acquire lock: ffff88807800cba8 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] ffff88807800cba8 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80 fs/namei.c:1935 but task is already holding lock: ffff88801390b140 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] ffff88801390b140 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] ffff88801390b140 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 fs/dcache.c:2883 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: d_wait_lookup fs/dcache.c:2840 [inline] __d_alloc_parallel+0xc32/0x1700 fs/dcache.c:2944 __lookup_slow+0x82/0x2f0 fs/namei.c:1904 lookup_slow+0x59/0x80 fs/namei.c:1936 walk_component fs/namei.c:2311 [inline] link_path_walk+0xd22/0x1910 fs/namei.c:2685 path_openat+0x1c4/0x1da0 fs/namei.c:5036 do_file_open+0x23e/0x4a0 fs/namei.c:5069 do_sys_openat2+0x115/0x200 fs/open.c:1442 do_sys_open fs/open.c:1448 [inline] __do_sys_openat fs/open.c:1788 [inline] __se_sys_openat fs/open.c:1783 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1783 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #0 (&type->i_mutex_dir_key#5){++++}-{4:4}: check_prev_add kernel/locking/lockdep.c:3209 [inline] check_prevs_add kernel/locking/lockdep.c:3328 [inline] validate_chain kernel/locking/lockdep.c:3952 [inline] __lock_acquire+0x164c/0x2de0 kernel/locking/lockdep.c:5288 lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5942 down_read+0x45/0x320 kernel/locking/rwsem.c:1574 inode_lock_shared include/linux/fs.h:1039 [inline] lookup_slow+0x46/0x80 fs/namei.c:1935 ovl_lookup_positive_unlocked fs/overlayfs/namei.c:216 [inline] ovl_lookup_single+0x323/0xe90 fs/overlayfs/namei.c:260 ovl_lookup_layer+0x377/0x440 fs/overlayfs/namei.c:365 ovl_lookup_layers fs/overlayfs/namei.c:1109 [inline] ovl_lookup+0x5e5/0x1c80 fs/overlayfs/namei.c:1403 __lookup_slow+0x1fb/0x2f0 fs/namei.c:1919 lookup_slow+0x59/0x80 fs/namei.c:1936 walk_component fs/namei.c:2311 [inline] lookup_last fs/namei.c:2818 [inline] path_lookupat+0x3f5/0x8c0 fs/namei.c:2842 filename_lookup+0x265/0x5d0 fs/namei.c:2871 filename_linkat+0x119/0x5e0 fs/namei.c:6015 __do_sys_linkat fs/namei.c:6061 [inline] __se_sys_linkat+0x60/0x2d0 fs/namei.c:6056 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f other info that might help us debug this: Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(DCACHE_PAR_LOOKUP); lock(&type->i_mutex_dir_key#5); lock(DCACHE_PAR_LOOKUP); rlock(&type->i_mutex_dir_key#5); *** DEADLOCK *** locks held by syz.3.20/5962: 2, last CPU#0: #0: ffff8880693fa230 (&ovl_i_mutex_dir_key[depth]){.+.+}-{4:4}, at: inode_lock_shared include/linux/fs.h:1039 [inline] #0: ffff8880693fa230 (&ovl_i_mutex_dir_key[depth]){.+.+}-{4:4}, at: lookup_slow+0x46/0x80 fs/namei.c:1935 #1: ffff88801390b140 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffff88801390b140 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffff88801390b140 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 fs/dcache.c:2883 stack backtrace: CPU: 0 UID: 0 PID: 5962 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_circular_bug+0x2e2/0x300 kernel/locking/lockdep.c:2087 check_noncircular+0x12f/0x150 kernel/locking/lockdep.c:2219 check_prev_add kernel/locking/lockdep.c:3209 [inline] check_prevs_add kernel/locking/lockdep.c:3328 [inline] validate_chain kernel/locking/lockdep.c:3952 [inline] __lock_acquire+0x164c/0x2de0 kernel/locking/lockdep.c:5288 lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5942 down_read+0x45/0x320 kernel/locking/rwsem.c:1574 inode_lock_shared include/linux/fs.h:1039 [inline] lookup_slow+0x46/0x80 fs/namei.c:1935 ovl_lookup_positive_unlocked fs/overlayfs/namei.c:216 [inline] ovl_lookup_single+0x323/0xe90 fs/overlayfs/namei.c:260 ovl_lookup_layer+0x377/0x440 fs/overlayfs/namei.c:365 ovl_lookup_layers fs/overlayfs/namei.c:1109 [inline] ovl_lookup+0x5e5/0x1c80 fs/overlayfs/namei.c:1403 __lookup_slow+0x1fb/0x2f0 fs/namei.c:1919 lookup_slow+0x59/0x80 fs/namei.c:1936 walk_component fs/namei.c:2311 [inline] lookup_last fs/namei.c:2818 [inline] path_lookupat+0x3f5/0x8c0 fs/namei.c:2842 filename_lookup+0x265/0x5d0 fs/namei.c:2871 filename_linkat+0x119/0x5e0 fs/namei.c:6015 __do_sys_linkat fs/namei.c:6061 [inline] __se_sys_linkat+0x60/0x2d0 fs/namei.c:6056 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2e52d9e1d9 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f2e53c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 RAX: ffffffffffffffda RBX: 00007f2e53025fa0 RCX: 00007f2e52d9e1d9 RDX: ffffffffffffff9c RSI: 0000200000000540 RDI: ffffffffffffff9c RBP: 00007f2e52e35888 R08: 0000000000001000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f2e53026038 R14: 00007f2e53025fa0 R15: 00007ffee8f710b8