Extracting prog: 58.254998161s
Minimizing prog: 5m14.035745902s
Simplifying prog options: 6m41.538872025s
Extracting C: 2m32.478891033s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch-mount$cgroup2-sendmsg$NL80211_CMD_JOIN_MESH-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch-mount$cgroup2-sendmsg$NL80211_CMD_JOIN_MESH
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3})
write(r3, &(0x7f0000000c00)='1', 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0)
r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81)
mount$cgroup2(0x0, &(0x7f0000000040)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', &(0x7f0000000100), 0x80020, &(0x7f0000000280)={[{@pids_localevents}, {@memory_recursiveprot}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_hugetlb_accounting}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_recursiveprot}], [{@permit_directio}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '-'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nl80211\x00'}}]})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="040024000a001800d0260b861288fbc9"], 0x2c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3}) (async)
write(r3, &(0x7f0000000c00)='1', 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0) (async)
syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) (async)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81) (async)
mount$cgroup2(0x0, &(0x7f0000000040)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', &(0x7f0000000100), 0x80020, &(0x7f0000000280)={[{@pids_localevents}, {@memory_recursiveprot}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_hugetlb_accounting}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_recursiveprot}], [{@permit_directio}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '-'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nl80211\x00'}}]}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="040024000a001800d0260b861288fbc9"], 0x2c}}, 0x0) (async)

program crashed: lost connection to test machine
single: successfully extracted reproducer
found reproducer with 36 syscalls
minimizing guilty program
testing program (duration=1m14.261840718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch-mount$cgroup2-sendmsg$NL80211_CMD_JOIN_MESH-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch-mount$cgroup2
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3})
write(r3, &(0x7f0000000c00)='1', 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0)
r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81)
mount$cgroup2(0x0, &(0x7f0000000040)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', &(0x7f0000000100), 0x80020, &(0x7f0000000280)={[{@pids_localevents}, {@memory_recursiveprot}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_hugetlb_accounting}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_recursiveprot}], [{@permit_directio}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '-'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nl80211\x00'}}]})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="040024000a001800d0260b861288fbc9"], 0x2c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3}) (async)
write(r3, &(0x7f0000000c00)='1', 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0) (async)
syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) (async)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81) (async)
mount$cgroup2(0x0, &(0x7f0000000040)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', &(0x7f0000000100), 0x80020, &(0x7f0000000280)={[{@pids_localevents}, {@memory_recursiveprot}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_hugetlb_accounting}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_recursiveprot}], [{@permit_directio}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '-'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nl80211\x00'}}]}) (async)

program crashed: lost connection to test machine
testing program (duration=1m14.261840718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch-mount$cgroup2-sendmsg$NL80211_CMD_JOIN_MESH-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3})
write(r3, &(0x7f0000000c00)='1', 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0)
r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81)
mount$cgroup2(0x0, &(0x7f0000000040)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', &(0x7f0000000100), 0x80020, &(0x7f0000000280)={[{@pids_localevents}, {@memory_recursiveprot}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_hugetlb_accounting}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_recursiveprot}], [{@permit_directio}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '-'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nl80211\x00'}}]})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="040024000a001800d0260b861288fbc9"], 0x2c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3}) (async)
write(r3, &(0x7f0000000c00)='1', 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0) (async)
syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) (async)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81) (async)

program crashed: lost connection to test machine
testing program (duration=1m14.261840718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch-mount$cgroup2-sendmsg$NL80211_CMD_JOIN_MESH-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3})
write(r3, &(0x7f0000000c00)='1', 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0)
r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81)
mount$cgroup2(0x0, &(0x7f0000000040)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', &(0x7f0000000100), 0x80020, &(0x7f0000000280)={[{@pids_localevents}, {@memory_recursiveprot}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_hugetlb_accounting}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_recursiveprot}], [{@permit_directio}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '-'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nl80211\x00'}}]})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="040024000a001800d0260b861288fbc9"], 0x2c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3}) (async)
write(r3, &(0x7f0000000c00)='1', 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0) (async)
syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) (async)

minimization failed with failed to copy syz-execprog to VM: scp failed: failed to run ["scp" "-P" "15778" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "-O" "/syzkaller/syzkaller/current/bin/linux_amd64/syz-execprog" "root@localhost:/syz-execprog"]: exit status 1
extracting C reproducer
testing compiled C program (duration=1m14.261840718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch-mount$cgroup2-sendmsg$NL80211_CMD_JOIN_MESH-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch
program did not crash
simplifying guilty program options
testing program (duration=1m14.261840718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch-mount$cgroup2-sendmsg$NL80211_CMD_JOIN_MESH-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3})
write(r3, &(0x7f0000000c00)='1', 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0)
r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81)
mount$cgroup2(0x0, &(0x7f0000000040)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', &(0x7f0000000100), 0x80020, &(0x7f0000000280)={[{@pids_localevents}, {@memory_recursiveprot}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_hugetlb_accounting}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_recursiveprot}], [{@permit_directio}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '-'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nl80211\x00'}}]})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="040024000a001800d0260b861288fbc9"], 0x2c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3}) (async)
write(r3, &(0x7f0000000c00)='1', 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0) (async)
syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) (async)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81) (async)

program crashed: lost connection to test machine
extracting C reproducer
testing compiled C program (duration=1m14.261840718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch-mount$cgroup2-sendmsg$NL80211_CMD_JOIN_MESH-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch
program did not crash
testing program (duration=1m14.261840718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch-mount$cgroup2-sendmsg$NL80211_CMD_JOIN_MESH-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3})
write(r3, &(0x7f0000000c00)='1', 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0)
r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81)
mount$cgroup2(0x0, &(0x7f0000000040)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', &(0x7f0000000100), 0x80020, &(0x7f0000000280)={[{@pids_localevents}, {@memory_recursiveprot}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_hugetlb_accounting}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_recursiveprot}], [{@permit_directio}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '-'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nl80211\x00'}}]})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="040024000a001800d0260b861288fbc9"], 0x2c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3}) (async)
write(r3, &(0x7f0000000c00)='1', 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0) (async)
syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) (async)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81) (async)

program crashed: lost connection to test machine
extracting C reproducer
testing compiled C program (duration=1m14.261840718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch-mount$cgroup2-sendmsg$NL80211_CMD_JOIN_MESH-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch
program did not crash
testing program (duration=1m14.261840718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch-mount$cgroup2-sendmsg$NL80211_CMD_JOIN_MESH-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3})
write(r3, &(0x7f0000000c00)='1', 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0)
r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81)
mount$cgroup2(0x0, &(0x7f0000000040)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', &(0x7f0000000100), 0x80020, &(0x7f0000000280)={[{@pids_localevents}, {@memory_recursiveprot}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_hugetlb_accounting}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_recursiveprot}], [{@permit_directio}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '-'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nl80211\x00'}}]})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="040024000a001800d0260b861288fbc9"], 0x2c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3}) (async)
write(r3, &(0x7f0000000c00)='1', 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0) (async)
syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) (async)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81) (async)

program did not crash
validation run: crashed=false
testing program (duration=1m14.261840718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch-mount$cgroup2-sendmsg$NL80211_CMD_JOIN_MESH-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3})
write(r3, &(0x7f0000000c00)='1', 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0)
r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81)
mount$cgroup2(0x0, &(0x7f0000000040)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', &(0x7f0000000100), 0x80020, &(0x7f0000000280)={[{@pids_localevents}, {@memory_recursiveprot}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_hugetlb_accounting}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_recursiveprot}], [{@permit_directio}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '-'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nl80211\x00'}}]})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="040024000a001800d0260b861288fbc9"], 0x2c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3}) (async)
write(r3, &(0x7f0000000c00)='1', 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0) (async)
syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) (async)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81) (async)

program crashed: lost connection to test machine
validation run: crashed=true
testing program (duration=1m14.261840718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch-mount$cgroup2-sendmsg$NL80211_CMD_JOIN_MESH-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3})
write(r3, &(0x7f0000000c00)='1', 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0)
r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81)
mount$cgroup2(0x0, &(0x7f0000000040)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', &(0x7f0000000100), 0x80020, &(0x7f0000000280)={[{@pids_localevents}, {@memory_recursiveprot}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_hugetlb_accounting}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_recursiveprot}], [{@permit_directio}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '-'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nl80211\x00'}}]})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="040024000a001800d0260b861288fbc9"], 0x2c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3}) (async)
write(r3, &(0x7f0000000c00)='1', 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0) (async)
syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) (async)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81) (async)

program did not crash
validation run: crashed=false
testing program (duration=1m14.261840718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch-mount$cgroup2-sendmsg$NL80211_CMD_JOIN_MESH-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3})
write(r3, &(0x7f0000000c00)='1', 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0)
r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81)
mount$cgroup2(0x0, &(0x7f0000000040)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', &(0x7f0000000100), 0x80020, &(0x7f0000000280)={[{@pids_localevents}, {@memory_recursiveprot}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_hugetlb_accounting}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_recursiveprot}], [{@permit_directio}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '-'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nl80211\x00'}}]})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="040024000a001800d0260b861288fbc9"], 0x2c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3}) (async)
write(r3, &(0x7f0000000c00)='1', 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0) (async)
syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) (async)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81) (async)

program crashed: lost connection to test machine
validation run: crashed=true
testing program (duration=1m14.261840718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch-mount$cgroup2-sendmsg$NL80211_CMD_JOIN_MESH-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3})
write(r3, &(0x7f0000000c00)='1', 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0)
r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81)
mount$cgroup2(0x0, &(0x7f0000000040)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', &(0x7f0000000100), 0x80020, &(0x7f0000000280)={[{@pids_localevents}, {@memory_recursiveprot}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_hugetlb_accounting}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_recursiveprot}], [{@permit_directio}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '-'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nl80211\x00'}}]})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="040024000a001800d0260b861288fbc9"], 0x2c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3}) (async)
write(r3, &(0x7f0000000c00)='1', 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0) (async)
syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) (async)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81) (async)

program did not crash
validation run: crashed=false
testing program (duration=1m14.261840718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch-mount$cgroup2-sendmsg$NL80211_CMD_JOIN_MESH-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-mkdirat-mount-mkdirat-openat-syz_open_dev$tty1-ioctl$VT_RESIZEX-write-ioctl$sock_SIOCGIFINDEX_80211-openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_open_dev$ublk_chdev-pwrite64$ublk_ch
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3})
write(r3, &(0x7f0000000c00)='1', 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0)
r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81)
mount$cgroup2(0x0, &(0x7f0000000040)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', &(0x7f0000000100), 0x80020, &(0x7f0000000280)={[{@pids_localevents}, {@memory_recursiveprot}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_hugetlb_accounting}, {@pids_localevents}, {@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_recursiveprot}], [{@permit_directio}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '-'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nl80211\x00'}}]})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="040024000a001800d0260b861288fbc9"], 0x2c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x20, 0x132, 0x3}) (async)
write(r3, &(0x7f0000000c00)='1', 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0) (async)
syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) (async)
pwrite64$ublk_ch(r12, 0x0, 0x0, 0x81) (async)

program crashed: lost connection to test machine
validation run: crashed=true
reproducing took 32m59.384303163s
repro crashed as (corrupted=false):

final repro crashed as (corrupted=false):