Extracting prog: 1h18m59.911728162s Minimizing prog: 3h27m3.614221881s Simplifying prog options: 12m40.624647982s Extracting C: 5m5.694583771s Simplifying C: 0s extracting reproducer from 67 programs testing a last program of every proc single: executing 17 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-socket$rxrpc-bind$rxrpc-socket$nl_netfilter-sendmsg$IPCTNL_MSG_TIMEOUT_NEW-listen-recvmmsg-socket$nl_route-close_range-openat$binder_debug-close_range detailed listing: executing program 0: r0 = io_uring_setup(0x17c7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000040801010000000011000000000000000500030084000000090001007379fb5300000000060002"], 0x4c}}, 0x40000c0) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sw_sync-bpf$PROG_LOAD-madvise-syz_open_procfs$pagemap-mmap-mmap$IORING_OFF_SQ_RING-userfaultfd-set_mempolicy-ioctl$UFFDIO_API-openat$btrfs_control-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_open_dev$dri-ioctl$DRM_IOCTL_SET_CLIENT_CAP-ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_MODE_ATOMIC-ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES-ioctl$UFFDIO_REGISTER-ioctl$UFFDIO_COPY-ioctl$PAGEMAP_SCAN-personality-userfaultfd-syz_open_dev$sg-preadv-syz_open_dev$sndctrl-ioctl$int_in-close_range detailed listing: executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffe5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009404, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00008e6000/0x1000)=nil, 0x1000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000ec0)=[{}], 0x1, 0x1ff, 0x0, 0x0, 0x0, 0x1f}) personality(0x6) userfaultfd(0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x9, 0x501040) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/148}, {&(0x7f0000000140)=""/49}, {&(0x7f0000000200)=""/187}], 0x3, 0x80000002, 0x4) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socketpair$unix-bpf$MAP_CREATE-bpf$MAP_DELETE_ELEM-recvmsg$unix-openat-getpeername$unix-quotactl_fd$Q_GETNEXTQUOTA-syz_clone-syz_open_procfs$namespace-syz_clone-sendmsg$nl_route-bpf$MAP_DELETE_ELEM-close-sendmsg$NFT_BATCH-setns detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0xc0, 0x9, 0xa, 0x101, 0x0, 0x0, {0xf, 0x0, 0x4}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_EXPRESSIONS={0x9c, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELRULE={0x10c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x1f, 0x7, 0x1, 0x0, "a0ded2e17daf4d79e0241cc33a4e1e31038dd5949b6f613a5ec38b"}, @NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x19}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2b}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xd2}, @NFTA_PAYLOAD_DREG={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x84, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_OBJ_NAME={0xfffffe65, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x29, 0x8, "e46e2a8258e6676805a07372f6bd21f02323f497629b408a1c1ef02186992a37153d489697"}, @NFTA_OBJ_USERDATA={0x1f, 0x8, "a5f1a563019378309c9c48a55b50d92cb7d5f1beb82c9955d04a35"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x134, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0xa4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x400}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000300), 0x20000000}, 0x20) recvmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/28, 0x1c}], 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) getpeername$unix(r1, &(0x7f0000000580)=@abs, &(0x7f0000000600)=0x6e) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, 0x0, 0x0) r5 = syz_clone(0x4000, 0x0, 0xffffffffffffff3a, 0x0, 0x0, 0x0) r6 = syz_open_procfs$namespace(r5, &(0x7f0000000440)='ns/net\x00') r7 = syz_clone(0x100000, &(0x7f0000000100)="0c066163e3909e9eb58a7020866bfe9fc9c718d6f601adfa62c086d7c1f8b62911bd8c9a5cb89268605ecc7e4ca47cfea49b63908a554f96ca24cb3b38c3b50b96b83518cfbfc91452586ccf24babbe7d06cb2f58fdf96e2931c69289d3230a9a6fe2a91151aac120f84fd4fa7d5d6eef03cb0dc783d2c440f4f7d26104e8255d2ea8e72961f49a2e9820edec28dec38e6ac7b702d66edf1afdbf7d3e512cb07ffff6beaf8822f", 0xa7, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000400)="22bf4741c1b4bf3e0064a78937e2") sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@RTM_NEWNSID={0x4c, 0x58, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}]}, 0x4c}}, 0x894) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={r3, &(0x7f0000001c80)}, 0x20) close(r2) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}}, 0x0) setns(r6, 0x80) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$inet6_buf-socket$nl_route-socket-sendmsg$SEG6_CMD_GET_TUNSRC-mkdir-pipe2$9p-bpf$BPF_MAP_GET_FD_BY_ID-write$P9_RVERSION-dup-write$P9_RLERRORu-write$RDMA_USER_CM_CMD_SET_OPTION-write$RDMA_USER_CM_CMD_BIND_IP-write$binfmt_elf64-mount$9p_fd-chdir-openat$cgroup_ro-syz_emit_ethernet-getsockname$packet-creat-mount$tmpfs-socket$netlink-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$nullb-dup-mmap-sendmsg$nl_route-syz_genetlink_get_family_id$nl80211 detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000003c0)="0022041100ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77a62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a12", 0x98) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0, 0x34}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x9, 0x8}, 0xc) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="7fb20700000053c407cd", @ANYRESHEX=r1], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x10) syz_emit_ethernet(0x22, &(0x7f00000006c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @dev, @local}}}}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000e80007000000", @ANYRES32=r8, @ANYBLOB="000000000a0002"], 0x28}}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r10, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x20, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex_waitv-syz_open_dev$evdev-syz_emit_vhci-socket-bpf$MAP_CREATE_TAIL_CALL-openat$tun-socket$igmp6-setsockopt$IP6T_SO_SET_REPLACE-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-syz_genetlink_get_family_id$nl80211-write$tun detailed listing: executing program 0: futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000)=0x3, 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="86000000c8001d"], 0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd03000000f5ff1400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xfdef) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex_waitv-syz_open_dev$evdev-syz_emit_vhci-socket-bpf$MAP_CREATE_TAIL_CALL-openat$tun-socket$igmp6-setsockopt$IP6T_SO_SET_REPLACE-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-syz_genetlink_get_family_id$nl80211-write$tun detailed listing: executing program 0: futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000)=0x3, 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="86000000c8001d"], 0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd03000000f5ff1400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xfdef) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmsg$nl_route_sched-getsockname$packet-sendmsg$nl_route_sched-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$netlink-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-openat$cgroup-openat$cgroup_pressure-write$cgroup_pressure-write$cgroup_pressure-write$cgroup_pressure-sendmmsg detailed listing: executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x11}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x11}]}}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'full', 0x20, 0x1, 0x20, 0x100002}, 0x2f) (async) write$cgroup_pressure(r6, &(0x7f0000000080)={'full', 0x20, 0x1, 0x20, 0x100002}, 0x2f) write$cgroup_pressure(r6, &(0x7f0000000240)={'some'}, 0x2f) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmsg$nl_route_sched-getsockname$packet-sendmsg$nl_route_sched-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$netlink-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-openat$cgroup-openat$cgroup_pressure-write$cgroup_pressure-write$cgroup_pressure-write$cgroup_pressure-sendmmsg detailed listing: executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x11}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x11}]}}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'full', 0x20, 0x1, 0x20, 0x100002}, 0x2f) (async) write$cgroup_pressure(r6, &(0x7f0000000080)={'full', 0x20, 0x1, 0x20, 0x100002}, 0x2f) write$cgroup_pressure(r6, &(0x7f0000000240)={'some'}, 0x2f) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_UPDATE_ELEM_TAIL_CALL-io_uring_setup-bpf$PROG_LOAD_XDP detailed listing: executing program 0: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) io_uring_setup(0x154c, &(0x7f0000000200)={0x0, 0x0, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x9, &(0x7f0000000200)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_UPDATE_ELEM_TAIL_CALL-io_uring_setup-bpf$PROG_LOAD_XDP detailed listing: executing program 0: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) io_uring_setup(0x154c, &(0x7f0000000200)={0x0, 0x0, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x9, &(0x7f0000000200)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex_waitv-syz_open_dev$evdev-syz_emit_vhci-socket-bpf$MAP_CREATE_TAIL_CALL-openat$tun-socket$igmp6-setsockopt$IP6T_SO_SET_REPLACE-socket$kcm-ioctl$SIOCSIFHWADDR-syz_genetlink_get_family_id$nl80211-write$tun detailed listing: executing program 0: futex_waitv(&(0x7f00000010c0)=[{0x8000000000000001, &(0x7f0000000040)=0x2, 0x82}, {0xe1, &(0x7f0000000080)=0x7, 0x82}, {0x0, &(0x7f00000000c0)=0xffffffffffffff54, 0x82}, {0x7f, &(0x7f0000000100)=0x1282, 0x82}, {0xf, &(0x7f0000000140)=0x8000, 0x2}, {0x81, &(0x7f00000001c0)=0x48000000000, 0x2}, {0x0, &(0x7f0000000200)=0x6, 0x82}, {0x4, &(0x7f0000000240)=0x3ff, 0x2}, {0x9, &(0x7f0000000280)=0x3, 0x2}, {0x3, &(0x7f00000002c0)=0x2, 0x2}, {0x3, &(0x7f0000000300)=0x100000001, 0x2}, {0x6, &(0x7f0000000340)=0x3, 0x82}, {0x9, &(0x7f0000000380)=0x4, 0x82}, {0x4, &(0x7f00000003c0)=0xc, 0x2}, {0x0, &(0x7f0000000400)=0xc, 0x2}, {0xfff, &(0x7f0000000440)=0x4, 0x82}, {0x7, &(0x7f0000000480)=0x5, 0x2}, {0x80, &(0x7f00000004c0), 0x2}, {0xffffffffffffffff, &(0x7f0000000500)=0x101, 0x2}, {0xfff, &(0x7f0000000540)=0x5, 0x86}, {0xfffffffe00000000, &(0x7f0000000580)=0x9, 0x2}, {0x1, &(0x7f0000000680)=0x2, 0x82}, {0x1, &(0x7f00000006c0)=0x8, 0x82}, {0x3, &(0x7f0000000700)=0x3}, {0x8, &(0x7f0000000740)=0x3e, 0x82}, {0x0, &(0x7f0000000780)=0x7ff, 0x2}, {0x0, &(0x7f00000007c0)=0x8000, 0x82}, {0x7, &(0x7f0000000800)=0x7, 0x2}, {0x1, &(0x7f0000000840)=0x40, 0x82}, {0x0, &(0x7f0000000880)=0x3, 0x2}, {0xdd0f, &(0x7f00000008c0)=0x6, 0x2}, {0x2, &(0x7f0000000900)=0x2, 0x82}, {0x7, &(0x7f0000000940)=0x80000000, 0x82}, {0x0, &(0x7f0000000980)=0x81, 0x82}, {0x6, &(0x7f00000009c0)=0xf71, 0x2}, {0xfffffffffffffff9, &(0x7f0000000a00)=0xffff, 0x82}, {0x8000, &(0x7f0000000a40)=0x2, 0x2}, {0x0, &(0x7f0000000a80)=0xfffffffffffffffb, 0x2}, {0x6, &(0x7f0000000ac0)=0x3, 0x2}, {0x8, &(0x7f0000000fc0)=0x8c}, {0x4, &(0x7f0000001000)=0x43, 0x82}, {0x15, &(0x7f0000001040)=0x1ff, 0x80}, {0x1ff, &(0x7f0000001080)=0x1bb4, 0x82}], 0x2b, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="86000000c8001d"], 0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xfdef) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex_waitv-syz_open_dev$evdev-syz_emit_vhci-socket-bpf$MAP_CREATE_TAIL_CALL-openat$tun-socket$igmp6-setsockopt$IP6T_SO_SET_REPLACE-socket$kcm-ioctl$SIOCSIFHWADDR-syz_genetlink_get_family_id$nl80211-write$tun detailed listing: executing program 0: futex_waitv(&(0x7f00000010c0)=[{0x8000000000000001, &(0x7f0000000040)=0x2, 0x82}, {0xe1, &(0x7f0000000080)=0x7, 0x82}, {0x0, &(0x7f00000000c0)=0xffffffffffffff54, 0x82}, {0x7f, &(0x7f0000000100)=0x1282, 0x82}, {0xf, &(0x7f0000000140)=0x8000, 0x2}, {0x81, &(0x7f00000001c0)=0x48000000000, 0x2}, {0x0, &(0x7f0000000200)=0x6, 0x82}, {0x4, &(0x7f0000000240)=0x3ff, 0x2}, {0x9, &(0x7f0000000280)=0x3, 0x2}, {0x3, &(0x7f00000002c0)=0x2, 0x2}, {0x3, &(0x7f0000000300)=0x100000001, 0x2}, {0x6, &(0x7f0000000340)=0x3, 0x82}, {0x9, &(0x7f0000000380)=0x4, 0x82}, {0x4, &(0x7f00000003c0)=0xc, 0x2}, {0x0, &(0x7f0000000400)=0xc, 0x2}, {0xfff, &(0x7f0000000440)=0x4, 0x82}, {0x7, &(0x7f0000000480)=0x5, 0x2}, {0x80, &(0x7f00000004c0), 0x2}, {0xffffffffffffffff, &(0x7f0000000500)=0x101, 0x2}, {0xfff, &(0x7f0000000540)=0x5, 0x86}, {0xfffffffe00000000, &(0x7f0000000580)=0x9, 0x2}, {0x1, &(0x7f0000000680)=0x2, 0x82}, {0x1, &(0x7f00000006c0)=0x8, 0x82}, {0x3, &(0x7f0000000700)=0x3}, {0x8, &(0x7f0000000740)=0x3e, 0x82}, {0x0, &(0x7f0000000780)=0x7ff, 0x2}, {0x0, &(0x7f00000007c0)=0x8000, 0x82}, {0x7, &(0x7f0000000800)=0x7, 0x2}, {0x1, &(0x7f0000000840)=0x40, 0x82}, {0x0, &(0x7f0000000880)=0x3, 0x2}, {0xdd0f, &(0x7f00000008c0)=0x6, 0x2}, {0x2, &(0x7f0000000900)=0x2, 0x82}, {0x7, &(0x7f0000000940)=0x80000000, 0x82}, {0x0, &(0x7f0000000980)=0x81, 0x82}, {0x6, &(0x7f00000009c0)=0xf71, 0x2}, {0xfffffffffffffff9, &(0x7f0000000a00)=0xffff, 0x82}, {0x8000, &(0x7f0000000a40)=0x2, 0x2}, {0x0, &(0x7f0000000a80)=0xfffffffffffffffb, 0x2}, {0x6, &(0x7f0000000ac0)=0x3, 0x2}, {0x8, &(0x7f0000000fc0)=0x8c}, {0x4, &(0x7f0000001000)=0x43, 0x82}, {0x15, &(0x7f0000001040)=0x1ff, 0x80}, {0x1ff, &(0x7f0000001080)=0x1bb4, 0x82}], 0x2b, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="86000000c8001d"], 0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xfdef) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-mkdir-mount-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_S_FMT-chdir-mkdirat-mkdirat-mkdirat-mount$overlay detailed listing: executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800400, 0x0) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000005, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0x1, @win={{0x7fffffff, 0x0, 0x10000, 0x4}, 0x4, 0x2, 0x0, 0x7, 0x0, 0xf8}}) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-mkdir-mount-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_S_FMT-chdir-mkdirat-mkdirat-mkdirat-mount$overlay detailed listing: executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800400, 0x0) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000005, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0x1, @win={{0x7fffffff, 0x0, 0x10000, 0x4}, 0x4, 0x2, 0x0, 0x7, 0x0, 0xf8}}) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-openat$iommufd-ioctl$IOMMU_IOAS_ALLOC-ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES-socket$nl_route-getsockname$packet-socket$nl_route-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x6, r2}) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000580)="0f20e035200000000f22e082970e000000d466ba4200b005ee0f01c50f060f01c3b8cc0000000f23d80f21f80f20d20f23f8c744240000080000c7442402bd0b0000c7442406000000000f011424649c660f75e6", 0x54}], 0x1, 0x53, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000700000022abd7000fbdbdf2507000000", @ANYRES32=r3, @ANYBLOB="10000180520e04060002000e00"/28], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40) program did not crash single: failed to extract reproducer bisect: bisecting 67 programs with base timeout 30s testing program (duration=46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 29, 25, 5, 24, 2, 10, 10, 25, 11, 4, 40, 9, 12, 12, 30, 20, 24, 17, 23, 3, 3, 4, 20, 5, 15, 18, 18, 18, 10, 4, 4, 26, 4, 16, 16, 4, 6, 21, 22, 5, 13, 13, 11, 11, 11, 4, 12, 11, 16, 8, 5, 1, 18, 4, 9, 11, 11, 14, 11, 5, 4, 30, 18, 22, 27, 11] detailed listing: executing program 32: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x6, r2}) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000580)="0f20e035200000000f22e082970e000000d466ba4200b005ee0f01c50f060f01c3b8cc0000000f23d80f21f80f20d20f23f8c744240000080000c7442402bd0b0000c7442406000000000f011424649c660f75e6", 0x54}], 0x1, 0x53, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000700000022abd7000fbdbdf2507000000", @ANYRES32=r3, @ANYBLOB="10000180520e04060002000e00"/28], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80c00, 0x0, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000200)={0xaf68, [0x866, 0x4], 0x3}, 0x10) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYRES32, @ANYRESHEX=r3], 0x20}, 0x1, 0x0, 0x0, 0x404c050}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0xe0c}}, 0x4) recvmmsg(r5, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/161, 0xa1}], 0x1}, 0x4}], 0x1, 0x10002, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000300)=0x10, 0x4) r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff], [0x400, 0x2], [0xfff]], '\x00', [{0x0, 0x1, 0x1}, {}, {}, {}, {0x0, 0xfffffffd}]}) ioctl$TCFLSH(r2, 0x540b, 0x2) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80}}, 0x1c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r9, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x43, 0x1a1413, 0x0, 0x3, 0xfffffffe, 0x0, 0x4000}) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00'}) dup3(r10, r11, 0x0) write$cgroup_pid(r9, &(0x7f00000031c0), 0x12) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000004c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80800) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x0, 0x6}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000500)={r6, r4}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r2, r1}) r8 = accept4(r0, 0x0, 0x0, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x56209516, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x2018, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}}) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0x2dc}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000) r10 = accept4$unix(r8, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80800) recvmsg$unix(r10, &(0x7f0000000480)={&(0x7f0000000140), 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/180, 0xb4}, {&(0x7f0000000280)=""/49, 0x31}], 0x2, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x40012002) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x200, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x213aa, 0x20}, [@IFLA_EXT_MASK={0x8}]}, 0x28}}, 0x4000010) r12 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r12, 0x80044942, &(0x7f00000003c0)) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@can_delroute={0x4c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x1}, [@CGW_MOD_UID={0x8, 0xe, r2}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x0, 0x1, 0x1}, 0x4, 0xc5310a51c33e5ef, 0x0, 0x0, "722223c843fd500c"}, 0x1}}, @CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "c133188aafd52dde"}, 0x2}}]}, 0x4c}, 0x1, 0xba01}, 0x4851) executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (async) executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x100) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x4, 0xff, 0x8, 0x7, "2ecdc1bc7e8106fbe610822c1000"}) executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800400, 0x0) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000005, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0x1, @win={{0x7fffffff, 0x0, 0x10000, 0x4}, 0x4, 0x2, 0x0, 0x7, 0x0, 0xf8}}) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) executing program 33: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800400, 0x0) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000005, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0x1, @win={{0x7fffffff, 0x0, 0x10000, 0x4}, 0x4, 0x2, 0x0, 0x7, 0x0, 0xf8}}) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = dup(r1) r3 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0x0, 0xf}, {0x0, 0x9}}}, 0x24}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000008000008", 0x1d) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000040)={0x80, 0x32314247, 0x140, 0xb4, 0x3, @stepwise={{0xc, 0x4a}, {0x5, 0x6451}, {0x0, 0x8}}}) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x82fb, 0x0, "1eb4d100"}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r5 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0xd191, 0x10100, 0x0, 0xa4}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x402}}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000001000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff49"]) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050028"], 0x7c}}, 0x0) executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x4}, 0x8) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000040)={0x9, 0x38, [0x7, 0xf, 0x5, 0x8000], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) syz_clone(0x2080b200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x2080b200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r3 = fanotify_init(0x0, 0x0) r4 = open$dir(&(0x7f00000002c0)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x641, 0x48001018, r4, 0x0) (async) fanotify_mark(r3, 0x641, 0x48001018, r4, 0x0) fanotify_mark(r3, 0x1, 0x103b, r4, 0x0) mkdirat(r4, &(0x7f0000002500)='./bus\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}, {@nfs_export_off}]}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x0, 0x2, 0x400000, 0x10000, @value=r2}, 0x28) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd00) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000002440)={&(0x7f0000002300), 0xc, &(0x7f0000002400)={&(0x7f0000002340)=ANY=[@ANYBLOB="7c00000001080102000000000000000001000001040004800900010073797a3000000000000500030011dd0000060002400a0000002c00048008000140000000090800014000000003080001400000800008000140fffff9c6080001400000000806000240430500000900010073797a3000"/124], 0x7c}, 0x1, 0x0, 0x0, 0x821}, 0x804) fcntl$setownex(r6, 0xf, &(0x7f0000000040)={0x2, r1}) (async) fcntl$setownex(r6, 0xf, &(0x7f0000000040)={0x2, r1}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000023c0)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2181c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_STD(r8, 0x80085617, &(0x7f0000000040)) (async) ioctl$VIDIOC_G_STD(r8, 0x80085617, &(0x7f0000000040)) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r9, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f00000025c0)={{{@in6=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) read$FUSE(r5, &(0x7f00000002c0)={0x2020}, 0xab5) (async) read$FUSE(r5, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0}, 0xab5) setresuid(r7, r10, r11) (async) setresuid(r7, r10, r11) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)=0x1) (async) write$tun(r1, &(0x7f0000000240)={@val, @val={0x3}, @llc={@snap={0x0, 0x0, "03", "53548b"}}}, 0x16) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close_range(r3, r3, 0x0) executing program 2: futex_waitv(&(0x7f00000010c0)=[{0x8000000000000001, &(0x7f0000000040)=0x2, 0x82}, {0xe1, &(0x7f0000000080)=0x7, 0x82}, {0x0, &(0x7f00000000c0)=0xffffffffffffff54, 0x82}, {0x7f, &(0x7f0000000100)=0x1282, 0x82}, {0xf, &(0x7f0000000140)=0x8000, 0x2}, {0x81, &(0x7f00000001c0)=0x48000000000, 0x2}, {0x0, &(0x7f0000000200)=0x6, 0x82}, {0x4, &(0x7f0000000240)=0x3ff, 0x2}, {0x9, &(0x7f0000000280)=0x3, 0x2}, {0x3, &(0x7f00000002c0)=0x2, 0x2}, {0x3, &(0x7f0000000300)=0x100000001, 0x2}, {0x6, &(0x7f0000000340)=0x3, 0x82}, {0x9, &(0x7f0000000380)=0x4, 0x82}, {0x4, &(0x7f00000003c0)=0xc, 0x2}, {0x0, &(0x7f0000000400)=0xc, 0x2}, {0xfff, &(0x7f0000000440)=0x4, 0x82}, {0x7, &(0x7f0000000480)=0x5, 0x2}, {0x80, &(0x7f00000004c0), 0x2}, {0xffffffffffffffff, &(0x7f0000000500)=0x101, 0x2}, {0xfff, &(0x7f0000000540)=0x5, 0x86}, {0xfffffffe00000000, &(0x7f0000000580)=0x9, 0x2}, {0x1, &(0x7f0000000680)=0x2, 0x82}, {0x1, &(0x7f00000006c0)=0x8, 0x82}, {0x3, &(0x7f0000000700)=0x3}, {0x8, &(0x7f0000000740)=0x3e, 0x82}, {0x0, &(0x7f0000000780)=0x7ff, 0x2}, {0x0, &(0x7f00000007c0)=0x8000, 0x82}, {0x7, &(0x7f0000000800)=0x7, 0x2}, {0x1, &(0x7f0000000840)=0x40, 0x82}, {0x0, &(0x7f0000000880)=0x3, 0x2}, {0xdd0f, &(0x7f00000008c0)=0x6, 0x2}, {0x2, &(0x7f0000000900)=0x2, 0x82}, {0x7, &(0x7f0000000940)=0x80000000, 0x82}, {0x0, &(0x7f0000000980)=0x81, 0x82}, {0x6, &(0x7f00000009c0)=0xf71, 0x2}, {0xfffffffffffffff9, &(0x7f0000000a00)=0xffff, 0x82}, {0x8000, &(0x7f0000000a40)=0x2, 0x2}, {0x0, &(0x7f0000000a80)=0xfffffffffffffffb, 0x2}, {0x6, &(0x7f0000000ac0)=0x3, 0x2}, {0x8, &(0x7f0000000fc0)=0x8c}, {0x4, &(0x7f0000001000)=0x43, 0x82}, {0x15, &(0x7f0000001040)=0x1ff, 0x80}, {0x1ff, &(0x7f0000001080)=0x1bb4, 0x82}], 0x2b, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="86000000c8001d"], 0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xfdef) executing program 34: futex_waitv(&(0x7f00000010c0)=[{0x8000000000000001, &(0x7f0000000040)=0x2, 0x82}, {0xe1, &(0x7f0000000080)=0x7, 0x82}, {0x0, &(0x7f00000000c0)=0xffffffffffffff54, 0x82}, {0x7f, &(0x7f0000000100)=0x1282, 0x82}, {0xf, &(0x7f0000000140)=0x8000, 0x2}, {0x81, &(0x7f00000001c0)=0x48000000000, 0x2}, {0x0, &(0x7f0000000200)=0x6, 0x82}, {0x4, &(0x7f0000000240)=0x3ff, 0x2}, {0x9, &(0x7f0000000280)=0x3, 0x2}, {0x3, &(0x7f00000002c0)=0x2, 0x2}, {0x3, &(0x7f0000000300)=0x100000001, 0x2}, {0x6, &(0x7f0000000340)=0x3, 0x82}, {0x9, &(0x7f0000000380)=0x4, 0x82}, {0x4, &(0x7f00000003c0)=0xc, 0x2}, {0x0, &(0x7f0000000400)=0xc, 0x2}, {0xfff, &(0x7f0000000440)=0x4, 0x82}, {0x7, &(0x7f0000000480)=0x5, 0x2}, {0x80, &(0x7f00000004c0), 0x2}, {0xffffffffffffffff, &(0x7f0000000500)=0x101, 0x2}, {0xfff, &(0x7f0000000540)=0x5, 0x86}, {0xfffffffe00000000, &(0x7f0000000580)=0x9, 0x2}, {0x1, &(0x7f0000000680)=0x2, 0x82}, {0x1, &(0x7f00000006c0)=0x8, 0x82}, {0x3, &(0x7f0000000700)=0x3}, {0x8, &(0x7f0000000740)=0x3e, 0x82}, {0x0, &(0x7f0000000780)=0x7ff, 0x2}, {0x0, &(0x7f00000007c0)=0x8000, 0x82}, {0x7, &(0x7f0000000800)=0x7, 0x2}, {0x1, &(0x7f0000000840)=0x40, 0x82}, {0x0, &(0x7f0000000880)=0x3, 0x2}, {0xdd0f, &(0x7f00000008c0)=0x6, 0x2}, {0x2, &(0x7f0000000900)=0x2, 0x82}, {0x7, &(0x7f0000000940)=0x80000000, 0x82}, {0x0, &(0x7f0000000980)=0x81, 0x82}, {0x6, &(0x7f00000009c0)=0xf71, 0x2}, {0xfffffffffffffff9, &(0x7f0000000a00)=0xffff, 0x82}, {0x8000, &(0x7f0000000a40)=0x2, 0x2}, {0x0, &(0x7f0000000a80)=0xfffffffffffffffb, 0x2}, {0x6, &(0x7f0000000ac0)=0x3, 0x2}, {0x8, &(0x7f0000000fc0)=0x8c}, {0x4, &(0x7f0000001000)=0x43, 0x82}, {0x15, &(0x7f0000001040)=0x1ff, 0x80}, {0x1ff, &(0x7f0000001080)=0x1bb4, 0x82}], 0x2b, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="86000000c8001d"], 0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xfdef) executing program 1: close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000380)={0x4, &(0x7f0000000300)=[{0x5, 0xae, &(0x7f0000000040)="26ba3becd30dfb800678f5315c60f89ee5ec705987177210349fe2411886c44ea97aeb7fed41ae93107e6dc77f6049b17da8f90a84206f9b58ea5225ffb621a3669ec2384c0d5397dcfa70754b3b135945db47cff9a6b30735fb16a80e708b167c6407969e8393e1ac36c7d0eacc25d277ef1ad6f6d5923af6201a5097f8ab09354fd840a7cd37b0c9b19baf2a1d38f7d95626d462d9811f7781cf9ca69fee5d8f6b8ebac7582a6bd44f4bff525d"}, {0x7, 0xf5, &(0x7f0000000100)="f3cc2f4a0289a4f6f394aee8de9ec44dec1e2a6cc29100d4b046be66d575fcbcc61d5fba90953cd6c273c1ad64d1abc68e11db5c4b54ea7c8f44b82abd64a6a4c60b658a3156b99cb0a733c13a1dd7450f39fcc9da38490b3a366a7f78f4921281cc684c1b0f8ead98e377ce5086c53a13a2133d963ebc76ce6eea59a28b7e3fd509f49c9c0cd1ce20147ee5698aeca0cec6d130f3307892a5d480d9528121b52f5dc6ecd91a8950e1af74fac04dbe5256b554d37f625c34a6858248225a920fe6005d8d1d795c282c04071a376684a249b08e61e7afbbaa6072dfb78695a7f6bd54b32bb6e4e1bf77b1327abd7947e54392623357", 0x0, 0x1}, {0xff, 0x96, &(0x7f0000000200)="27abb340427806db882e7a86d135d2ac6eefa807e3966a65d30abf1b2d875b1a302d55c116d861cf8d461c4a2f503630c6d713c70ef994137eb397beb6d8ff3ddfba3cda76cdacb02af5f25ef1c10ea69e47caa19c21d30febfce8c6b3e96c7ac2a2d849bdbe6ca6044a11140c86e73d0cc31319e6975ced1a6387ad9e26cbff6e8dcb717467497f2ee7cfe11fe5b97610dd70b693c8", 0x0, 0x1}, {0x1ff, 0x16, &(0x7f00000002c0)="a55ecfbffe509ee23a9501b6e9daf359987d068627fe", 0x0, 0x1}]}) sendmsg$nl_generic(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe8, 0x1f, 0x400, 0x70bd2d, 0x25dfdbfd, {0xb}, [@typed={0x8, 0xb0, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x44}, @generic="f042b6f484ad307c09af743998a8fe752d3479da9adef0f81e027f9b5e449366dcee6cd3798fb937e8bfe551d9ec93a51dc122a8f44ab39d92db788a7bbf975cd71b1232767b6c4f72e897af93336962cb6871cf9d1c2413ce36d5c64b6807b3a9746309e97ab67cfdd1849b32cbef23f4f3346b513c7212c084a478cee657d439daf246c7c3b5eb3ebcf9a553ee6296", @typed={0x14, 0x11b, 0x0, 0x0, @ipv6=@remote}, @typed={0x4, 0x5b}, @typed={0x1d, 0xdc, 0x0, 0x0, @binary="1357f61e9116acc57c59fc3302951d0a5e9cb2a19d7ed1a05b"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4010}, 0x10) setxattr$trusted_overlay_opaque(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), &(0x7f0000000600), 0x2, 0x3) unlinkat(r0, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000680)) r1 = socket$kcm(0x29, 0x5, 0x0) rename(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00') ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000740)) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000800)=""/93) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fffffff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000100) mount$bind(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x25010, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000a40)={0x9, 0x6, 0xfff5}) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000a80)=0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000ac0)={{0x2, 0x4e24, @local}, {0x6, @broadcast}, 0x58, {0x2, 0x4e24, @multicast1}, 'veth1_macvtap\x00'}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000b40)={'wg0\x00'}) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000b80)={0x7, [0x7ff, 0x10, 0x1, 0x7, 0x400, 0x7, 0x3]}, 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0xe81, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000c00)={{0x2, 0x4e21, @rand_addr=0x3b}, {0x1, @remote}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, 'hsr0\x00'}) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000c80)={0x2, 0x2263}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000cc0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$MON_IOCQ_RING_SIZE(r5, 0x9205) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) sendmmsg(r4, &(0x7f0000001140)=[{{&(0x7f0000000d00)=@ethernet={0x306, @local}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d80)="ded4e5f6b6e33fd6a1de396dcc6603bb971975f8e2474e868422d5725094f9e65d7bf966c0a169019942", 0x2a}, {&(0x7f0000000dc0)="5e8fea8077e7a2de0a26d921ad292c24b3cfc7625553c653f3a6756e2e397d9c3a81041dfcec68512d5307064e4bee488dcd15781618405c877f42e188ca73b0fb2970254b83515c19752055b6e7e1cd3008a7e426038a04842d4baaa3ceafc2811c20bfc9dbb59336d6ae02702c0864a809f291ad7aa6219933a1382766542f04d1ee14c5334b8db58327", 0x8b}, {&(0x7f0000000e80)="fb81d8b29da8b73a90777afad0db085565e17f1885569cb769bf9503ba372c3fcb496fab2bdcd3aeda48c59d22d7322b977416", 0x33}, {&(0x7f0000000ec0)="c5a564399625d52a5325167496f6b1f202f32377674b1b7f45dbd098d296d7e7", 0x20}], 0x4, &(0x7f0000000f40)=[{0xd8, 0x101, 0x9, "59b1620b7312fa7e16fe7ad88da78f7148feaa85014a15b51e734129c307bc4319aae311941a916e2e5b41f7d308587958caba134473503e55c8b636a7b21fc1734c64fb7f71caf678f0a2b86a4745f17061e5fce2ac2de901b4482cdb9cce70cca40b930f7b1f3f1d9033d5151e5798605b658d6f9895c850be07569faee7168ed83c24a7600cc47ded1276123c87c142b346a47cd88e406aff9a07016bf75e54d6821d654822315238ca23c99aec2f00a8394d18eef6056ff09a7a73aba7f1f19c6a298584b0"}, {0x58, 0x10d, 0x4, "990fd5c3e17a3e8a9e207f64ceaa62dce48ad7014a30fcf46706c87d4754501e09592bfecc64a5fcb9b1d53279557c0c4046b70f6719c88b61d7f56264dbfc2417c77b4d6bcc202e"}, {0xc8, 0x84, 0x77, "70157a26994f06567707881ec9b9110e028af21012154c44c7cedba4379fa009fb579014f7a6efa47419227c0a65d9f462b9187dfd13772abadc3fd7cddcdf62a34e97eb9af61a0c67fa5d5a4c1cf235ee8545193f3e5d0139d1275fc3b1b854c28c3b3dbfec40d43ce8681babd5298df88d5fcc843b5e655ac955d7baca5ee5d9600e834b88647ab16721cf7922066ec2629752a8eeb20597cbf4d7e4cf3cd71c7223511a936929362cc311b06546df18bb862ca52a30"}], 0x1f8}}], 0x1, 0x44842) ioctl$TCXONC(r3, 0x540a, 0x3) syz_open_dev$sndmidi(&(0x7f0000001180), 0x37, 0x40800) executing program 1: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x1000000, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xfff1, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {}, 0x1, 0x7f}}, @TCA_TBF_RATE64={0xc, 0x4, 0xe5d11327db56db0}]}}]}, 0x64}}, 0x0) r5 = socket(0xa, 0x3, 0x3a) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020300000009210000010122290a090581ffff"], 0x0) r6 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x80000, 0x0) pread64(r6, 0x0, 0x0, 0x7fffffffffffffff) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSABS0(r7, 0x401845c0, 0x0) close(r7) r8 = inotify_init1(0x80800) fallocate(r8, 0x8, 0x2, 0x8) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) socket(0xa, 0x3, 0x3a) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000040)) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e896330400b96a9d"], 0x0) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = dup(r1) r3 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0x0, 0xf}, {0x0, 0x9}}}, 0x24}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000008000008", 0x1d) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000040)={0x80, 0x32314247, 0x140, 0xb4, 0x3, @stepwise={{0xc, 0x4a}, {0x5, 0x6451}, {0x0, 0x8}}}) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x82fb, 0x0, "1eb4d100"}) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0xd191, 0x10100, 0x0, 0xa4}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x402}}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe83, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="64000000020601004c0003ce000000000000fffd05000400000000000900020073797a30000000000500010007000000050005000a00000014000780080011400000000008001240000afff116000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b01, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = dup(r1) r3 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0x0, 0xf}, {0x0, 0x9}}}, 0x24}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000008000008", 0x1d) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000040)={0x80, 0x32314247, 0x140, 0xb4, 0x3, @stepwise={{0xc, 0x4a}, {0x5, 0x6451}, {0x0, 0x8}}}) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x82fb, 0x0, "1eb4d100"}) r5 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0xd191, 0x10100, 0x0, 0xa4}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x402}}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) io_uring_setup(0x154c, &(0x7f0000000200)={0x0, 0x0, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x9, &(0x7f0000000200)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 35: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) io_uring_setup(0x154c, &(0x7f0000000200)={0x0, 0x0, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x9, &(0x7f0000000200)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/xfrm_stat\x00') mq_timedreceive(r1, 0x0, 0x0, 0x100000001, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) executing program 4: add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f00000002c0)="e263c46fd365c0c8337e2e89e78ece92c7ebae90f4afeca14b01ee89471bbc10", 0x20, 0xfffffffffffffffd) r0 = socket(0x10, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000002f80), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf251000000005000f000900000008000100", @ANYRES32=0x0, @ANYBLOB="7d7c43020cf761ce5e85c159e9a5c9fff2a41d9f787c2de5522799952a1f058160e1f2c16b57ea8693ae26043bc9b40420c85d333564fca0185c9f30c568616f75f8e0a03496317d6fb45b9de5eb2b7608b980665c01bcc040fc02149661db78afd2d851e6f2fbf3fd08d55c238418ca"], 0x24}}, 0x400c4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000440006803c00040067636d28279a732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989040005"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="68010000", @ANYRES16=r6, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x10, &(0x7f00000002c0), 0x4) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r8, &(0x7f0000000080)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @connect}], 0x1c) setresuid(0x0, r3, 0x0) r9 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) setresuid(r3, r9, r10) executing program 4: syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x40) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_open_dev$sg(&(0x7f00000001c0), 0x1, 0x60000) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc211}) r1 = socket$kcm(0x2, 0xa, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="94010000", @ANYRES16=r3, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r4, @ANYBLOB="18007a800c000300784d106960256ff508000400070000004c007a8014000200e9c8b1ba7746ce2ef332bbc5c97a1b740c0003000d15107ef68d60c21400020064f1c7b9c21297fdc91a5ee15a74a83408000400da0000000c000300cb563cf9c3218fa120007a8008000400769a105808000400080000000c000300c38c1d74c2e200ef34007a800c00030082150e2f564a05fd240001004f2f145c8e994f9270345cd125444dad24f0229259a46df93ada14b60e56ea876c007a801400010080561a80fbcb61b368a6c1ea62d953380c000300ac6a00fe5cf7fa7d08000400fdffffff0c00030086191bb4280530d0140002"], 0x194}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000580)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x4, 0x28, 0x65, 0x0, 0x4, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0xf1, 0x0, 0x8}}}}, 0x36) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000280)=0x2, 0x4) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000100)=0xfffffffe, 0x4) sendmsg$tipc(r5, &(0x7f0000001680)={&(0x7f0000000000)=@id, 0x10, 0x0}, 0x0) connect$tipc(r5, &(0x7f0000000140)=@id, 0x10) executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) (async) listen(r0, 0x80080400) (async) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3aa) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x10) statx(r4, 0x0, 0x4000, 0x200, &(0x7f0000000040)) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) (async) mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) mount(&(0x7f0000000000)=@sr0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='hpfs\x00', 0x11, 0x0) executing program 4: r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x11}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x11}]}}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'full', 0x20, 0x1, 0x20, 0x100002}, 0x2f) (async) write$cgroup_pressure(r6, &(0x7f0000000080)={'full', 0x20, 0x1, 0x20, 0x100002}, 0x2f) write$cgroup_pressure(r6, &(0x7f0000000240)={'some'}, 0x2f) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) executing program 36: r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x11}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x11}]}}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'full', 0x20, 0x1, 0x20, 0x100002}, 0x2f) (async) write$cgroup_pressure(r6, &(0x7f0000000080)={'full', 0x20, 0x1, 0x20, 0x100002}, 0x2f) write$cgroup_pressure(r6, &(0x7f0000000240)={'some'}, 0x2f) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) executing program 7: socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000010"]) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x400, {0xa, 0x0, 0x14}, [@FRA_DST={0x14, 0x1, @private0}]}, 0x30}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) (async) creat(&(0x7f0000000000)='./file0\x00', 0x4) executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002a22df29082cf7840700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900000000000000000014000400697036746e6c30000000000000000000"], 0x3c}}, 0x0) executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x8884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x10}}]}, 0x30}}, 0x0) executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000) mkdir(&(0x7f0000000540)='./file0\x00', 0xd0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) ioctl$KDMKTONE(r4, 0x4b30, 0x1) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000000f9ffffff11b000000000009500000000000000950000000000000098c944737ed317fbe80eab1c5052b52dba58f0c482641466509c03d30000000055deabb9906d9c9e38b7c911fcaae06a59faa84a8a30a877925eb6c881e9827391091eeea43471966523bce5ee95a2d1884d557343a98a5f91d66505999dc5a109e127d4b8e5a8b6e0da4cb4072f36fb42da3ff6b918643141c8656a31b06e3c0959808e55318d83ce1a2cf01cbb51e2dada135d79fdd3c1c248aee24f2ade6aa6bf1d25eb05a2828f36de8a5108c5037033abfdff4690bbd3030000001198"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="bf000100000000006111140000000000040000000000000095000000000000001abe5201462857a3db65e291772afa2114f5963ed660b870d974d2252829f8290f8d02e3b0096b3df3e6585851cb7efb50a982b66e14716ffe33a164c3d1ff5798fc4bd6d3e5ab096e9ad743eb00"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@setneightbl={0x30, 0x43, 0x1, 0x70bd29, 0x25dfdbfd, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x656}, @NDTA_THRESH2={0x8, 0x3, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) executing program 37: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) executing program 9: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x8884) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) executing program 9: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="54010000100013070000010000000000000000000000000077fb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040007"], 0x154}}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000004f40)=ANY=[@ANYRESHEX=r0], 0x8) recvmmsg(r0, &(0x7f0000004dc0)=[{{&(0x7f0000000040)=@sco, 0x80, &(0x7f00000002c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/131, 0x83}, {&(0x7f0000000180)=""/216, 0xd8}, {&(0x7f0000000280)=""/58, 0x3a}], 0x4, &(0x7f0000000300)=""/2, 0x2}, 0x5}, {{&(0x7f0000000340)=@tipc=@id, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/113, 0x71}], 0x1, &(0x7f00000015c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000000480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)=""/47, 0x2f}, {&(0x7f00000025c0)=""/161, 0xa1}], 0x2, &(0x7f0000002680)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000003680)=@in, 0x80, &(0x7f0000004a00)=[{&(0x7f0000003700)=""/253, 0xfd}, {&(0x7f0000003800)=""/161, 0xa1}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/44, 0x2c}, {&(0x7f0000004900)=""/157, 0x9d}, {&(0x7f00000049c0)=""/18, 0x12}], 0x6, &(0x7f0000004a80)=""/162, 0xa2}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000004bc0)=[{&(0x7f0000004b40)=""/82, 0x52}], 0x1, &(0x7f0000004c00)=""/9, 0x9}, 0x7a8f}, {{&(0x7f0000004c40)=@pppol2tpv3in6, 0x80, &(0x7f0000004d00)=[{&(0x7f0000004cc0)=""/57, 0x39}], 0x1, &(0x7f0000004d40)=""/96, 0x60}, 0x1}], 0x6, 0x40000040, 0x0) executing program 9: unshare(0x20020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000180)) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async) r1 = open(&(0x7f0000000000)='.\x00', 0x800, 0x0) (async) r2 = socket$inet(0xa, 0x801, 0x84) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000600)={'gre0\x00'}) (async) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r2, 0x8) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0xd, &(0x7f0000000040)={0x0, 0x1bc}, 0x8) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, &(0x7f0000000280), {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x1, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010101, 'macsec0\x00', {0x4}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "9e6c", 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (async) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200) executing program 9: r0 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8afa89, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000580), 0x7fffffffffffffff, 0x40201) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000005c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB="5be45dbdc14fcdc4fe8d3016c16a9e291c96c038b9d7851b494f8dd01b4217712443e927b89df92b5e38091074ebaf46e0dbe8b23b5bb641e3d369e8f256709274c16869fd0de991d821a6ff94e5d6b713b726239848c6560d4ab458f093e9248cc3c57fc760b34548d9506aa960233c4875c245a588c1b7c6f9c9dce4bfa597340adf72199005849185757d6105dcc903cb3d49efaed3f984ef4233f154a97c7569d685a55dbcda5b4752e2a6977e53645101", @ANYRES16=r0, @ANYBLOB="341b784519673cc47239a5e3920cde2ba7714c5df6fa229044d9", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r8}, &(0x7f0000000780), &(0x7f00000007c0)=r5}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@getlink={0x20, 0x12, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10400}}, 0x20}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000047c0)=r3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000007e00)=@newtaction={0x14, 0x32, 0x12f}, 0x14}}, 0x0) executing program 9: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x8884) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) executing program 9: futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000)=0x3, 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="86000000c8001d"], 0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd03000000f5ff1400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xfdef) executing program 38: futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000)=0x3, 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="86000000c8001d"], 0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd03000000f5ff1400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xfdef) executing program 3: r0 = io_uring_setup(0x17c7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000040801010000000011000000000000000500030084000000090001007379fb5300000000060002"], 0x4c}}, 0x40000c0) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) executing program 3: r0 = io_uring_setup(0x17c7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000040801010000000011000000000000000500030084000000090001007379fb5300000000060002"], 0x4c}}, 0x40000c0) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) executing program 3: r0 = io_uring_setup(0x17c7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000040801010000000011000000000000000500030084000000090001007379fb5300000000060002"], 0x4c}}, 0x40000c0) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}, 0x1, 0x0, 0x100000000000000}, 0x8884) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x20008880}}], 0x1, 0x4c054) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xa031, 0xffffffffffffffff, 0x180000000) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000040)={0x2, 0xc, 0x3}) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)={&(0x7f000000c2c0)=@newtaction={0x14, 0x30, 0x400, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x84) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x440200) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) executing program 3: r0 = io_uring_setup(0x17c7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000040801010000000011000000000000000500030084000000090001007379fb5300000000060002"], 0x4c}}, 0x40000c0) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000180)={'veth0_to_bridge\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="360f3366b9800000c00f326635000100000f30debb26ac0f09baf80c66efbafc0cb8f1ffef63aa2161f80466b8ebb83488bafc0cec0fc74a5e260fc75d042e3e0f1bd00f32", 0x4c}], 0x34, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0058a10100d04261a5fb2d002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$inet(0x2, 0xa, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r6}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) executing program 6: madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @remote}]}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x71, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x17) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000006, 0x10010, 0xffffffffffffffff, 0x10000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0x0, 0xb}}}}}]}}]}}, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) (async) ioctl$TCSETS(r0, 0x8910, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe, 0x0, 0x0, "73195a7375845ee299572d7de2efe20f9d5a12"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x4, 0x3, 0x7f, 0x6}, {0x7, 0x0, 0x0, 0x7}, {0x8cf5, 0x9, 0x7, 0xa}, {0x7, 0x4, 0x2, 0xfff}]}) executing program 8: syz_emit_ethernet(0xcb, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xa9, 0x0, @opaque="910bc5170de8bdf06b054f43f7cbcde160584bd7f0db80f38e9dcf7407428fa1380ef6d4dc2090a15b25342a091144aada32df3ae3e4df1adfb5df8d6891630cb713056696eccdbc2f40263296b676bd647fb20bc33fb47374dea1075770c54e6f8d96ce54ef19f71421cd4ede8f16a2389a1ae3fd88271a287591ee1ea853aef4a25c2462984b257eff5265d3584a8175a29c0786586c248bd0fe3a97a49fd39a"}}}}}, 0x0) executing program 8: r0 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000440)={[0x9dd0, 0x4, 0x6, 0x4, 0x3, 0x9, 0x6a16, 0xa, 0xb, 0xfffffff7, 0x1ff, 0x3, 0x2, 0x7, 0x7f, 0x6, 0x10000, 0x9, 0x8, 0xb87e, 0x3ff, 0xca, 0x80, 0xffff, 0x9, 0x2e, 0xffff, 0xfa, 0x6, 0x4, 0x3dc, 0x4, 0x6, 0x7f, 0x9, 0x3, 0x45e, 0x80, 0x6, 0x3, 0xfffffffd, 0x79f00, 0xada, 0x4, 0x12, 0x0, 0x5, 0x2, 0x5, 0x1, 0x5, 0xaa5, 0x9457, 0x2, 0x8, 0x8, 0x7, 0xd9f4, 0x7, 0x4, 0x5, 0x7183, 0x4, 0xf, 0xffff8000, 0x3, 0x4, 0xae, 0x40000000, 0x9, 0x3, 0x8, 0x40, 0xb, 0x2, 0x2, 0x5, 0x41b0, 0xae7, 0xe, 0x2, 0x5, 0x0, 0x0, 0x0, 0x10000, 0x7f, 0x7, 0xbf, 0x82f8, 0x709, 0x5, 0x0, 0xfffffffb, 0x3, 0x133, 0xfffffeff, 0x8, 0x60000, 0x5, 0x10, 0x0, 0x0, 0x7, 0x10001, 0x0, 0xcd5, 0x7ff, 0x0, 0x838, 0x10000, 0x3, 0x6, 0x9, 0x2f06, 0x2, 0x9, 0xb4, 0x4, 0x5, 0xfffffffd, 0x0, 0x2, 0x2, 0x2, 0x0, 0x2ed0, 0x3, 0x5, 0x0, 0x400, 0x4, 0x4, 0x4, 0x305a, 0x7, 0x5, 0xb43, 0x2, 0x2, 0x200, 0x9, 0x4b573e73, 0x10000, 0xb64, 0x9, 0x8, 0x101, 0x4, 0x401, 0x7, 0x9, 0x5857, 0xfffffffc, 0xfffff000, 0xffffff00, 0x5, 0x7, 0x401, 0x10000, 0x3, 0x916b, 0xfffffffd, 0xfffffffa, 0x0, 0xba4a, 0x8, 0x39d, 0x8, 0x6, 0x2, 0x9, 0x0, 0xc, 0x7, 0x9, 0x0, 0xfffff2a0, 0x9, 0x5, 0x0, 0x6, 0x6, 0x0, 0x35, 0x8, 0x3, 0x3ff, 0x5, 0x8001, 0x0, 0x5, 0x6, 0x9, 0x7, 0x60000, 0x9, 0x6, 0x48e, 0x9, 0x9, 0x7, 0x4, 0x4, 0x3, 0x0, 0x3, 0x1, 0x3, 0xffffffff, 0x5, 0xfffffffd, 0x70000000, 0x5, 0x4, 0x400, 0x40, 0xec, 0x253, 0x8001, 0x94, 0x1, 0x10001, 0x3ff, 0x0, 0x53, 0x2, 0x8, 0x87b1, 0x6a, 0x2, 0x2, 0x8, 0x2, 0xf49, 0x45ec, 0x1b, 0xfff, 0x6, 0x8, 0x7, 0x0, 0x3, 0xbb4, 0xa, 0x805, 0x7, 0x0, 0x5, 0x0, 0x7fff, 0x9, 0x8, 0xfffffff1, 0x7, 0xb3, 0x0, 0x0, 0x200, 0x6, 0x65e, 0x2, 0x7, 0x3, 0x3, 0x2, 0x5, 0xfffff311, 0x5, 0x220, 0x1, 0x8, 0x7, 0x17, 0x3d5d, 0x1, 0xfffffeff, 0x8, 0x8, 0x16, 0xfff, 0xf3f, 0x1, 0x3, 0x6, 0xc, 0x10, 0x1, 0x9, 0x3, 0x10, 0x4, 0xf2bd, 0x7ff, 0x8000, 0x3, 0xffff0000, 0x84c, 0x9, 0x5, 0x8, 0x5, 0x5, 0x80000000, 0x53, 0x3, 0x9, 0x100, 0x3, 0x1, 0xe00000, 0x32d, 0x3ff, 0x3, 0xffffffea, 0xa, 0x6fcc36fd, 0x4, 0x400, 0x6, 0x2, 0x4, 0x2, 0x100, 0xce3, 0xd6a, 0x4, 0x0, 0x5, 0x5b0341d6, 0xfffffff8, 0x7, 0xca000000, 0x3, 0x4, 0x10000, 0xffff, 0x1, 0xfffffffe, 0x7, 0x1, 0x100, 0xd26, 0x8001, 0x7, 0x7, 0x7, 0x4, 0x401, 0x10000, 0xd2e, 0x2, 0x80000000, 0xf5ac, 0x7, 0x8, 0x8001, 0x3, 0xb, 0x800, 0x1, 0x7, 0x2, 0x205, 0x80000000, 0xfffffffb, 0x676afd53, 0x0, 0x4, 0x6, 0x4, 0xfffffffd, 0x75f1, 0x40, 0x3, 0xbfbf, 0x4, 0x41, 0x6, 0x4, 0xd, 0x7fffffff, 0x80, 0x3, 0x5, 0x3ff, 0x4, 0x9, 0x0, 0x6458e28d, 0x80, 0x1, 0x1, 0x101, 0x3, 0x9, 0x5, 0x7fff, 0x5, 0x3, 0x5, 0x1, 0x497, 0x68fb1070, 0x9, 0x6, 0x1, 0xe2c9, 0x9, 0x0, 0x9, 0x80, 0x80, 0x7, 0x3, 0x7fffffff, 0x7, 0x8, 0x80000001, 0xfff, 0x3, 0x6, 0x0, 0x6, 0x0, 0x80, 0xcc64, 0x3, 0x0, 0x5, 0xfffffffe, 0x4, 0x7e8, 0x40, 0xffffffff, 0x1, 0xda, 0x7, 0x7, 0xffff, 0x400, 0xc, 0xf, 0x2, 0x1, 0xa, 0x7, 0x1, 0x9, 0xb, 0x2, 0x26f3400d, 0x5, 0x8, 0x60000, 0x2, 0x0, 0x0, 0x8001, 0xffff, 0x7f, 0x6, 0xf, 0x9, 0xffffb01e, 0xc5ff, 0x0, 0xfffff5dc, 0xb, 0x8, 0x2, 0xffffaf2a, 0x8, 0x9, 0x8, 0x5, 0x0, 0x10001, 0x7, 0x2, 0xb89, 0x8001, 0x8, 0x3, 0x13, 0x5, 0x8, 0xd1, 0x9, 0x9, 0x6b, 0x5, 0x2, 0x5, 0x7, 0x2, 0x8, 0xff, 0xfffff5bc, 0xffffffff, 0xffffdb8b, 0x1000, 0x33, 0x1, 0x4, 0x140, 0x0, 0x401, 0x10000, 0x593, 0x8, 0xa3, 0x5, 0x100, 0x1ff, 0x431, 0x1, 0x5, 0x3, 0x0, 0x0, 0x1, 0x4, 0xdd27, 0xc, 0xff, 0x0, 0x7fff, 0x8, 0x400, 0x0, 0xd689, 0x9, 0x8, 0x2772, 0x2, 0x100, 0x2, 0x85, 0x2, 0x6, 0x0, 0x9, 0xfff, 0x80000001, 0x2, 0x80, 0x440, 0x180, 0x81, 0x4, 0x3, 0x829, 0x4, 0x0, 0x2, 0x10000, 0x0, 0x0, 0xf, 0x0, 0x624, 0x6, 0x8000, 0x0, 0x4, 0x0, 0x1ef2c75d, 0x1, 0x2, 0x0, 0x9, 0xf28, 0x3, 0x6adf7de0, 0x9, 0xf, 0x49ea, 0x8, 0xf84, 0x1, 0xe84b, 0x3, 0x7, 0xc, 0xc3, 0x2, 0x101, 0x6, 0x101, 0x8, 0x1, 0x0, 0x80000001, 0x9, 0x2, 0x5, 0xf4, 0x1, 0x7fff, 0x407, 0x7, 0x4, 0x30, 0x3, 0x1, 0x3c, 0x6, 0xc72, 0x3, 0x2, 0x3, 0xffff8000, 0x2, 0x3, 0x6, 0x3, 0x4, 0x7, 0x1, 0x8, 0xe4fd, 0x0, 0x9, 0x80000000, 0x8a68, 0x2, 0xffff8000, 0x5, 0xa, 0x4, 0x6, 0x9, 0x2, 0x8, 0xf16, 0x1, 0x3, 0x0, 0x3, 0x1, 0x1, 0x8, 0x7, 0xb720, 0x2, 0x80000001, 0x2729, 0xd3e3, 0x3, 0x1, 0x6, 0x4, 0xeec, 0x54c0000, 0xbf2498d3, 0x9, 0x5, 0x7ff, 0x7075, 0x10001, 0x4, 0x80000001, 0xf, 0x6, 0x1, 0x0, 0xb571, 0x5, 0x4281, 0x7, 0xfffffe00, 0x9d, 0xf9, 0x4, 0xffffffff, 0x9, 0x7, 0x2f0e, 0x63, 0x7, 0x6, 0x10001, 0x8, 0x80000000, 0xfffeffff, 0x2, 0x3, 0x0, 0x40, 0xf6, 0x1, 0x4, 0x1, 0x0, 0x6cc7, 0x1, 0xfff, 0x7ff, 0x1, 0x60000000, 0x0, 0x0, 0x1, 0x1, 0x40000000, 0x7, 0x8000, 0x10001, 0xf9a, 0x7, 0xd96, 0x8, 0xf, 0x100, 0x6, 0x8, 0x8, 0x0, 0x4, 0xfa, 0x2, 0x71, 0x3, 0x1, 0xe, 0x0, 0x0, 0x9, 0x8, 0x5, 0x2, 0x6, 0x1abb, 0x4, 0x1, 0x6640, 0x7, 0x0, 0xe, 0x2, 0x1000, 0xfffffffa, 0x9, 0x0, 0x8001, 0xe, 0x0, 0x1, 0x9, 0x40, 0x0, 0x8, 0x200, 0x9, 0x6, 0x1ff, 0x7, 0xf, 0x9, 0x9, 0x8001, 0x1, 0x3, 0x6, 0x4, 0x6, 0x6, 0xb, 0xa6cb, 0x8, 0x4, 0x8, 0x6, 0x6, 0xffffffff, 0x97, 0xfffffff7, 0x8001, 0x3, 0x1ff, 0x1, 0x2, 0x9, 0x2, 0x0, 0xffff, 0x2, 0x10, 0x3, 0x8000, 0x60, 0x215, 0x7a74, 0x1, 0xb1b, 0xfffffff8, 0x1, 0x7, 0x9, 0x10001, 0x9, 0x870, 0x80000000, 0x5, 0x9, 0x0, 0x401, 0x6, 0x2, 0x4, 0xe, 0x9, 0x7, 0xfffffffc, 0x2, 0x4dde4532, 0x3, 0x6, 0x1, 0x10001, 0x7, 0x6, 0x4, 0x4, 0x2, 0x6, 0x3782, 0xb, 0x392, 0x2, 0x7fff, 0xff, 0x3, 0x8, 0xc, 0x216, 0xffffbe3f, 0x8a5, 0x4, 0x2, 0x774, 0x2, 0x3, 0x5, 0x4b3e, 0x5, 0xeca, 0x9, 0xd, 0x10e2, 0x0, 0x8, 0xc, 0x174, 0x1, 0x7497, 0x6, 0x3, 0x2, 0x9, 0xf, 0x1, 0x7, 0xd0d, 0x1, 0x7, 0xf, 0x3, 0x10, 0x2b89, 0x2, 0x1a04, 0x4, 0x9c, 0x4, 0xff, 0x69, 0x7, 0x0, 0x7fffffff, 0x2, 0x9, 0x2, 0x8, 0x66c4, 0x7ff, 0x7, 0x6, 0x0, 0x6, 0x101, 0x80000, 0x9c18, 0x7, 0x1, 0x3, 0x7ff, 0x3, 0x26b1, 0x45, 0x9, 0x76e, 0x8a21, 0x9, 0x4, 0x8001, 0x0, 0x6, 0x2, 0x6, 0x9, 0x2, 0xd, 0x33ac, 0x4, 0x848, 0x6, 0x7, 0x3, 0x1, 0x9afd, 0x4, 0x7fff, 0x1, 0x1, 0xc8c, 0x5, 0x424, 0x6, 0x1, 0x1, 0x7, 0xfffffffd, 0x87, 0x8, 0x52ba, 0x9, 0x1, 0xfffffffa, 0x200, 0x8e, 0x6, 0x7976e372, 0x93, 0x10, 0x8, 0x2, 0xfff, 0x0, 0x3, 0x0, 0x3ff, 0x2, 0x9, 0xfff, 0x8561, 0x8000, 0x9, 0xe2b2, 0xc3b, 0x1, 0x3, 0x9, 0x9, 0x5, 0xa, 0x3, 0x6, 0x1, 0x4c, 0x8, 0x8, 0x3ff, 0xc, 0x0, 0x4, 0x6, 0x1, 0x3, 0x4, 0xa, 0x8dd, 0x2, 0x7, 0x2, 0x81, 0xec96, 0x1000, 0x8000, 0x4, 0xfffffffa, 0x73ab6a07, 0x86, 0x80000000, 0x81, 0x80, 0xf7, 0x69c7, 0xd, 0x873, 0x9, 0x8e9, 0x6, 0x100, 0x7ff, 0x1, 0x3, 0x200, 0x800, 0x6, 0x3ff, 0x4, 0x3, 0x6, 0x1387, 0xfffffff8, 0xa, 0x7bf8, 0x0, 0xe, 0x1000, 0x4, 0x6]}) socket$inet6(0xa, 0x2, 0x3a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r7 = dup(r6) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r7, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7000000000000006111900000e31bd384000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}, 0x1, 0x0, 0x0, 0x1000000}, 0x8884) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x9, 0x1000000) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x8884) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)={0x24, r4, 0x801, 0x0, 0x0, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x24}}, 0x8000) executing program 3: r0 = io_uring_setup(0x17c7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000040801010000000011000000000000000500030084000000090001007379fb5300000000060002"], 0x4c}}, 0x40000c0) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000006c0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000680)={{0x5, 0x0, 0x80}, "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", "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"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001500)={@map=0x1, 0x2f, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1460, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1400}], 0x0, 0x0, 0x0}) executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x4b, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r3}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) executing program 8: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2040084) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2040084) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0], 0x84}}, 0x0) executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000402b00000008000300", @ANYRES32=r2, @ANYBLOB="0a003400150000000101000004002a00"], 0x2c}}, 0x0) executing program 8: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000003c0)="0022041100ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77a62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a12", 0x98) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0, 0x34}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x9, 0x8}, 0xc) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="7fb20700000053c407cd", @ANYRESHEX=r1], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x10) syz_emit_ethernet(0x22, &(0x7f00000006c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @dev, @local}}}}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000e80007000000", @ANYRES32=r8, @ANYBLOB="000000000a0002"], 0x28}}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r10, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x20, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0xc0, 0x9, 0xa, 0x101, 0x0, 0x0, {0xf, 0x0, 0x4}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_EXPRESSIONS={0x9c, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELRULE={0x10c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x1f, 0x7, 0x1, 0x0, "a0ded2e17daf4d79e0241cc33a4e1e31038dd5949b6f613a5ec38b"}, @NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x19}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2b}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xd2}, @NFTA_PAYLOAD_DREG={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x84, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_OBJ_NAME={0xfffffe65, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x29, 0x8, "e46e2a8258e6676805a07372f6bd21f02323f497629b408a1c1ef02186992a37153d489697"}, @NFTA_OBJ_USERDATA={0x1f, 0x8, "a5f1a563019378309c9c48a55b50d92cb7d5f1beb82c9955d04a35"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x134, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0xa4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x400}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000300), 0x20000000}, 0x20) recvmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/28, 0x1c}], 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) getpeername$unix(r1, &(0x7f0000000580)=@abs, &(0x7f0000000600)=0x6e) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, 0x0, 0x0) r5 = syz_clone(0x4000, 0x0, 0xffffffffffffff3a, 0x0, 0x0, 0x0) r6 = syz_open_procfs$namespace(r5, &(0x7f0000000440)='ns/net\x00') r7 = syz_clone(0x100000, &(0x7f0000000100)="0c066163e3909e9eb58a7020866bfe9fc9c718d6f601adfa62c086d7c1f8b62911bd8c9a5cb89268605ecc7e4ca47cfea49b63908a554f96ca24cb3b38c3b50b96b83518cfbfc91452586ccf24babbe7d06cb2f58fdf96e2931c69289d3230a9a6fe2a91151aac120f84fd4fa7d5d6eef03cb0dc783d2c440f4f7d26104e8255d2ea8e72961f49a2e9820edec28dec38e6ac7b702d66edf1afdbf7d3e512cb07ffff6beaf8822f", 0xa7, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000400)="22bf4741c1b4bf3e0064a78937e2") sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@RTM_NEWNSID={0x4c, 0x58, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}]}, 0x4c}}, 0x894) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={r3, &(0x7f0000001c80)}, 0x20) close(r2) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}}, 0x0) setns(r6, 0x80) executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5e2b, 0x0, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0x2}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'veth1_vlan\x00'}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) (async) unshare(0x62040200) (async) socket(0x1d, 0x3, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) (async) socket$inet(0x2, 0x3, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)) (async) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r9, @ANYBLOB="0100"], 0xcc}, 0x1, 0xf000}, 0x0) executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffe5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009404, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00008e6000/0x1000)=nil, 0x1000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000ec0)=[{}], 0x1, 0x1ff, 0x0, 0x0, 0x0, 0x1f}) personality(0x6) userfaultfd(0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x9, 0x501040) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/148}, {&(0x7f0000000140)=""/49}, {&(0x7f0000000200)=""/187}], 0x3, 0x80000002, 0x4) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) executing program 3: r0 = io_uring_setup(0x17c7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000040801010000000011000000000000000500030084000000090001007379fb5300000000060002"], 0x4c}}, 0x40000c0) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 17 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-socket$rxrpc-bind$rxrpc-socket$nl_netfilter-sendmsg$IPCTNL_MSG_TIMEOUT_NEW-listen-recvmmsg-socket$nl_route-close_range-openat$binder_debug-close_range detailed listing: executing program 0: r0 = io_uring_setup(0x17c7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000040801010000000011000000000000000500030084000000090001007379fb5300000000060002"], 0x4c}}, 0x40000c0) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sw_sync-bpf$PROG_LOAD-madvise-syz_open_procfs$pagemap-mmap-mmap$IORING_OFF_SQ_RING-userfaultfd-set_mempolicy-ioctl$UFFDIO_API-openat$btrfs_control-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_open_dev$dri-ioctl$DRM_IOCTL_SET_CLIENT_CAP-ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_MODE_ATOMIC-ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES-ioctl$UFFDIO_REGISTER-ioctl$UFFDIO_COPY-ioctl$PAGEMAP_SCAN-personality-userfaultfd-syz_open_dev$sg-preadv-syz_open_dev$sndctrl-ioctl$int_in-close_range detailed listing: executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffe5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009404, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00008e6000/0x1000)=nil, 0x1000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000ec0)=[{}], 0x1, 0x1ff, 0x0, 0x0, 0x0, 0x1f}) personality(0x6) userfaultfd(0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x9, 0x501040) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/148}, {&(0x7f0000000140)=""/49}, {&(0x7f0000000200)=""/187}], 0x3, 0x80000002, 0x4) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socketpair$unix-bpf$MAP_CREATE-bpf$MAP_DELETE_ELEM-recvmsg$unix-openat-getpeername$unix-quotactl_fd$Q_GETNEXTQUOTA-syz_clone-syz_open_procfs$namespace-syz_clone-sendmsg$nl_route-bpf$MAP_DELETE_ELEM-close-sendmsg$NFT_BATCH-setns detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0xc0, 0x9, 0xa, 0x101, 0x0, 0x0, {0xf, 0x0, 0x4}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_EXPRESSIONS={0x9c, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELRULE={0x10c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x1f, 0x7, 0x1, 0x0, "a0ded2e17daf4d79e0241cc33a4e1e31038dd5949b6f613a5ec38b"}, @NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x19}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2b}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xd2}, @NFTA_PAYLOAD_DREG={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x84, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_OBJ_NAME={0xfffffe65, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x29, 0x8, "e46e2a8258e6676805a07372f6bd21f02323f497629b408a1c1ef02186992a37153d489697"}, @NFTA_OBJ_USERDATA={0x1f, 0x8, "a5f1a563019378309c9c48a55b50d92cb7d5f1beb82c9955d04a35"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x134, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0xa4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x400}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000300), 0x20000000}, 0x20) recvmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/28, 0x1c}], 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) getpeername$unix(r1, &(0x7f0000000580)=@abs, &(0x7f0000000600)=0x6e) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, 0x0, 0x0) r5 = syz_clone(0x4000, 0x0, 0xffffffffffffff3a, 0x0, 0x0, 0x0) r6 = syz_open_procfs$namespace(r5, &(0x7f0000000440)='ns/net\x00') r7 = syz_clone(0x100000, &(0x7f0000000100)="0c066163e3909e9eb58a7020866bfe9fc9c718d6f601adfa62c086d7c1f8b62911bd8c9a5cb89268605ecc7e4ca47cfea49b63908a554f96ca24cb3b38c3b50b96b83518cfbfc91452586ccf24babbe7d06cb2f58fdf96e2931c69289d3230a9a6fe2a91151aac120f84fd4fa7d5d6eef03cb0dc783d2c440f4f7d26104e8255d2ea8e72961f49a2e9820edec28dec38e6ac7b702d66edf1afdbf7d3e512cb07ffff6beaf8822f", 0xa7, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000400)="22bf4741c1b4bf3e0064a78937e2") sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@RTM_NEWNSID={0x4c, 0x58, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}]}, 0x4c}}, 0x894) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={r3, &(0x7f0000001c80)}, 0x20) close(r2) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}}, 0x0) setns(r6, 0x80) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$inet6_buf-socket$nl_route-socket-sendmsg$SEG6_CMD_GET_TUNSRC-mkdir-pipe2$9p-bpf$BPF_MAP_GET_FD_BY_ID-write$P9_RVERSION-dup-write$P9_RLERRORu-write$RDMA_USER_CM_CMD_SET_OPTION-write$RDMA_USER_CM_CMD_BIND_IP-write$binfmt_elf64-mount$9p_fd-chdir-openat$cgroup_ro-syz_emit_ethernet-getsockname$packet-creat-mount$tmpfs-socket$netlink-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$nullb-dup-mmap-sendmsg$nl_route-syz_genetlink_get_family_id$nl80211 detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000003c0)="0022041100ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77a62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a12", 0x98) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0, 0x34}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x9, 0x8}, 0xc) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="7fb20700000053c407cd", @ANYRESHEX=r1], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x10) syz_emit_ethernet(0x22, &(0x7f00000006c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @dev, @local}}}}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000e80007000000", @ANYRES32=r8, @ANYBLOB="000000000a0002"], 0x28}}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r10, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x20, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex_waitv-syz_open_dev$evdev-syz_emit_vhci-socket-bpf$MAP_CREATE_TAIL_CALL-openat$tun-socket$igmp6-setsockopt$IP6T_SO_SET_REPLACE-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-syz_genetlink_get_family_id$nl80211-write$tun detailed listing: executing program 0: futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000)=0x3, 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="86000000c8001d"], 0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd03000000f5ff1400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xfdef) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex_waitv-syz_open_dev$evdev-syz_emit_vhci-socket-bpf$MAP_CREATE_TAIL_CALL-openat$tun-socket$igmp6-setsockopt$IP6T_SO_SET_REPLACE-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-syz_genetlink_get_family_id$nl80211-write$tun detailed listing: executing program 0: futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000)=0x3, 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="86000000c8001d"], 0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd03000000f5ff1400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xfdef) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmsg$nl_route_sched-getsockname$packet-sendmsg$nl_route_sched-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$netlink-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-openat$cgroup-openat$cgroup_pressure-write$cgroup_pressure-write$cgroup_pressure-write$cgroup_pressure-sendmmsg detailed listing: executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x11}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x11}]}}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'full', 0x20, 0x1, 0x20, 0x100002}, 0x2f) (async) write$cgroup_pressure(r6, &(0x7f0000000080)={'full', 0x20, 0x1, 0x20, 0x100002}, 0x2f) write$cgroup_pressure(r6, &(0x7f0000000240)={'some'}, 0x2f) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmsg$nl_route_sched-getsockname$packet-sendmsg$nl_route_sched-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$netlink-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsconfig$FSCONFIG_CMD_CREATE-fsmount-openat$cgroup-openat$cgroup_pressure-write$cgroup_pressure-write$cgroup_pressure-write$cgroup_pressure-sendmmsg detailed listing: executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x11}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x11}]}}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'full', 0x20, 0x1, 0x20, 0x100002}, 0x2f) (async) write$cgroup_pressure(r6, &(0x7f0000000080)={'full', 0x20, 0x1, 0x20, 0x100002}, 0x2f) write$cgroup_pressure(r6, &(0x7f0000000240)={'some'}, 0x2f) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_UPDATE_ELEM_TAIL_CALL-io_uring_setup-bpf$PROG_LOAD_XDP detailed listing: executing program 0: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) io_uring_setup(0x154c, &(0x7f0000000200)={0x0, 0x0, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x9, &(0x7f0000000200)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_UPDATE_ELEM_TAIL_CALL-io_uring_setup-bpf$PROG_LOAD_XDP detailed listing: executing program 0: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) io_uring_setup(0x154c, &(0x7f0000000200)={0x0, 0x0, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x9, &(0x7f0000000200)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex_waitv-syz_open_dev$evdev-syz_emit_vhci-socket-bpf$MAP_CREATE_TAIL_CALL-openat$tun-socket$igmp6-setsockopt$IP6T_SO_SET_REPLACE-socket$kcm-ioctl$SIOCSIFHWADDR-syz_genetlink_get_family_id$nl80211-write$tun detailed listing: executing program 0: futex_waitv(&(0x7f00000010c0)=[{0x8000000000000001, &(0x7f0000000040)=0x2, 0x82}, {0xe1, &(0x7f0000000080)=0x7, 0x82}, {0x0, &(0x7f00000000c0)=0xffffffffffffff54, 0x82}, {0x7f, &(0x7f0000000100)=0x1282, 0x82}, {0xf, &(0x7f0000000140)=0x8000, 0x2}, {0x81, &(0x7f00000001c0)=0x48000000000, 0x2}, {0x0, &(0x7f0000000200)=0x6, 0x82}, {0x4, &(0x7f0000000240)=0x3ff, 0x2}, {0x9, &(0x7f0000000280)=0x3, 0x2}, {0x3, &(0x7f00000002c0)=0x2, 0x2}, {0x3, &(0x7f0000000300)=0x100000001, 0x2}, {0x6, &(0x7f0000000340)=0x3, 0x82}, {0x9, &(0x7f0000000380)=0x4, 0x82}, {0x4, &(0x7f00000003c0)=0xc, 0x2}, {0x0, &(0x7f0000000400)=0xc, 0x2}, {0xfff, &(0x7f0000000440)=0x4, 0x82}, {0x7, &(0x7f0000000480)=0x5, 0x2}, {0x80, &(0x7f00000004c0), 0x2}, {0xffffffffffffffff, &(0x7f0000000500)=0x101, 0x2}, {0xfff, &(0x7f0000000540)=0x5, 0x86}, {0xfffffffe00000000, &(0x7f0000000580)=0x9, 0x2}, {0x1, &(0x7f0000000680)=0x2, 0x82}, {0x1, &(0x7f00000006c0)=0x8, 0x82}, {0x3, &(0x7f0000000700)=0x3}, {0x8, &(0x7f0000000740)=0x3e, 0x82}, {0x0, &(0x7f0000000780)=0x7ff, 0x2}, {0x0, &(0x7f00000007c0)=0x8000, 0x82}, {0x7, &(0x7f0000000800)=0x7, 0x2}, {0x1, &(0x7f0000000840)=0x40, 0x82}, {0x0, &(0x7f0000000880)=0x3, 0x2}, {0xdd0f, &(0x7f00000008c0)=0x6, 0x2}, {0x2, &(0x7f0000000900)=0x2, 0x82}, {0x7, &(0x7f0000000940)=0x80000000, 0x82}, {0x0, &(0x7f0000000980)=0x81, 0x82}, {0x6, &(0x7f00000009c0)=0xf71, 0x2}, {0xfffffffffffffff9, &(0x7f0000000a00)=0xffff, 0x82}, {0x8000, &(0x7f0000000a40)=0x2, 0x2}, {0x0, &(0x7f0000000a80)=0xfffffffffffffffb, 0x2}, {0x6, &(0x7f0000000ac0)=0x3, 0x2}, {0x8, &(0x7f0000000fc0)=0x8c}, {0x4, &(0x7f0000001000)=0x43, 0x82}, {0x15, &(0x7f0000001040)=0x1ff, 0x80}, {0x1ff, &(0x7f0000001080)=0x1bb4, 0x82}], 0x2b, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="86000000c8001d"], 0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xfdef) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex_waitv-syz_open_dev$evdev-syz_emit_vhci-socket-bpf$MAP_CREATE_TAIL_CALL-openat$tun-socket$igmp6-setsockopt$IP6T_SO_SET_REPLACE-socket$kcm-ioctl$SIOCSIFHWADDR-syz_genetlink_get_family_id$nl80211-write$tun detailed listing: executing program 0: futex_waitv(&(0x7f00000010c0)=[{0x8000000000000001, &(0x7f0000000040)=0x2, 0x82}, {0xe1, &(0x7f0000000080)=0x7, 0x82}, {0x0, &(0x7f00000000c0)=0xffffffffffffff54, 0x82}, {0x7f, &(0x7f0000000100)=0x1282, 0x82}, {0xf, &(0x7f0000000140)=0x8000, 0x2}, {0x81, &(0x7f00000001c0)=0x48000000000, 0x2}, {0x0, &(0x7f0000000200)=0x6, 0x82}, {0x4, &(0x7f0000000240)=0x3ff, 0x2}, {0x9, &(0x7f0000000280)=0x3, 0x2}, {0x3, &(0x7f00000002c0)=0x2, 0x2}, {0x3, &(0x7f0000000300)=0x100000001, 0x2}, {0x6, &(0x7f0000000340)=0x3, 0x82}, {0x9, &(0x7f0000000380)=0x4, 0x82}, {0x4, &(0x7f00000003c0)=0xc, 0x2}, {0x0, &(0x7f0000000400)=0xc, 0x2}, {0xfff, &(0x7f0000000440)=0x4, 0x82}, {0x7, &(0x7f0000000480)=0x5, 0x2}, {0x80, &(0x7f00000004c0), 0x2}, {0xffffffffffffffff, &(0x7f0000000500)=0x101, 0x2}, {0xfff, &(0x7f0000000540)=0x5, 0x86}, {0xfffffffe00000000, &(0x7f0000000580)=0x9, 0x2}, {0x1, &(0x7f0000000680)=0x2, 0x82}, {0x1, &(0x7f00000006c0)=0x8, 0x82}, {0x3, &(0x7f0000000700)=0x3}, {0x8, &(0x7f0000000740)=0x3e, 0x82}, {0x0, &(0x7f0000000780)=0x7ff, 0x2}, {0x0, &(0x7f00000007c0)=0x8000, 0x82}, {0x7, &(0x7f0000000800)=0x7, 0x2}, {0x1, &(0x7f0000000840)=0x40, 0x82}, {0x0, &(0x7f0000000880)=0x3, 0x2}, {0xdd0f, &(0x7f00000008c0)=0x6, 0x2}, {0x2, &(0x7f0000000900)=0x2, 0x82}, {0x7, &(0x7f0000000940)=0x80000000, 0x82}, {0x0, &(0x7f0000000980)=0x81, 0x82}, {0x6, &(0x7f00000009c0)=0xf71, 0x2}, {0xfffffffffffffff9, &(0x7f0000000a00)=0xffff, 0x82}, {0x8000, &(0x7f0000000a40)=0x2, 0x2}, {0x0, &(0x7f0000000a80)=0xfffffffffffffffb, 0x2}, {0x6, &(0x7f0000000ac0)=0x3, 0x2}, {0x8, &(0x7f0000000fc0)=0x8c}, {0x4, &(0x7f0000001000)=0x43, 0x82}, {0x15, &(0x7f0000001040)=0x1ff, 0x80}, {0x1ff, &(0x7f0000001080)=0x1bb4, 0x82}], 0x2b, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="86000000c8001d"], 0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xfdef) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-mkdir-mount-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_S_FMT-chdir-mkdirat-mkdirat-mkdirat-mount$overlay detailed listing: executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800400, 0x0) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000005, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0x1, @win={{0x7fffffff, 0x0, 0x10000, 0x4}, 0x4, 0x2, 0x0, 0x7, 0x0, 0xf8}}) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-mkdir-mount-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_S_FMT-chdir-mkdirat-mkdirat-mkdirat-mount$overlay detailed listing: executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800400, 0x0) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000005, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0x1, @win={{0x7fffffff, 0x0, 0x10000, 0x4}, 0x4, 0x2, 0x0, 0x7, 0x0, 0xf8}}) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-openat$iommufd-ioctl$IOMMU_IOAS_ALLOC-ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES-socket$nl_route-getsockname$packet-socket$nl_route-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x6, r2}) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000580)="0f20e035200000000f22e082970e000000d466ba4200b005ee0f01c50f060f01c3b8cc0000000f23d80f21f80f20d20f23f8c744240000080000c7442402bd0b0000c7442406000000000f011424649c660f75e6", 0x54}], 0x1, 0x53, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000700000022abd7000fbdbdf2507000000", @ANYRES32=r3, @ANYBLOB="10000180520e04060002000e00"/28], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40) program did not crash single: failed to extract reproducer bisect: bisecting 67 programs with base timeout 1m40s testing program (duration=1m56s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 29, 25, 5, 24, 2, 10, 10, 25, 11, 4, 40, 9, 12, 12, 30, 20, 24, 17, 23, 3, 3, 4, 20, 5, 15, 18, 18, 18, 10, 4, 4, 26, 4, 16, 16, 4, 6, 21, 22, 5, 13, 13, 11, 11, 11, 4, 12, 11, 16, 8, 5, 1, 18, 4, 9, 11, 11, 14, 11, 5, 4, 30, 18, 22, 27, 11] detailed listing: executing program 32: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x6, r2}) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000580)="0f20e035200000000f22e082970e000000d466ba4200b005ee0f01c50f060f01c3b8cc0000000f23d80f21f80f20d20f23f8c744240000080000c7442402bd0b0000c7442406000000000f011424649c660f75e6", 0x54}], 0x1, 0x53, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000700000022abd7000fbdbdf2507000000", @ANYRES32=r3, @ANYBLOB="10000180520e04060002000e00"/28], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80c00, 0x0, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000200)={0xaf68, [0x866, 0x4], 0x3}, 0x10) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYRES32, @ANYRESHEX=r3], 0x20}, 0x1, 0x0, 0x0, 0x404c050}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0xe0c}}, 0x4) recvmmsg(r5, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/161, 0xa1}], 0x1}, 0x4}], 0x1, 0x10002, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000300)=0x10, 0x4) r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff], [0x400, 0x2], [0xfff]], '\x00', [{0x0, 0x1, 0x1}, {}, {}, {}, {0x0, 0xfffffffd}]}) ioctl$TCFLSH(r2, 0x540b, 0x2) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80}}, 0x1c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r9, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x43, 0x1a1413, 0x0, 0x3, 0xfffffffe, 0x0, 0x4000}) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00'}) dup3(r10, r11, 0x0) write$cgroup_pid(r9, &(0x7f00000031c0), 0x12) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000004c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80800) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x0, 0x6}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000500)={r6, r4}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r2, r1}) r8 = accept4(r0, 0x0, 0x0, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x56209516, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x2018, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}}) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0x2dc}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000) r10 = accept4$unix(r8, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80800) recvmsg$unix(r10, &(0x7f0000000480)={&(0x7f0000000140), 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/180, 0xb4}, {&(0x7f0000000280)=""/49, 0x31}], 0x2, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x40012002) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x200, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x213aa, 0x20}, [@IFLA_EXT_MASK={0x8}]}, 0x28}}, 0x4000010) r12 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r12, 0x80044942, &(0x7f00000003c0)) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@can_delroute={0x4c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x1}, [@CGW_MOD_UID={0x8, 0xe, r2}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x0, 0x1, 0x1}, 0x4, 0xc5310a51c33e5ef, 0x0, 0x0, "722223c843fd500c"}, 0x1}}, @CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "c133188aafd52dde"}, 0x2}}]}, 0x4c}, 0x1, 0xba01}, 0x4851) executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (async) executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x100) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x4, 0xff, 0x8, 0x7, "2ecdc1bc7e8106fbe610822c1000"}) executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800400, 0x0) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000005, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0x1, @win={{0x7fffffff, 0x0, 0x10000, 0x4}, 0x4, 0x2, 0x0, 0x7, 0x0, 0xf8}}) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) executing program 33: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800400, 0x0) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000005, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0x1, @win={{0x7fffffff, 0x0, 0x10000, 0x4}, 0x4, 0x2, 0x0, 0x7, 0x0, 0xf8}}) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = dup(r1) r3 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0x0, 0xf}, {0x0, 0x9}}}, 0x24}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000008000008", 0x1d) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000040)={0x80, 0x32314247, 0x140, 0xb4, 0x3, @stepwise={{0xc, 0x4a}, {0x5, 0x6451}, {0x0, 0x8}}}) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x82fb, 0x0, "1eb4d100"}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r5 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0xd191, 0x10100, 0x0, 0xa4}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x402}}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000001000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff49"]) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050028"], 0x7c}}, 0x0) executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x4}, 0x8) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000040)={0x9, 0x38, [0x7, 0xf, 0x5, 0x8000], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) syz_clone(0x2080b200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x2080b200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r3 = fanotify_init(0x0, 0x0) r4 = open$dir(&(0x7f00000002c0)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x641, 0x48001018, r4, 0x0) (async) fanotify_mark(r3, 0x641, 0x48001018, r4, 0x0) fanotify_mark(r3, 0x1, 0x103b, r4, 0x0) mkdirat(r4, &(0x7f0000002500)='./bus\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}, {@nfs_export_off}]}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x0, 0x2, 0x400000, 0x10000, @value=r2}, 0x28) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd00) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000002440)={&(0x7f0000002300), 0xc, &(0x7f0000002400)={&(0x7f0000002340)=ANY=[@ANYBLOB="7c00000001080102000000000000000001000001040004800900010073797a3000000000000500030011dd0000060002400a0000002c00048008000140000000090800014000000003080001400000800008000140fffff9c6080001400000000806000240430500000900010073797a3000"/124], 0x7c}, 0x1, 0x0, 0x0, 0x821}, 0x804) fcntl$setownex(r6, 0xf, &(0x7f0000000040)={0x2, r1}) (async) fcntl$setownex(r6, 0xf, &(0x7f0000000040)={0x2, r1}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000023c0)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2181c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_STD(r8, 0x80085617, &(0x7f0000000040)) (async) ioctl$VIDIOC_G_STD(r8, 0x80085617, &(0x7f0000000040)) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r9, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f00000025c0)={{{@in6=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) read$FUSE(r5, &(0x7f00000002c0)={0x2020}, 0xab5) (async) read$FUSE(r5, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0}, 0xab5) setresuid(r7, r10, r11) (async) setresuid(r7, r10, r11) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)=0x1) (async) write$tun(r1, &(0x7f0000000240)={@val, @val={0x3}, @llc={@snap={0x0, 0x0, "03", "53548b"}}}, 0x16) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close_range(r3, r3, 0x0) executing program 2: futex_waitv(&(0x7f00000010c0)=[{0x8000000000000001, &(0x7f0000000040)=0x2, 0x82}, {0xe1, &(0x7f0000000080)=0x7, 0x82}, {0x0, &(0x7f00000000c0)=0xffffffffffffff54, 0x82}, {0x7f, &(0x7f0000000100)=0x1282, 0x82}, {0xf, &(0x7f0000000140)=0x8000, 0x2}, {0x81, &(0x7f00000001c0)=0x48000000000, 0x2}, {0x0, &(0x7f0000000200)=0x6, 0x82}, {0x4, &(0x7f0000000240)=0x3ff, 0x2}, {0x9, &(0x7f0000000280)=0x3, 0x2}, {0x3, &(0x7f00000002c0)=0x2, 0x2}, {0x3, &(0x7f0000000300)=0x100000001, 0x2}, {0x6, &(0x7f0000000340)=0x3, 0x82}, {0x9, &(0x7f0000000380)=0x4, 0x82}, {0x4, &(0x7f00000003c0)=0xc, 0x2}, {0x0, &(0x7f0000000400)=0xc, 0x2}, {0xfff, &(0x7f0000000440)=0x4, 0x82}, {0x7, &(0x7f0000000480)=0x5, 0x2}, {0x80, &(0x7f00000004c0), 0x2}, {0xffffffffffffffff, &(0x7f0000000500)=0x101, 0x2}, {0xfff, &(0x7f0000000540)=0x5, 0x86}, {0xfffffffe00000000, &(0x7f0000000580)=0x9, 0x2}, {0x1, &(0x7f0000000680)=0x2, 0x82}, {0x1, &(0x7f00000006c0)=0x8, 0x82}, {0x3, &(0x7f0000000700)=0x3}, {0x8, &(0x7f0000000740)=0x3e, 0x82}, {0x0, &(0x7f0000000780)=0x7ff, 0x2}, {0x0, &(0x7f00000007c0)=0x8000, 0x82}, {0x7, &(0x7f0000000800)=0x7, 0x2}, {0x1, &(0x7f0000000840)=0x40, 0x82}, {0x0, &(0x7f0000000880)=0x3, 0x2}, {0xdd0f, &(0x7f00000008c0)=0x6, 0x2}, {0x2, &(0x7f0000000900)=0x2, 0x82}, {0x7, &(0x7f0000000940)=0x80000000, 0x82}, {0x0, &(0x7f0000000980)=0x81, 0x82}, {0x6, &(0x7f00000009c0)=0xf71, 0x2}, {0xfffffffffffffff9, &(0x7f0000000a00)=0xffff, 0x82}, {0x8000, &(0x7f0000000a40)=0x2, 0x2}, {0x0, &(0x7f0000000a80)=0xfffffffffffffffb, 0x2}, {0x6, &(0x7f0000000ac0)=0x3, 0x2}, {0x8, &(0x7f0000000fc0)=0x8c}, {0x4, &(0x7f0000001000)=0x43, 0x82}, {0x15, &(0x7f0000001040)=0x1ff, 0x80}, {0x1ff, &(0x7f0000001080)=0x1bb4, 0x82}], 0x2b, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="86000000c8001d"], 0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xfdef) executing program 34: futex_waitv(&(0x7f00000010c0)=[{0x8000000000000001, &(0x7f0000000040)=0x2, 0x82}, {0xe1, &(0x7f0000000080)=0x7, 0x82}, {0x0, &(0x7f00000000c0)=0xffffffffffffff54, 0x82}, {0x7f, &(0x7f0000000100)=0x1282, 0x82}, {0xf, &(0x7f0000000140)=0x8000, 0x2}, {0x81, &(0x7f00000001c0)=0x48000000000, 0x2}, {0x0, &(0x7f0000000200)=0x6, 0x82}, {0x4, &(0x7f0000000240)=0x3ff, 0x2}, {0x9, &(0x7f0000000280)=0x3, 0x2}, {0x3, &(0x7f00000002c0)=0x2, 0x2}, {0x3, &(0x7f0000000300)=0x100000001, 0x2}, {0x6, &(0x7f0000000340)=0x3, 0x82}, {0x9, &(0x7f0000000380)=0x4, 0x82}, {0x4, &(0x7f00000003c0)=0xc, 0x2}, {0x0, &(0x7f0000000400)=0xc, 0x2}, {0xfff, &(0x7f0000000440)=0x4, 0x82}, {0x7, &(0x7f0000000480)=0x5, 0x2}, {0x80, &(0x7f00000004c0), 0x2}, {0xffffffffffffffff, &(0x7f0000000500)=0x101, 0x2}, {0xfff, &(0x7f0000000540)=0x5, 0x86}, {0xfffffffe00000000, &(0x7f0000000580)=0x9, 0x2}, {0x1, &(0x7f0000000680)=0x2, 0x82}, {0x1, &(0x7f00000006c0)=0x8, 0x82}, {0x3, &(0x7f0000000700)=0x3}, {0x8, &(0x7f0000000740)=0x3e, 0x82}, {0x0, &(0x7f0000000780)=0x7ff, 0x2}, {0x0, &(0x7f00000007c0)=0x8000, 0x82}, {0x7, &(0x7f0000000800)=0x7, 0x2}, {0x1, &(0x7f0000000840)=0x40, 0x82}, {0x0, &(0x7f0000000880)=0x3, 0x2}, {0xdd0f, &(0x7f00000008c0)=0x6, 0x2}, {0x2, &(0x7f0000000900)=0x2, 0x82}, {0x7, &(0x7f0000000940)=0x80000000, 0x82}, {0x0, &(0x7f0000000980)=0x81, 0x82}, {0x6, &(0x7f00000009c0)=0xf71, 0x2}, {0xfffffffffffffff9, &(0x7f0000000a00)=0xffff, 0x82}, {0x8000, &(0x7f0000000a40)=0x2, 0x2}, {0x0, &(0x7f0000000a80)=0xfffffffffffffffb, 0x2}, {0x6, &(0x7f0000000ac0)=0x3, 0x2}, {0x8, &(0x7f0000000fc0)=0x8c}, {0x4, &(0x7f0000001000)=0x43, 0x82}, {0x15, &(0x7f0000001040)=0x1ff, 0x80}, {0x1ff, &(0x7f0000001080)=0x1bb4, 0x82}], 0x2b, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="86000000c8001d"], 0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xfdef) executing program 1: close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000380)={0x4, &(0x7f0000000300)=[{0x5, 0xae, &(0x7f0000000040)="26ba3becd30dfb800678f5315c60f89ee5ec705987177210349fe2411886c44ea97aeb7fed41ae93107e6dc77f6049b17da8f90a84206f9b58ea5225ffb621a3669ec2384c0d5397dcfa70754b3b135945db47cff9a6b30735fb16a80e708b167c6407969e8393e1ac36c7d0eacc25d277ef1ad6f6d5923af6201a5097f8ab09354fd840a7cd37b0c9b19baf2a1d38f7d95626d462d9811f7781cf9ca69fee5d8f6b8ebac7582a6bd44f4bff525d"}, {0x7, 0xf5, &(0x7f0000000100)="f3cc2f4a0289a4f6f394aee8de9ec44dec1e2a6cc29100d4b046be66d575fcbcc61d5fba90953cd6c273c1ad64d1abc68e11db5c4b54ea7c8f44b82abd64a6a4c60b658a3156b99cb0a733c13a1dd7450f39fcc9da38490b3a366a7f78f4921281cc684c1b0f8ead98e377ce5086c53a13a2133d963ebc76ce6eea59a28b7e3fd509f49c9c0cd1ce20147ee5698aeca0cec6d130f3307892a5d480d9528121b52f5dc6ecd91a8950e1af74fac04dbe5256b554d37f625c34a6858248225a920fe6005d8d1d795c282c04071a376684a249b08e61e7afbbaa6072dfb78695a7f6bd54b32bb6e4e1bf77b1327abd7947e54392623357", 0x0, 0x1}, {0xff, 0x96, &(0x7f0000000200)="27abb340427806db882e7a86d135d2ac6eefa807e3966a65d30abf1b2d875b1a302d55c116d861cf8d461c4a2f503630c6d713c70ef994137eb397beb6d8ff3ddfba3cda76cdacb02af5f25ef1c10ea69e47caa19c21d30febfce8c6b3e96c7ac2a2d849bdbe6ca6044a11140c86e73d0cc31319e6975ced1a6387ad9e26cbff6e8dcb717467497f2ee7cfe11fe5b97610dd70b693c8", 0x0, 0x1}, {0x1ff, 0x16, &(0x7f00000002c0)="a55ecfbffe509ee23a9501b6e9daf359987d068627fe", 0x0, 0x1}]}) sendmsg$nl_generic(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe8, 0x1f, 0x400, 0x70bd2d, 0x25dfdbfd, {0xb}, [@typed={0x8, 0xb0, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x44}, @generic="f042b6f484ad307c09af743998a8fe752d3479da9adef0f81e027f9b5e449366dcee6cd3798fb937e8bfe551d9ec93a51dc122a8f44ab39d92db788a7bbf975cd71b1232767b6c4f72e897af93336962cb6871cf9d1c2413ce36d5c64b6807b3a9746309e97ab67cfdd1849b32cbef23f4f3346b513c7212c084a478cee657d439daf246c7c3b5eb3ebcf9a553ee6296", @typed={0x14, 0x11b, 0x0, 0x0, @ipv6=@remote}, @typed={0x4, 0x5b}, @typed={0x1d, 0xdc, 0x0, 0x0, @binary="1357f61e9116acc57c59fc3302951d0a5e9cb2a19d7ed1a05b"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4010}, 0x10) setxattr$trusted_overlay_opaque(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), &(0x7f0000000600), 0x2, 0x3) unlinkat(r0, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000680)) r1 = socket$kcm(0x29, 0x5, 0x0) rename(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00') ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000740)) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000800)=""/93) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fffffff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000100) mount$bind(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x25010, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000a40)={0x9, 0x6, 0xfff5}) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000a80)=0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000ac0)={{0x2, 0x4e24, @local}, {0x6, @broadcast}, 0x58, {0x2, 0x4e24, @multicast1}, 'veth1_macvtap\x00'}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000b40)={'wg0\x00'}) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000b80)={0x7, [0x7ff, 0x10, 0x1, 0x7, 0x400, 0x7, 0x3]}, 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0xe81, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000c00)={{0x2, 0x4e21, @rand_addr=0x3b}, {0x1, @remote}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, 'hsr0\x00'}) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000c80)={0x2, 0x2263}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000cc0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$MON_IOCQ_RING_SIZE(r5, 0x9205) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) sendmmsg(r4, &(0x7f0000001140)=[{{&(0x7f0000000d00)=@ethernet={0x306, @local}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d80)="ded4e5f6b6e33fd6a1de396dcc6603bb971975f8e2474e868422d5725094f9e65d7bf966c0a169019942", 0x2a}, {&(0x7f0000000dc0)="5e8fea8077e7a2de0a26d921ad292c24b3cfc7625553c653f3a6756e2e397d9c3a81041dfcec68512d5307064e4bee488dcd15781618405c877f42e188ca73b0fb2970254b83515c19752055b6e7e1cd3008a7e426038a04842d4baaa3ceafc2811c20bfc9dbb59336d6ae02702c0864a809f291ad7aa6219933a1382766542f04d1ee14c5334b8db58327", 0x8b}, {&(0x7f0000000e80)="fb81d8b29da8b73a90777afad0db085565e17f1885569cb769bf9503ba372c3fcb496fab2bdcd3aeda48c59d22d7322b977416", 0x33}, {&(0x7f0000000ec0)="c5a564399625d52a5325167496f6b1f202f32377674b1b7f45dbd098d296d7e7", 0x20}], 0x4, &(0x7f0000000f40)=[{0xd8, 0x101, 0x9, "59b1620b7312fa7e16fe7ad88da78f7148feaa85014a15b51e734129c307bc4319aae311941a916e2e5b41f7d308587958caba134473503e55c8b636a7b21fc1734c64fb7f71caf678f0a2b86a4745f17061e5fce2ac2de901b4482cdb9cce70cca40b930f7b1f3f1d9033d5151e5798605b658d6f9895c850be07569faee7168ed83c24a7600cc47ded1276123c87c142b346a47cd88e406aff9a07016bf75e54d6821d654822315238ca23c99aec2f00a8394d18eef6056ff09a7a73aba7f1f19c6a298584b0"}, {0x58, 0x10d, 0x4, "990fd5c3e17a3e8a9e207f64ceaa62dce48ad7014a30fcf46706c87d4754501e09592bfecc64a5fcb9b1d53279557c0c4046b70f6719c88b61d7f56264dbfc2417c77b4d6bcc202e"}, {0xc8, 0x84, 0x77, "70157a26994f06567707881ec9b9110e028af21012154c44c7cedba4379fa009fb579014f7a6efa47419227c0a65d9f462b9187dfd13772abadc3fd7cddcdf62a34e97eb9af61a0c67fa5d5a4c1cf235ee8545193f3e5d0139d1275fc3b1b854c28c3b3dbfec40d43ce8681babd5298df88d5fcc843b5e655ac955d7baca5ee5d9600e834b88647ab16721cf7922066ec2629752a8eeb20597cbf4d7e4cf3cd71c7223511a936929362cc311b06546df18bb862ca52a30"}], 0x1f8}}], 0x1, 0x44842) ioctl$TCXONC(r3, 0x540a, 0x3) syz_open_dev$sndmidi(&(0x7f0000001180), 0x37, 0x40800) executing program 1: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x1000000, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xfff1, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {}, 0x1, 0x7f}}, @TCA_TBF_RATE64={0xc, 0x4, 0xe5d11327db56db0}]}}]}, 0x64}}, 0x0) r5 = socket(0xa, 0x3, 0x3a) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020300000009210000010122290a090581ffff"], 0x0) r6 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x80000, 0x0) pread64(r6, 0x0, 0x0, 0x7fffffffffffffff) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSABS0(r7, 0x401845c0, 0x0) close(r7) r8 = inotify_init1(0x80800) fallocate(r8, 0x8, 0x2, 0x8) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) socket(0xa, 0x3, 0x3a) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000040)) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e896330400b96a9d"], 0x0) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = dup(r1) r3 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0x0, 0xf}, {0x0, 0x9}}}, 0x24}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000008000008", 0x1d) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000040)={0x80, 0x32314247, 0x140, 0xb4, 0x3, @stepwise={{0xc, 0x4a}, {0x5, 0x6451}, {0x0, 0x8}}}) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x82fb, 0x0, "1eb4d100"}) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0xd191, 0x10100, 0x0, 0xa4}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x402}}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe83, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="64000000020601004c0003ce000000000000fffd05000400000000000900020073797a30000000000500010007000000050005000a00000014000780080011400000000008001240000afff116000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b01, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = dup(r1) r3 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0x0, 0xf}, {0x0, 0x9}}}, 0x24}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000008000008", 0x1d) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000040)={0x80, 0x32314247, 0x140, 0xb4, 0x3, @stepwise={{0xc, 0x4a}, {0x5, 0x6451}, {0x0, 0x8}}}) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x82fb, 0x0, "1eb4d100"}) r5 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0xd191, 0x10100, 0x0, 0xa4}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x402}}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) io_uring_setup(0x154c, &(0x7f0000000200)={0x0, 0x0, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x9, &(0x7f0000000200)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 35: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) io_uring_setup(0x154c, &(0x7f0000000200)={0x0, 0x0, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x9, &(0x7f0000000200)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/xfrm_stat\x00') mq_timedreceive(r1, 0x0, 0x0, 0x100000001, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) executing program 4: add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f00000002c0)="e263c46fd365c0c8337e2e89e78ece92c7ebae90f4afeca14b01ee89471bbc10", 0x20, 0xfffffffffffffffd) r0 = socket(0x10, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000002f80), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf251000000005000f000900000008000100", @ANYRES32=0x0, @ANYBLOB="7d7c43020cf761ce5e85c159e9a5c9fff2a41d9f787c2de5522799952a1f058160e1f2c16b57ea8693ae26043bc9b40420c85d333564fca0185c9f30c568616f75f8e0a03496317d6fb45b9de5eb2b7608b980665c01bcc040fc02149661db78afd2d851e6f2fbf3fd08d55c238418ca"], 0x24}}, 0x400c4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000440006803c00040067636d28279a732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989040005"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="68010000", @ANYRES16=r6, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x10, &(0x7f00000002c0), 0x4) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r8, &(0x7f0000000080)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @connect}], 0x1c) setresuid(0x0, r3, 0x0) r9 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) setresuid(r3, r9, r10) executing program 4: syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x40) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_open_dev$sg(&(0x7f00000001c0), 0x1, 0x60000) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc211}) r1 = socket$kcm(0x2, 0xa, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="94010000", @ANYRES16=r3, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r4, @ANYBLOB="18007a800c000300784d106960256ff508000400070000004c007a8014000200e9c8b1ba7746ce2ef332bbc5c97a1b740c0003000d15107ef68d60c21400020064f1c7b9c21297fdc91a5ee15a74a83408000400da0000000c000300cb563cf9c3218fa120007a8008000400769a105808000400080000000c000300c38c1d74c2e200ef34007a800c00030082150e2f564a05fd240001004f2f145c8e994f9270345cd125444dad24f0229259a46df93ada14b60e56ea876c007a801400010080561a80fbcb61b368a6c1ea62d953380c000300ac6a00fe5cf7fa7d08000400fdffffff0c00030086191bb4280530d0140002"], 0x194}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000580)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x4, 0x28, 0x65, 0x0, 0x4, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0xf1, 0x0, 0x8}}}}, 0x36) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000280)=0x2, 0x4) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000100)=0xfffffffe, 0x4) sendmsg$tipc(r5, &(0x7f0000001680)={&(0x7f0000000000)=@id, 0x10, 0x0}, 0x0) connect$tipc(r5, &(0x7f0000000140)=@id, 0x10) executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) (async) listen(r0, 0x80080400) (async) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3aa) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x10) statx(r4, 0x0, 0x4000, 0x200, &(0x7f0000000040)) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) (async) mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) mount(&(0x7f0000000000)=@sr0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='hpfs\x00', 0x11, 0x0) executing program 4: r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x11}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x11}]}}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'full', 0x20, 0x1, 0x20, 0x100002}, 0x2f) (async) write$cgroup_pressure(r6, &(0x7f0000000080)={'full', 0x20, 0x1, 0x20, 0x100002}, 0x2f) write$cgroup_pressure(r6, &(0x7f0000000240)={'some'}, 0x2f) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) executing program 36: r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x11}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x11}]}}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'full', 0x20, 0x1, 0x20, 0x100002}, 0x2f) (async) write$cgroup_pressure(r6, &(0x7f0000000080)={'full', 0x20, 0x1, 0x20, 0x100002}, 0x2f) write$cgroup_pressure(r6, &(0x7f0000000240)={'some'}, 0x2f) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) executing program 7: socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000010"]) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x400, {0xa, 0x0, 0x14}, [@FRA_DST={0x14, 0x1, @private0}]}, 0x30}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) (async) creat(&(0x7f0000000000)='./file0\x00', 0x4) executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002a22df29082cf7840700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900000000000000000014000400697036746e6c30000000000000000000"], 0x3c}}, 0x0) executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x8884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x10}}]}, 0x30}}, 0x0) executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000) mkdir(&(0x7f0000000540)='./file0\x00', 0xd0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) ioctl$KDMKTONE(r4, 0x4b30, 0x1) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000000f9ffffff11b000000000009500000000000000950000000000000098c944737ed317fbe80eab1c5052b52dba58f0c482641466509c03d30000000055deabb9906d9c9e38b7c911fcaae06a59faa84a8a30a877925eb6c881e9827391091eeea43471966523bce5ee95a2d1884d557343a98a5f91d66505999dc5a109e127d4b8e5a8b6e0da4cb4072f36fb42da3ff6b918643141c8656a31b06e3c0959808e55318d83ce1a2cf01cbb51e2dada135d79fdd3c1c248aee24f2ade6aa6bf1d25eb05a2828f36de8a5108c5037033abfdff4690bbd3030000001198"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="bf000100000000006111140000000000040000000000000095000000000000001abe5201462857a3db65e291772afa2114f5963ed660b870d974d2252829f8290f8d02e3b0096b3df3e6585851cb7efb50a982b66e14716ffe33a164c3d1ff5798fc4bd6d3e5ab096e9ad743eb00"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@setneightbl={0x30, 0x43, 0x1, 0x70bd29, 0x25dfdbfd, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x656}, @NDTA_THRESH2={0x8, 0x3, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) executing program 37: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) executing program 9: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x8884) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) executing program 9: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="54010000100013070000010000000000000000000000000077fb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040007"], 0x154}}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000004f40)=ANY=[@ANYRESHEX=r0], 0x8) recvmmsg(r0, &(0x7f0000004dc0)=[{{&(0x7f0000000040)=@sco, 0x80, &(0x7f00000002c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/131, 0x83}, {&(0x7f0000000180)=""/216, 0xd8}, {&(0x7f0000000280)=""/58, 0x3a}], 0x4, &(0x7f0000000300)=""/2, 0x2}, 0x5}, {{&(0x7f0000000340)=@tipc=@id, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/113, 0x71}], 0x1, &(0x7f00000015c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000000480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)=""/47, 0x2f}, {&(0x7f00000025c0)=""/161, 0xa1}], 0x2, &(0x7f0000002680)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000003680)=@in, 0x80, &(0x7f0000004a00)=[{&(0x7f0000003700)=""/253, 0xfd}, {&(0x7f0000003800)=""/161, 0xa1}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/44, 0x2c}, {&(0x7f0000004900)=""/157, 0x9d}, {&(0x7f00000049c0)=""/18, 0x12}], 0x6, &(0x7f0000004a80)=""/162, 0xa2}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000004bc0)=[{&(0x7f0000004b40)=""/82, 0x52}], 0x1, &(0x7f0000004c00)=""/9, 0x9}, 0x7a8f}, {{&(0x7f0000004c40)=@pppol2tpv3in6, 0x80, &(0x7f0000004d00)=[{&(0x7f0000004cc0)=""/57, 0x39}], 0x1, &(0x7f0000004d40)=""/96, 0x60}, 0x1}], 0x6, 0x40000040, 0x0) executing program 9: unshare(0x20020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000180)) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async) r1 = open(&(0x7f0000000000)='.\x00', 0x800, 0x0) (async) r2 = socket$inet(0xa, 0x801, 0x84) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000600)={'gre0\x00'}) (async) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r2, 0x8) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0xd, &(0x7f0000000040)={0x0, 0x1bc}, 0x8) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, &(0x7f0000000280), {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x1, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010101, 'macsec0\x00', {0x4}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "9e6c", 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (async) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200) executing program 9: r0 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8afa89, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000580), 0x7fffffffffffffff, 0x40201) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000005c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB="5be45dbdc14fcdc4fe8d3016c16a9e291c96c038b9d7851b494f8dd01b4217712443e927b89df92b5e38091074ebaf46e0dbe8b23b5bb641e3d369e8f256709274c16869fd0de991d821a6ff94e5d6b713b726239848c6560d4ab458f093e9248cc3c57fc760b34548d9506aa960233c4875c245a588c1b7c6f9c9dce4bfa597340adf72199005849185757d6105dcc903cb3d49efaed3f984ef4233f154a97c7569d685a55dbcda5b4752e2a6977e53645101", @ANYRES16=r0, @ANYBLOB="341b784519673cc47239a5e3920cde2ba7714c5df6fa229044d9", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r8}, &(0x7f0000000780), &(0x7f00000007c0)=r5}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@getlink={0x20, 0x12, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10400}}, 0x20}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000047c0)=r3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000007e00)=@newtaction={0x14, 0x32, 0x12f}, 0x14}}, 0x0) executing program 9: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x8884) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) executing program 9: futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000)=0x3, 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="86000000c8001d"], 0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd03000000f5ff1400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xfdef) executing program 38: futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000)=0x3, 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="86000000c8001d"], 0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd03000000f5ff1400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xfdef) executing program 3: r0 = io_uring_setup(0x17c7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000040801010000000011000000000000000500030084000000090001007379fb5300000000060002"], 0x4c}}, 0x40000c0) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) executing program 3: r0 = io_uring_setup(0x17c7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000040801010000000011000000000000000500030084000000090001007379fb5300000000060002"], 0x4c}}, 0x40000c0) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) executing program 3: r0 = io_uring_setup(0x17c7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000040801010000000011000000000000000500030084000000090001007379fb5300000000060002"], 0x4c}}, 0x40000c0) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}, 0x1, 0x0, 0x100000000000000}, 0x8884) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x20008880}}], 0x1, 0x4c054) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xa031, 0xffffffffffffffff, 0x180000000) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000040)={0x2, 0xc, 0x3}) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)={&(0x7f000000c2c0)=@newtaction={0x14, 0x30, 0x400, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x84) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x440200) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) executing program 3: r0 = io_uring_setup(0x17c7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000040801010000000011000000000000000500030084000000090001007379fb5300000000060002"], 0x4c}}, 0x40000c0) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000180)={'veth0_to_bridge\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="360f3366b9800000c00f326635000100000f30debb26ac0f09baf80c66efbafc0cb8f1ffef63aa2161f80466b8ebb83488bafc0cec0fc74a5e260fc75d042e3e0f1bd00f32", 0x4c}], 0x34, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0058a10100d04261a5fb2d002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$inet(0x2, 0xa, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r6}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) executing program 6: madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @remote}]}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x71, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x17) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000006, 0x10010, 0xffffffffffffffff, 0x10000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0x0, 0xb}}}}}]}}]}}, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) (async) ioctl$TCSETS(r0, 0x8910, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe, 0x0, 0x0, "73195a7375845ee299572d7de2efe20f9d5a12"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x4, 0x3, 0x7f, 0x6}, {0x7, 0x0, 0x0, 0x7}, {0x8cf5, 0x9, 0x7, 0xa}, {0x7, 0x4, 0x2, 0xfff}]}) executing program 8: syz_emit_ethernet(0xcb, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xa9, 0x0, @opaque="910bc5170de8bdf06b054f43f7cbcde160584bd7f0db80f38e9dcf7407428fa1380ef6d4dc2090a15b25342a091144aada32df3ae3e4df1adfb5df8d6891630cb713056696eccdbc2f40263296b676bd647fb20bc33fb47374dea1075770c54e6f8d96ce54ef19f71421cd4ede8f16a2389a1ae3fd88271a287591ee1ea853aef4a25c2462984b257eff5265d3584a8175a29c0786586c248bd0fe3a97a49fd39a"}}}}}, 0x0) executing program 8: r0 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000440)={[0x9dd0, 0x4, 0x6, 0x4, 0x3, 0x9, 0x6a16, 0xa, 0xb, 0xfffffff7, 0x1ff, 0x3, 0x2, 0x7, 0x7f, 0x6, 0x10000, 0x9, 0x8, 0xb87e, 0x3ff, 0xca, 0x80, 0xffff, 0x9, 0x2e, 0xffff, 0xfa, 0x6, 0x4, 0x3dc, 0x4, 0x6, 0x7f, 0x9, 0x3, 0x45e, 0x80, 0x6, 0x3, 0xfffffffd, 0x79f00, 0xada, 0x4, 0x12, 0x0, 0x5, 0x2, 0x5, 0x1, 0x5, 0xaa5, 0x9457, 0x2, 0x8, 0x8, 0x7, 0xd9f4, 0x7, 0x4, 0x5, 0x7183, 0x4, 0xf, 0xffff8000, 0x3, 0x4, 0xae, 0x40000000, 0x9, 0x3, 0x8, 0x40, 0xb, 0x2, 0x2, 0x5, 0x41b0, 0xae7, 0xe, 0x2, 0x5, 0x0, 0x0, 0x0, 0x10000, 0x7f, 0x7, 0xbf, 0x82f8, 0x709, 0x5, 0x0, 0xfffffffb, 0x3, 0x133, 0xfffffeff, 0x8, 0x60000, 0x5, 0x10, 0x0, 0x0, 0x7, 0x10001, 0x0, 0xcd5, 0x7ff, 0x0, 0x838, 0x10000, 0x3, 0x6, 0x9, 0x2f06, 0x2, 0x9, 0xb4, 0x4, 0x5, 0xfffffffd, 0x0, 0x2, 0x2, 0x2, 0x0, 0x2ed0, 0x3, 0x5, 0x0, 0x400, 0x4, 0x4, 0x4, 0x305a, 0x7, 0x5, 0xb43, 0x2, 0x2, 0x200, 0x9, 0x4b573e73, 0x10000, 0xb64, 0x9, 0x8, 0x101, 0x4, 0x401, 0x7, 0x9, 0x5857, 0xfffffffc, 0xfffff000, 0xffffff00, 0x5, 0x7, 0x401, 0x10000, 0x3, 0x916b, 0xfffffffd, 0xfffffffa, 0x0, 0xba4a, 0x8, 0x39d, 0x8, 0x6, 0x2, 0x9, 0x0, 0xc, 0x7, 0x9, 0x0, 0xfffff2a0, 0x9, 0x5, 0x0, 0x6, 0x6, 0x0, 0x35, 0x8, 0x3, 0x3ff, 0x5, 0x8001, 0x0, 0x5, 0x6, 0x9, 0x7, 0x60000, 0x9, 0x6, 0x48e, 0x9, 0x9, 0x7, 0x4, 0x4, 0x3, 0x0, 0x3, 0x1, 0x3, 0xffffffff, 0x5, 0xfffffffd, 0x70000000, 0x5, 0x4, 0x400, 0x40, 0xec, 0x253, 0x8001, 0x94, 0x1, 0x10001, 0x3ff, 0x0, 0x53, 0x2, 0x8, 0x87b1, 0x6a, 0x2, 0x2, 0x8, 0x2, 0xf49, 0x45ec, 0x1b, 0xfff, 0x6, 0x8, 0x7, 0x0, 0x3, 0xbb4, 0xa, 0x805, 0x7, 0x0, 0x5, 0x0, 0x7fff, 0x9, 0x8, 0xfffffff1, 0x7, 0xb3, 0x0, 0x0, 0x200, 0x6, 0x65e, 0x2, 0x7, 0x3, 0x3, 0x2, 0x5, 0xfffff311, 0x5, 0x220, 0x1, 0x8, 0x7, 0x17, 0x3d5d, 0x1, 0xfffffeff, 0x8, 0x8, 0x16, 0xfff, 0xf3f, 0x1, 0x3, 0x6, 0xc, 0x10, 0x1, 0x9, 0x3, 0x10, 0x4, 0xf2bd, 0x7ff, 0x8000, 0x3, 0xffff0000, 0x84c, 0x9, 0x5, 0x8, 0x5, 0x5, 0x80000000, 0x53, 0x3, 0x9, 0x100, 0x3, 0x1, 0xe00000, 0x32d, 0x3ff, 0x3, 0xffffffea, 0xa, 0x6fcc36fd, 0x4, 0x400, 0x6, 0x2, 0x4, 0x2, 0x100, 0xce3, 0xd6a, 0x4, 0x0, 0x5, 0x5b0341d6, 0xfffffff8, 0x7, 0xca000000, 0x3, 0x4, 0x10000, 0xffff, 0x1, 0xfffffffe, 0x7, 0x1, 0x100, 0xd26, 0x8001, 0x7, 0x7, 0x7, 0x4, 0x401, 0x10000, 0xd2e, 0x2, 0x80000000, 0xf5ac, 0x7, 0x8, 0x8001, 0x3, 0xb, 0x800, 0x1, 0x7, 0x2, 0x205, 0x80000000, 0xfffffffb, 0x676afd53, 0x0, 0x4, 0x6, 0x4, 0xfffffffd, 0x75f1, 0x40, 0x3, 0xbfbf, 0x4, 0x41, 0x6, 0x4, 0xd, 0x7fffffff, 0x80, 0x3, 0x5, 0x3ff, 0x4, 0x9, 0x0, 0x6458e28d, 0x80, 0x1, 0x1, 0x101, 0x3, 0x9, 0x5, 0x7fff, 0x5, 0x3, 0x5, 0x1, 0x497, 0x68fb1070, 0x9, 0x6, 0x1, 0xe2c9, 0x9, 0x0, 0x9, 0x80, 0x80, 0x7, 0x3, 0x7fffffff, 0x7, 0x8, 0x80000001, 0xfff, 0x3, 0x6, 0x0, 0x6, 0x0, 0x80, 0xcc64, 0x3, 0x0, 0x5, 0xfffffffe, 0x4, 0x7e8, 0x40, 0xffffffff, 0x1, 0xda, 0x7, 0x7, 0xffff, 0x400, 0xc, 0xf, 0x2, 0x1, 0xa, 0x7, 0x1, 0x9, 0xb, 0x2, 0x26f3400d, 0x5, 0x8, 0x60000, 0x2, 0x0, 0x0, 0x8001, 0xffff, 0x7f, 0x6, 0xf, 0x9, 0xffffb01e, 0xc5ff, 0x0, 0xfffff5dc, 0xb, 0x8, 0x2, 0xffffaf2a, 0x8, 0x9, 0x8, 0x5, 0x0, 0x10001, 0x7, 0x2, 0xb89, 0x8001, 0x8, 0x3, 0x13, 0x5, 0x8, 0xd1, 0x9, 0x9, 0x6b, 0x5, 0x2, 0x5, 0x7, 0x2, 0x8, 0xff, 0xfffff5bc, 0xffffffff, 0xffffdb8b, 0x1000, 0x33, 0x1, 0x4, 0x140, 0x0, 0x401, 0x10000, 0x593, 0x8, 0xa3, 0x5, 0x100, 0x1ff, 0x431, 0x1, 0x5, 0x3, 0x0, 0x0, 0x1, 0x4, 0xdd27, 0xc, 0xff, 0x0, 0x7fff, 0x8, 0x400, 0x0, 0xd689, 0x9, 0x8, 0x2772, 0x2, 0x100, 0x2, 0x85, 0x2, 0x6, 0x0, 0x9, 0xfff, 0x80000001, 0x2, 0x80, 0x440, 0x180, 0x81, 0x4, 0x3, 0x829, 0x4, 0x0, 0x2, 0x10000, 0x0, 0x0, 0xf, 0x0, 0x624, 0x6, 0x8000, 0x0, 0x4, 0x0, 0x1ef2c75d, 0x1, 0x2, 0x0, 0x9, 0xf28, 0x3, 0x6adf7de0, 0x9, 0xf, 0x49ea, 0x8, 0xf84, 0x1, 0xe84b, 0x3, 0x7, 0xc, 0xc3, 0x2, 0x101, 0x6, 0x101, 0x8, 0x1, 0x0, 0x80000001, 0x9, 0x2, 0x5, 0xf4, 0x1, 0x7fff, 0x407, 0x7, 0x4, 0x30, 0x3, 0x1, 0x3c, 0x6, 0xc72, 0x3, 0x2, 0x3, 0xffff8000, 0x2, 0x3, 0x6, 0x3, 0x4, 0x7, 0x1, 0x8, 0xe4fd, 0x0, 0x9, 0x80000000, 0x8a68, 0x2, 0xffff8000, 0x5, 0xa, 0x4, 0x6, 0x9, 0x2, 0x8, 0xf16, 0x1, 0x3, 0x0, 0x3, 0x1, 0x1, 0x8, 0x7, 0xb720, 0x2, 0x80000001, 0x2729, 0xd3e3, 0x3, 0x1, 0x6, 0x4, 0xeec, 0x54c0000, 0xbf2498d3, 0x9, 0x5, 0x7ff, 0x7075, 0x10001, 0x4, 0x80000001, 0xf, 0x6, 0x1, 0x0, 0xb571, 0x5, 0x4281, 0x7, 0xfffffe00, 0x9d, 0xf9, 0x4, 0xffffffff, 0x9, 0x7, 0x2f0e, 0x63, 0x7, 0x6, 0x10001, 0x8, 0x80000000, 0xfffeffff, 0x2, 0x3, 0x0, 0x40, 0xf6, 0x1, 0x4, 0x1, 0x0, 0x6cc7, 0x1, 0xfff, 0x7ff, 0x1, 0x60000000, 0x0, 0x0, 0x1, 0x1, 0x40000000, 0x7, 0x8000, 0x10001, 0xf9a, 0x7, 0xd96, 0x8, 0xf, 0x100, 0x6, 0x8, 0x8, 0x0, 0x4, 0xfa, 0x2, 0x71, 0x3, 0x1, 0xe, 0x0, 0x0, 0x9, 0x8, 0x5, 0x2, 0x6, 0x1abb, 0x4, 0x1, 0x6640, 0x7, 0x0, 0xe, 0x2, 0x1000, 0xfffffffa, 0x9, 0x0, 0x8001, 0xe, 0x0, 0x1, 0x9, 0x40, 0x0, 0x8, 0x200, 0x9, 0x6, 0x1ff, 0x7, 0xf, 0x9, 0x9, 0x8001, 0x1, 0x3, 0x6, 0x4, 0x6, 0x6, 0xb, 0xa6cb, 0x8, 0x4, 0x8, 0x6, 0x6, 0xffffffff, 0x97, 0xfffffff7, 0x8001, 0x3, 0x1ff, 0x1, 0x2, 0x9, 0x2, 0x0, 0xffff, 0x2, 0x10, 0x3, 0x8000, 0x60, 0x215, 0x7a74, 0x1, 0xb1b, 0xfffffff8, 0x1, 0x7, 0x9, 0x10001, 0x9, 0x870, 0x80000000, 0x5, 0x9, 0x0, 0x401, 0x6, 0x2, 0x4, 0xe, 0x9, 0x7, 0xfffffffc, 0x2, 0x4dde4532, 0x3, 0x6, 0x1, 0x10001, 0x7, 0x6, 0x4, 0x4, 0x2, 0x6, 0x3782, 0xb, 0x392, 0x2, 0x7fff, 0xff, 0x3, 0x8, 0xc, 0x216, 0xffffbe3f, 0x8a5, 0x4, 0x2, 0x774, 0x2, 0x3, 0x5, 0x4b3e, 0x5, 0xeca, 0x9, 0xd, 0x10e2, 0x0, 0x8, 0xc, 0x174, 0x1, 0x7497, 0x6, 0x3, 0x2, 0x9, 0xf, 0x1, 0x7, 0xd0d, 0x1, 0x7, 0xf, 0x3, 0x10, 0x2b89, 0x2, 0x1a04, 0x4, 0x9c, 0x4, 0xff, 0x69, 0x7, 0x0, 0x7fffffff, 0x2, 0x9, 0x2, 0x8, 0x66c4, 0x7ff, 0x7, 0x6, 0x0, 0x6, 0x101, 0x80000, 0x9c18, 0x7, 0x1, 0x3, 0x7ff, 0x3, 0x26b1, 0x45, 0x9, 0x76e, 0x8a21, 0x9, 0x4, 0x8001, 0x0, 0x6, 0x2, 0x6, 0x9, 0x2, 0xd, 0x33ac, 0x4, 0x848, 0x6, 0x7, 0x3, 0x1, 0x9afd, 0x4, 0x7fff, 0x1, 0x1, 0xc8c, 0x5, 0x424, 0x6, 0x1, 0x1, 0x7, 0xfffffffd, 0x87, 0x8, 0x52ba, 0x9, 0x1, 0xfffffffa, 0x200, 0x8e, 0x6, 0x7976e372, 0x93, 0x10, 0x8, 0x2, 0xfff, 0x0, 0x3, 0x0, 0x3ff, 0x2, 0x9, 0xfff, 0x8561, 0x8000, 0x9, 0xe2b2, 0xc3b, 0x1, 0x3, 0x9, 0x9, 0x5, 0xa, 0x3, 0x6, 0x1, 0x4c, 0x8, 0x8, 0x3ff, 0xc, 0x0, 0x4, 0x6, 0x1, 0x3, 0x4, 0xa, 0x8dd, 0x2, 0x7, 0x2, 0x81, 0xec96, 0x1000, 0x8000, 0x4, 0xfffffffa, 0x73ab6a07, 0x86, 0x80000000, 0x81, 0x80, 0xf7, 0x69c7, 0xd, 0x873, 0x9, 0x8e9, 0x6, 0x100, 0x7ff, 0x1, 0x3, 0x200, 0x800, 0x6, 0x3ff, 0x4, 0x3, 0x6, 0x1387, 0xfffffff8, 0xa, 0x7bf8, 0x0, 0xe, 0x1000, 0x4, 0x6]}) socket$inet6(0xa, 0x2, 0x3a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r7 = dup(r6) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r7, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7000000000000006111900000e31bd384000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}, 0x1, 0x0, 0x0, 0x1000000}, 0x8884) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x9, 0x1000000) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x8884) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)={0x24, r4, 0x801, 0x0, 0x0, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x24}}, 0x8000) executing program 3: r0 = io_uring_setup(0x17c7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000040801010000000011000000000000000500030084000000090001007379fb5300000000060002"], 0x4c}}, 0x40000c0) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000006c0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000680)={{0x5, 0x0, 0x80}, "e0f7176672594e817fc843d11dc79dabbbd874b8964d1ddac14e22877106a3316ba1451b54b14b176982a5764c221501f664bb0742c6e00836304ee0701a00ff17ae0af333f9a38e0fbfc0896a25ad9db2f64582ba59d6c7394b2de98e61681be62d7af82c19548520e89cd86b97604994087d948a3f5b2d1241cb52cd16c8aa3e09eceab02a6e16c0737f56dc2a95c5a71dfa0466c097e52f1aae5f457cecdad0610593718c7203e76f123ac3f6a8dd64f3098cb00a1dfafe0a2ab7e8c4711beac69e0ec9095a4c80a67dd20ae80530ccd07ef53349535f56135a649e76caba85260b28994a2b033a35a9b69a5b8ac7ccb75d2694b000d3512eedddc0136611aedf4d57a0c677aa5bd83154d91eef0c0aaea30ca6b011459559bd2c29c169ed168dd6b0ded00dd2d3638a8dfa22d07d0b4936a02facaf78ea7814b97714093ed0943d7ca97483ec9851ab23dde004e623bfa5ce413a6ce504dd8d282bf8f32800c27c19068bdea3309328e470d2e504ee60f817489f7aa72cc99fa75a7157abf98510bdd8fde7e184beded5c50af6e0c45728d5daa30e3220446c2f7886ad5b1dc7a73289fca5bc39fc421ce358047cec50ac4bed17aeaf326f8b9aeb5464f4a3bc5a4623d7ab6f8a4d9627b04b19e995a848172c9219739e81939455d2132f293e0640ffdce5dbc39067d90ad4945fae763db900e056925aab97da2f43fbb6f67d0d25b39cdb580de2b0ae2ba51e208095589223879764aa4f7591115205486c3b7024279c25635494e7caea99f5e6dbcf2938afe46d4c7032cf1be3b762b5724af750e948cf5846cc28637adb7e0cd0a1e1c03528182010f29d51a99f22e4de3a26172890bbebae48afaaefc8a4ae01757b136724659ff1531b9aea130350a5337c4dc994b7e42ad13fecca6f724d10b48d5284b9051e12d39f4ef0c6090e8fce4b5cce7d3111f1e1ced75425a460516249618b5fc4df0866e5d07d4c74ebaa6748d864419ccf98cf47f7314b9df8fc2151e5867f05bdb156a0643e78f658f38192f8419ba9d9e61dd770bfeb97ba4c23436d0196c214f571efac56f7ae65c1b409ae4573e33e026ce65bd0d72060a9000abd2fd196da62379a98729cc008e61ea3229b7ed4170b28227f791782d218ea31a46d7afb7c76aef88540b4537b0de6f8c282dae7a7821ae869776d7f2f6dcf718c00e91c218734aae977e1ed2dec1df98187add274f84247777099ab2c938146cdc83ad651446b74d86c59b5ba3bd72559e474f739037be115bdbb910f9adcd4acf9780ca15c3f8bb700d3ad43e24d3136c707a59d70bdf77d2ff4ac2dcd349c8c963b6336ef7f0af9d0474e2522ce7c50ed6902f572314b56a36351624ba27f9077dfe9c9993877a16888f7977d0cdf29e26d61897c8f2b666f3559bab01b576d9c44ceca1e534d50f76c46b481f356cc6aa653fb11388ed3055b749bb56dfff6c5f42315ae8e06d1af34cbc41d04462d95da402127f95f4ae48c8656b02f36d0b5b5f172999fbc77518c47ab101f2b31815255be0cde88035ad51402f14aa0f9a2d96d425219f517ad732376ac7af52428dc42290337e2d58f95026ec245af1d091e117dc46ed358c975e1176804a56d69ed9d2ae52c355f72613f918a6510d53e51c0676bd297c4cd1f710359922cbef4c8d1536e85a206937fe07ee5c30e675ee028b6900d0fa01c51d98b67f44cc51d5226117e9e29fac174f6509a9de1e3755309f4488dcb3669a6b3f796c7f048252ec4139ad9244111dbd6074b0a5f63e2e88c735d1bde1b2c7943e888fb7725eacd55c0acec2aa1761bcd9817cb55e22c2e855b61f7080b2079461e03fd46643862c3bbe5f685381d4d2dc8e56ee9cdac9a98f277c85e9dc2dae579d74328786c5e8ed790700f7c63e84793cf538d2cc743674b30fc8adefb093ad6b6fbf9e56c851870ae3975c5efced4cd76b63824f5beb7a4609ed05571509de98d66684b9bdd361ca5e6ed4d704b47fa0299a813e8656a14d9ddb27613c5dd4d77822793b026f84281543c0f324d4eded3ca1e2da810e95888186e19e781accd9bdf459514315420f8d7857f3ac87d6c0caec11400f3a36b7cf3779653772e3228bff7c6586c8c0c7029a388f1fab54dd36b73e9c132d0205326902415be1eb8557c41266a8886fc3054980d10d9a6111d25870e604e03453fb6e6fbe9c440f066931c424b2f23f88dad4dab6e71dc92c1828ebd44212b5cf35c97eec114e4abd5c498cc3b0e241481a22ecdd31c9595952eb0c4bc3b29ad2bddc107e9a99dc9872520f7d31b3e7883bed090396fa4f043b6f1bed98f9bc6feb50a24fabb92f1d1bde4ceff36dfdf9dbfe8b4e2f8a64d18c3371d008c50cfbc625e3fdab7f7581a2eca2a653d2376f262e00c4b28c7cf98187bc96d1d684b5c766ce98356c3fb59c8ef460aea39ed8f6aedfeaee9ef6f124bfc4eb425ae198ecc304ef41ce0e670b21c2a029d1e8897b252e9f89308b8973895361719d3f7df07ee71a863fe0fe0002968b292853fa5f52c24a4f53d047c64e4a006923f160940f5b55fe9640e0669eaa560875f82e469b1a86fe015db8d4877919555236c8658e3b7522269725ab2cbb3ec0835c636179da9c9971c30b634287ab4c781822f5fbe5b4717041d900d549b9112fbd599567f3722b642b494dc074c265977a0708ccaf0097f8ea8ed891b2a219d4b80bc83ee27722883785fba8a9168972857a7fb5dab8fc7717d91403ba37c8f64e040cbdec128214ac6aca75a926dcd8954737c40db1586fe7eca91fde84f868e1784d13c5bb857233ab291ede405c18f9a8c60c05f4e4bd37dd57a97982bea4254ff7c19a09a3c17e27f19c5048f6cb1f766492866afd5e1803bbecc455d105c554b0b1721bef741d1dafe2ed2789ceb0e57140f13a551c3d8e3c1f9f8d15bb337ee8fbf307ddc5671bcc77eeb9803f2dc755bff041f9e123d9b850fcffd216293952ae1d5b208703cddce9c8ce6bd2988ecc63cb367e84f72adf75b92033ac3b2d6c86cce34ee292243181bb5e995573b8c7f5168fb63a6a947b11f537b4a51044ebd383962e512502b7c475f4c4dfa3edd5471af3c56d3583df787c59f8daca9fad5c931c7245c06ac4104f7dfa53c90be01d2c76bc5ead2ebcc9f2eadac450c12430c7a4bba764234bc4fd777ea4c8ccd8ef637164b49f5f79660ec1be5a02c5a7415a258f499eb400d9798257cbafeb65dbcf357919531104a432b41b3e3a4594656748e76a47998b6883a63c55bb9ccb8059b7782f39a9ac94538bcb28a7b784512bdfd95c0d524e00fae1d807442041fddb44d5ec2c724d8f28188b68c8a8ec845f8982856a97630bc27e8d119419b849b8a38b118503d07364e1f6bfccf7e18eae1a9a4eccbd6919861254251cdf3cc7dcbb899fc2f8c2ebd7b3c48173ba53d28c049113e34f2be43b4a99fb6d85c31758b5bcb586c02f6303468811330567bfd3b475887898c65723b8c210fdb09b8311048cc42ed1401dc960ada7bd6e63d38f57ead7a7faff319c687244db698dd3416fad96264cc50e67175c26b090fbcb6685f99c3a8af8128c884433c4728b820a469c9722b2c7cb013288a5cfaca951fe415a25742d96bddb1f8ca0756219a226bfa8df56f0a969ed8c0f1dddf8b0913bdf39bbca52c87ad4af94b4d16db39a56109d0129650bc793a9860d574bf1dc078f1644142e1e9dc81ee3aaef2d3b72ef4cd79a99168437519374527655db3a55a817982f24f6bd9afeb0a7954e38d2c90326c7dd08ccf896abdd97a405cb2fcfba80f0ab8f60a19567f2e258d97a542475e5b4edaba018e41d60b334c023e072893cc08353a9e8316f2910a00f7932e652397ca3581e7f8767650d4e6a4768665fe72ee85062fb6c52b6116075638a634592457c231cf469510d9289b74d11696fc0c298de014af33be7001495e816bf2bf33f201a03646c75630ed371df1eae7c9c6d01f6c307490b9641a1afc9d5c8aaaff75430f79998b5e3ed71a9a2d146d2570cf2a2b5a6e16c30d7fab6e814029083c90b43c8c74c9309a78a88bf0dbfd56a3bc53a3e8549fb7535f8bd27b1117098696518d25151e35d1de07382a2cbd6b72f24148f17dd8df92fef31d634e1cdd74141dbb94a395627586f299f64b2a25f242a2b09c7ea7ea321c7e5f3a674a596bd62f91e88ca20c0bb8b455dc9ddb70b505c40a76287612f04dced09dc83fd9ab1c463c70eda281ee608818e274d80a1062a0c719491eb9c71dc7b221423ffffba17ab3c4abf20e429cbb447ef9ef45985849807484ef35c6b185cde95c726254782b84104818b4d1a157c45cbcb34b47bd7e671372d3e9650cf7ef4f0233b30cb4e42049c67e6a343b01583592da37257f2536283f21afacf470f7ce440e4788d49b7a12cbe3d92e178d6724eaa0c3cce540356455f90d6de2a060ab9545c7c8cee8cf54fc7c29134d2920f16026ba61c96fbd6ad60de93d28ffa25a95264a60e1fdd8e7c93dcabd7289fc312141b89a1a40a569df9de1af8c612c3e5855fb3889925e2ad71708bfa6db9c1fb258ae9aaeb7186e6a7adcbafe8c6c84d06b5519476e077f9060bb3956aa8175f84ab95b9d6bb11520d8adfb4244164573a64488e0ef70518307f733087a79af1ceb4e0ab39885cc1a2a2134d0336087c6584a9472134b0fb55afb6812b4c3d411f03e6b89b3ca07263aa9bfd198eaf2c2e04a1d7c3f666089e823bd4cb06d76b401a5a291ba14d60ff2e0813b9239fe69ecff8fe7b0f47dbe4ffbd84869410e65401a7016b5af2a458954db77760fd317aad4b5ce85777c2cab29faa4ff924a925f0b97e73b1944e4b5e1442e4ac67d7b0b2630a5d8e857f5354bc158c32db6c8bb971a8a0d5746fd8c4b4768e10a3d5a2a7d484e56cd1a320f375a571752073caef8b78b2c7ab2c98e6a674b7857ad37bcdf44ec3bdc2d8ca04cbbc236b698423cdd475b8f5f855870f3ba2d730ed092d5becd7958ff55ab824e34eedc3b61709899862b918beff96e3914b267b4e1f9765625394581116e2736dae82610fd62360d50587c897486c84b4836e3528b14ea9b5ab1c623b7aaa8290a48ea7b5fcbcdf0adb64358b07e42b04184ffd2b0b5b4fc471c457fbfc91e357d3c801032eeaf8458d86825786cf316ad5e15529e80c794939c9ac5f842fa5bf5323cd2cb8662f191343599e950161136f2934e957d466bc07c0884e0c34fe91c45867f5958b330a655db012779a5e14031509172c40f446cb5051f222ad7bb62d5cf05f5de1ef6628983bb22133f7c19fbb8c2e74d0377c7a05b80762ff2a1b8916c6ab8d4f21da8b4aaa6b33b76dd75bb64914cbe8d9cbf44337729c3222d65432aa42f114a6fd90e1ec2def28d31da951b1a93b66bd0221989bc6306012edfef4f876639a81005dd52b3ec8b4be1346754abe169b74f55be60fc1ad44201a1f3b8584ad5cd4639c662db448f58a46b4e5e30ee050f56d19d2794dcb87676b8bbfeaeef9b04beb0dfa11299eaeb5205b09d08d68a3943f66b2477dbd3675b296121ea648ebe321e4666a2eb33ecb92d8d1d2f95acd0786ed09b9622d273d35de6600a039623e8fd7a91de94d2a3d025af7f85e845574217574959bf77747e29a9735ef7b3df805a21652f64ac7eb233d8e4a21d9fb2d3c5e80000e8cd3d3a21198e035547589b5f03b9a0652c1036d00258eae5c4fa22c3809c019ce987373638e91b5a0855a727cc9c7974b60e6a95464e68ff598f93be30db", "2ae889f2e8225741af235c4f933c85f170697a5847fcbe2319ecfd41ba7f408cd807a46b1eeced1d46ffaae41ee5558ac7fc2f150189ea20949bc092c6b887c6de8c93478ac0a0879f96816229168d4bf18a292070e0a865f22af7f560b381c021c53b2cc19b6a0d98899c73f598fda31eb0920cb3adfe4f2919e4e46a1e4c935cf60217087cfa639c7d2eb1294c146583b5585cb810c0b8936a0542f950a7b207200da6bfb27497caaf1b807cc1c5b38d21dc3ffc11debe47721cf5e65d715f0773e56fabb0297f914408fb81e950fedf732cb46823819cb2191767879963b4152d7c5781b14298f4a1779f82c47b41cbc76986ca5bdf694cc15c2debbea44c71703f654c43461d50f21c41ebfe4c336b44e342b5d06f5ab877c4b8cf0a6c789228fae6c200d1b040c1a1a7e76ebbb76a4dc209fd6bab7aba0544dd5b47a877b72d3f59ba309b35906eaadf54a5ab15f7b921ae621d770c58c2af0b1e8c1c8f7ad17a78a7d7195176f70749a94c3fcda2562d90d7a204225ced48fc700f6d3fa5c0a34b64fe83cc9663df47c0aeaea438c8456048f78209b96d1a564606048bdb3c70570ba7abc4764349a755933b93050dd1aaae963daddbc01b3ff757942d0fb683fd29619f9df166b88397d1905e183401039e415cf9f7ff14a391a4bcc4d23c5a8cbe6cb9a484af93a8451c6b06843bdcfbdd69f799da0cf8c0f8413befc0f571dce4c10ebfe9a6e3c15c506b22ffa549240869e3f9f115db1c42d3cb8a6e8c5e71450b17c8f5177a7e5834367caf632a52d0a7c4ccd203423ea9845742eea086ac2457730121e1d2e057d0fdb7e24d748ec2b9892ac84e9e85184893d5fd81ab0ad1b95f2730b4114248a47d8cf8f429c27565fa333e7338c1c9e9d917d447c24b7dc4bf4b2207d266e2c59a343cd4d5a4d44f1f186857f5a5ff48748c30cb10cf21e87e229f3ad0436cd451f515055ce037b40d9dee6e39aa5ad7545d584039924519a4d537773410d7f5fab2dda1c237ab28b1c8b6d54b22a1e465ed541b4c0a8098a4f97726b03eefa6093f792a99139c7e244c0e8af28df9edce732792e19cad5101c149f58c7481bdf5c9119c4a38edc3805631069cc91fceaf7296e415f5d531e9743df9105c0692d2abfd9a40c794c6a7c9e10d7f0217bbe94caa2bbaab041340b96d49a2c50224c622095826500704c1bfc37e0ebd9ffc1d6f2821b3c0d108d7da1de4908983657cfe1ae0c361da4014189ef46ce14db41c0fb5f3dbecc246163af5df1a203084a043659750bfb6283f795166e52ead8b3c51627b2e8fd56f84af861236494baa5d6c45527972ed98f5d6e44e46efcf8964ccc6907d03b751058394f6b7e3f799a4f6b386d110344a3c00c37f74a42045349f7280ec27352ff5482c961d0cd04f899db59a7c940102a25d67917cf744f331e57ce982a4bb48439b90583147213580d480f83c9032eaffdc82653584cc16eb047f949a5ecf8d6171bdea89349baf2cc8a797e8b436312be073519da201c257a4e75827ff334e6b2c7975b6c51e83c26e8786279715fbad1bc6650a9b063e1386177b350b1116c3aa66a6406b0e0a1f1c147146bb2ab501c9eff800d25d4fefea8a7852096cf20909301872c4168331cc73df46ac948613e93e371dc3a487c78fe3eb4375172a2a605b23473dffab421f9fd609f0495f994cfe24984e92de805bedf15d4a2c4cc0258af6918e934c165cc0f052f269b28444f6cdb881ccd0b1793d75d24ed4f3955e0896e6566aba7970744825c17655475e9f213b1c5445dcb969c56a9d7d7f25429837d5e9cc96e947ebd8caba59c8e53209ca038b1f7592d915b98b82a9d6c03654b6760d79c7c8c8a642cb458780561747080c2b18019d81e3f4a1684dda2ba20624908d480b02d0cf806cc47e589b79b66b03b0b2edf7e9006923d5e917bcf61152da8c58fc0724224ce823cf916cf5b002705f39bd7db5012a671bed13293ec3005406652ffaed85cb3fe6d013bbeb17af1b8a80ffcfdbf72d8b4abfd43f8032e1fc20e76aaad1e80a3b4a79d8e9eddf69e1e7391d1a6a405297dbf92139b7308eae1cb30fdd9b3bb152378b40645e1af7d7de43b05ccb509cdc143980ed792311ede8066d1416108e358977146de6c5edc494e2a70cdceca2d7fb30fb05cd71d56b86c7b2b1220ce237573673550991de27a5723062b0d768dc820c5e4c7a29c1adfa25c36c465fe6cabfcde5d784b6c85b9652ae673b49926901747cc882ad6415dd7ba19f521c5f89a36bef389234831cd48179f07fba5125270cc2f42cd2e7b325e533c177e23df955c0e8f43e5c46d7a7a2440087b8bdaab8b0300329df3a370b0f6685254ceade9e4d18f49d9060a256c9bdd3e245accb73353b403561cd74390e426d57621fc5a0466df005e63d7c035efbf1c14c1d154d613d8250941fd5eff2583a2fdc870ec190faea29af31610b6ca2f96f148dbbbf29954a94778dbced62747ccfab9649709b4c692bb141d59270cdfdf80153034cb3a174c8090c2bc43f24c6acb2f693215aca4703f20a24fe65480d9f13236cbbf2888d23a0295b463491a34348e1427acbd63ca9bc32359fb36244e01a9c1ec551cc1fdc846f53e056bcdb67a4e9816923585b081786fc07229032d0ca096ce86b6ac0dc57850c7ef0f2f4fdf6d573d29a780dd6316dbfa22c801f48f5d254506f6b0ca6c98402313806484a32eb664f0cace8681aee522b7978bbfbc121eeea61cc8da363b1714accd0b4f6a1657e2727052c6ec085f4aeb702640258c1c9d5006620140d3540e5decd323352047e0fac6f0e3c5a44a2fbd5ba39ad290438c73b67907f3354748bd3e580614392173ced315074fd36e10945dbcd9c0dae61bdfd1a9ee5023d9e7d249c8f5332eaf464e15a8f07fe49d18c4294817892a026d70d42e3495166a1b8a50954b3d8d702b06b4e54dec07d3e94c6210bc65436ca48e7dfed4c38f1bbacb3204909cedf30016c5ea80c7e5c6a84db5b8a4c3d0f70481cd47a68ea4fde337a789ac3aef1afde19cd1a9844340718dd3c6c1ebea3cf989606be6dbdfb2d8c880404d6105069a6ffd6a65639338577ae0188f5ae47c9e2f1abfe04c7a391bd1bb10aef7eddf56f63524b48f588d97d0cc0fc86dd548a645be87c0eabb9dbb497ac41c04830686b1a00edd9d1b8edf015e1f7116e89108d7531955b2638e2ef14ca57ca0ecb5a02840f4ad52bffc7aac6131be12fb8cb267f5b88b393c3d7277636e0b3d98ab2c0b8eedbeb02188affbba6ec247307dae6bd1b8a6c8e0c0b62872dbd30a9f3ac937a07aaf7d70c25cb4def9dcc4194c56425e81eff7409edd9e1304dbd0729c83a16e4d8efa03c3d6e4e28e85316f9a37026320a5a02127dc44e235f7c56610dd6902a748dd218b3822913599ae61baca167a6f1bbc29f7b3caa807fb500001d9b6fd2b07a9ff29ae0efcce41f732f16ba721eb22ac58d13db3489682cdf30b1ec3a4db3168ac4abb44d4d82d4f9ebc660da242ea3cd0107c96f01bef35b502724dc68bfae7c6b5c0835b7f436929c81d7d626a7b65dd4e925f75d2c29fdd4d91c3a5d9aaf4978645b68d0c519ebfdb5bbce12b2ad879c49947b7b09bc46addff32babc9493988718f2ada383975a260b226d803e92042fd69cdedda3f28f1168656cb57e4b03108e01dc0dae635e2bbe7fb0a86de4b4c97f9b1ce51e15e59d1b396755c1c36561233b4aecc5b6b69e7c654b4cada2c3fb9610bde7b1b3d0a5e85cab53908a3d49ebf58cf9cf11c7d391b187473c5f373d0598b7ec73171e8cc18efbb84b1380034425eb547d4ebca49057b5d1fe86c5a9e4d0138d5b2fea43083191a2a31862f11ef37bed6a63c5078cdc1b4b69e6568f7262de81131c6a8c9df2ef5bc72d7d51ae405dc1f7c972be9bd2b9bd67ca9a9f8e40d3a8d0587fb4380ae7d7de1eae24b98267f53db71c7b7cbc838616253db367f0c73bf44f7e16c190d1a5aa736601a56557801e711d1123adba8ba7402153d093b6b9a816add0e7ab313b1d4a10d33124bc5ff48c9387f8cb8ec267e1c92211dab748be9b28fe43ff645e0b1dd13f65e0cccb0819a2a7f500e1e29f0df0d7d88699562a5e61e299fb5309fccf2b73f7408f702ef2218f11ca15522c815af3726ec150046e4c811b422c36c4ad2193e1e48294a08c6374cf1010ebaf9ba26da1672ac724efdb3055fea534cc024a9c8ed75ea8becaca21456b523752d4304f36013963a2c074a2609f8354188b619eb21398782f74d734930861fb07f125312c46585911f7cb4c65990db16766f448ae7b1f15901349db6b59f60a8426efebe7f218fac320b22b4f1197c4fec26ff9084cd8e47b92fbd41473e3cbd27a93d2a8a57136b5d3838f5eea39b5636df5e1d72c02fa22d1eebb5e4a15bca0fa88b332a7077effd1da355b9ea529c70f681ed89ed708d76e6674bb251a8f3674e27a871d91588f72f791daafcd7676279519da862a2cfd74846d14f78b81ac00ff0200c62e2372be0399e47e7f939d2f91e9054e6c7fc3528a0b00cbea8a1b7976a12f0ec9a0ba96197eae3675d2af04fcc598fc53e07deb8e5795a13b42d79ffde0bd3cbf105c9f60a27df0cef2c1801e2c44c2faf8757aa41653f7d6bfb35fb8772769f01b9f4e0198b39eb0ad0e87f4795707aac597ceac6ba42b6afc482d00d928b2087a457a56520cfd0ca922f7180edf53ef736e98284f075a5cf1bb4551d25bd6cdebf0e61f99d703cfbaf95fcc3222f67778f028921f6208a791800e0d7432aac4e342928616c64621e3cb5f1f4235aaac35360c4d46f1ef24cb4ef4b2d00fafcadb58457538159cdab5029c8697dfde9dbfd9ac841b3f952b64c6a77b65ad813fc2339b556c184632a8cbbcd42026cd2612b016460c556340e7756651a3c3bc972b1aec40cdfa6529f5a7fcb8dc81fbc9d1ba5d3e0e8f901904e0afecd55c32527e4eefce1852e8ab38120303e5213cbcee027e1e826c9352fb841c83909b1612ff66c20bbf58702eab6cd4f3aa6bba0ea0a7f2b2d0a8c48a6048a0e5a5d071dedfb5730ef25a5950270e82c99fb0775ab7351fababcd6f345f7d63365e0018c78243e33a98de8abe757d2ce403f5f45eed60c81ab29238fed7ac1e80e8887b5f8970cb7507a87fca1ef87456abff51c064f69c7df170bc50a60aab3af7345ea57f65e8378c5889a4238daefdcb1cd894466e442999ac0958ad3f966f2f3d511553835d3bd2f5794a9ed2bc995291b08b52a41256b3b62df2e393447016c72e3c15e48a4ba1ab0a9d07e6dd753a429ac57e8981610bf314f4507a9a674ffa13545944a1ef18be4d169f3c85b9b75b765f5ff2c34ce31fde6a4749010514bb5f603fac16180300ec26e02b160588df0795e651e0cd0c8b32fa4a24d37622a9355ab936c17161071ea7296545768ea224525cbb33caa493959c37b6fc7376dc7f97a756a5c229ac9c61f5ef9b9f8b110b113d0cf7f99e80b54a61d525941b7de60fee3b6260de5152e60d5fa097e7f02330e7581d271923037c023c095d7f6df7cc15df4cfe8afe7d6573ad22ba0a5b23d204079e273ee6b57b5f78df8149a1dab4852c8dddf0ad7bb4420cfbd88225a4da057c256c9debad1adaacd030dc0d66a3ddf52a291cf9e811ce32b286a5b16363621231d13d80dfc5dbfca9ad84da0d761db40eb97698cdd9f6ecf122371e97c32df5c8bd2eade9b1dd46b7fb67489b4882fb483f653952873604200"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001500)={@map=0x1, 0x2f, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1460, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1400}], 0x0, 0x0, 0x0}) executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x4b, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r3}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) executing program 8: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2040084) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2040084) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0], 0x84}}, 0x0) executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000402b00000008000300", @ANYRES32=r2, @ANYBLOB="0a003400150000000101000004002a00"], 0x2c}}, 0x0) executing program 8: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000003c0)="0022041100ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77a62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a12", 0x98) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0, 0x34}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x9, 0x8}, 0xc) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="7fb20700000053c407cd", @ANYRESHEX=r1], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x10) syz_emit_ethernet(0x22, &(0x7f00000006c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @dev, @local}}}}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000e80007000000", @ANYRES32=r8, @ANYBLOB="000000000a0002"], 0x28}}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r10, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x20, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0xc0, 0x9, 0xa, 0x101, 0x0, 0x0, {0xf, 0x0, 0x4}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_EXPRESSIONS={0x9c, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELRULE={0x10c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x1f, 0x7, 0x1, 0x0, "a0ded2e17daf4d79e0241cc33a4e1e31038dd5949b6f613a5ec38b"}, @NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x19}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2b}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xd2}, @NFTA_PAYLOAD_DREG={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x84, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_OBJ_NAME={0xfffffe65, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x29, 0x8, "e46e2a8258e6676805a07372f6bd21f02323f497629b408a1c1ef02186992a37153d489697"}, @NFTA_OBJ_USERDATA={0x1f, 0x8, "a5f1a563019378309c9c48a55b50d92cb7d5f1beb82c9955d04a35"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x134, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0xa4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x400}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000300), 0x20000000}, 0x20) recvmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/28, 0x1c}], 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) getpeername$unix(r1, &(0x7f0000000580)=@abs, &(0x7f0000000600)=0x6e) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, 0x0, 0x0) r5 = syz_clone(0x4000, 0x0, 0xffffffffffffff3a, 0x0, 0x0, 0x0) r6 = syz_open_procfs$namespace(r5, &(0x7f0000000440)='ns/net\x00') r7 = syz_clone(0x100000, &(0x7f0000000100)="0c066163e3909e9eb58a7020866bfe9fc9c718d6f601adfa62c086d7c1f8b62911bd8c9a5cb89268605ecc7e4ca47cfea49b63908a554f96ca24cb3b38c3b50b96b83518cfbfc91452586ccf24babbe7d06cb2f58fdf96e2931c69289d3230a9a6fe2a91151aac120f84fd4fa7d5d6eef03cb0dc783d2c440f4f7d26104e8255d2ea8e72961f49a2e9820edec28dec38e6ac7b702d66edf1afdbf7d3e512cb07ffff6beaf8822f", 0xa7, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000400)="22bf4741c1b4bf3e0064a78937e2") sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@RTM_NEWNSID={0x4c, 0x58, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}]}, 0x4c}}, 0x894) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={r3, &(0x7f0000001c80)}, 0x20) close(r2) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}}, 0x0) setns(r6, 0x80) executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5e2b, 0x0, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0x2}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'veth1_vlan\x00'}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) (async) unshare(0x62040200) (async) socket(0x1d, 0x3, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) (async) socket$inet(0x2, 0x3, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)) (async) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r9, @ANYBLOB="0100"], 0xcc}, 0x1, 0xf000}, 0x0) executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffe5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009404, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00008e6000/0x1000)=nil, 0x1000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000ec0)=[{}], 0x1, 0x1ff, 0x0, 0x0, 0x0, 0x1f}) personality(0x6) userfaultfd(0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x9, 0x501040) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/148}, {&(0x7f0000000140)=""/49}, {&(0x7f0000000200)=""/187}], 0x3, 0x80000002, 0x4) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) executing program 3: r0 = io_uring_setup(0x17c7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000040801010000000011000000000000000500030084000000090001007379fb5300000000060002"], 0x4c}}, 0x40000c0) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 17 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-socket$rxrpc-bind$rxrpc-socket$nl_netfilter-sendmsg$IPCTNL_MSG_TIMEOUT_NEW-listen-recvmmsg-socket$nl_route-close_range-openat$binder_debug-close_range detailed listing: executing program 0: r0 = io_uring_setup(0x17c7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000040801010000000011000000000000000500030084000000090001007379fb5300000000060002"], 0x4c}}, 0x40000c0) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sw_sync-bpf$PROG_LOAD-madvise-syz_open_procfs$pagemap-mmap-mmap$IORING_OFF_SQ_RING-userfaultfd-set_mempolicy-ioctl$UFFDIO_API-openat$btrfs_control-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_open_dev$dri-ioctl$DRM_IOCTL_SET_CLIENT_CAP-ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_MODE_ATOMIC-ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES-ioctl$UFFDIO_REGISTER-ioctl$UFFDIO_COPY-ioctl$PAGEMAP_SCAN-personality-userfaultfd-syz_open_dev$sg-preadv-syz_open_dev$sndctrl-ioctl$int_in-close_range detailed listing: executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffe5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009404, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00008e6000/0x1000)=nil, 0x1000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000ec0)=[{}], 0x1, 0x1ff, 0x0, 0x0, 0x0, 0x1f}) personality(0x6) userfaultfd(0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x9, 0x501040) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/148}, {&(0x7f0000000140)=""/49}, {&(0x7f0000000200)=""/187}], 0x3, 0x80000002, 0x4) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socketpair$unix-bpf$MAP_CREATE-bpf$MAP_DELETE_ELEM-recvmsg$unix-openat-getpeername$unix-quotactl_fd$Q_GETNEXTQUOTA-syz_clone-syz_open_procfs$namespace-syz_clone-sendmsg$nl_route-bpf$MAP_DELETE_ELEM-close-sendmsg$NFT_BATCH-setns detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0xc0, 0x9, 0xa, 0x101, 0x0, 0x0, {0xf, 0x0, 0x4}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_EXPRESSIONS={0x9c, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELRULE={0x10c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x1f, 0x7, 0x1, 0x0, "a0ded2e17daf4d79e0241cc33a4e1e31038dd5949b6f613a5ec38b"}, @NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x19}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2b}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xd2}, @NFTA_PAYLOAD_DREG={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x84, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_OBJ_NAME={0xfffffe65, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x29, 0x8, "e46e2a8258e6676805a07372f6bd21f02323f497629b408a1c1ef02186992a37153d489697"}, @NFTA_OBJ_USERDATA={0x1f, 0x8, "a5f1a563019378309c9c48a55b50d92cb7d5f1beb82c9955d04a35"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x134, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0xa4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x400}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000300), 0x20000000}, 0x20) recvmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/28, 0x1c}], 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) getpeername$unix(r1, &(0x7f0000000580)=@abs, &(0x7f0000000600)=0x6e) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, 0x0, 0x0) r5 = syz_clone(0x4000, 0x0, 0xffffffffffffff3a, 0x0, 0x0, 0x0) r6 = syz_open_procfs$namespace(r5, &(0x7f0000000440)='ns/net\x00') r7 = syz_clone(0x100000, &(0x7f0000000100)="0c066163e3909e9eb58a7020866bfe9fc9c718d6f601adfa62c086d7c1f8b62911bd8c9a5cb89268605ecc7e4ca47cfea49b63908a554f96ca24cb3b38c3b50b96b83518cfbfc91452586ccf24babbe7d06cb2f58fdf96e2931c69289d3230a9a6fe2a91151aac120f84fd4fa7d5d6eef03cb0dc783d2c440f4f7d26104e8255d2ea8e72961f49a2e9820edec28dec38e6ac7b702d66edf1afdbf7d3e512cb07ffff6beaf8822f", 0xa7, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000400)="22bf4741c1b4bf3e0064a78937e2") sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@RTM_NEWNSID={0x4c, 0x58, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}]}, 0x4c}}, 0x894) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={r3, &(0x7f0000001c80)}, 0x20) close(r2) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}}, 0x0) setns(r6, 0x80) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$inet6_buf-socket$nl_route-socket-sendmsg$SEG6_CMD_GET_TUNSRC-mkdir-pipe2$9p-bpf$BPF_MAP_GET_FD_BY_ID-write$P9_RVERSION-dup-write$P9_RLERRORu-write$RDMA_USER_CM_CMD_SET_OPTION-write$RDMA_USER_CM_CMD_BIND_IP-write$binfmt_elf64-mount$9p_fd-chdir-openat$cgroup_ro-syz_emit_ethernet-getsockname$packet-creat-mount$tmpfs-socket$netlink-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-openat$nullb-dup-mmap-sendmsg$nl_route-syz_genetlink_get_family_id$nl80211 detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000003c0)="0022041100ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77a62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a12", 0x98) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0, 0x34}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x9, 0x8}, 0xc) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="7fb20700000053c407cd", @ANYRESHEX=r1], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x10) syz_emit_ethernet(0x22, &(0x7f00000006c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @dev, @local}}}}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000e80007000000", @ANYRES32=r8, @ANYBLOB="000000000a0002"], 0x28}}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r10, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x20, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex_waitv-syz_open_dev$evdev-syz_emit_vhci-socket-bpf$MAP_CREATE_TAIL_CALL-openat$tun-socket$igmp6-setsockopt$IP6T_SO_SET_REPLACE-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-syz_genetlink_get_family_id$nl80211-write$tun detailed listing: executing program 0: futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000)=0x3, 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="86000000c8001d"], 0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd03000000f5ff1400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xfdef) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): futex_waitv-syz_open_dev$evdev-syz_emit_vhci-socket-bpf$MAP_CREATE_TAIL_CALL-openat$tun-socket$igmp6-setsockopt$IP6T_SO_SET_REPLACE-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-syz_genetlink_get_family_id$nl80211-write$tun detailed listing: executing program 0: futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000)=0x3, 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="86000000c8001d"], 0x7) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd03000000f5ff1400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xfdef) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program crashed: WARNING: locking bug in __set_page_owner single: successfully extracted reproducer found reproducer with 16 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2 detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$full-setsockopt$inet_group_source_req-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-recvmmsg-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-socket$inet6_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmmsg-openat$sequencer2-ioctl$SNDCTL_SEQ_OUTOFBAND detailed listing: executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x8001, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x0, 0x1a}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) program did not crash reproducing took 5h3m49.845196023s repro crashed as (corrupted=false): ============================= [ BUG: Invalid wait context ] 6.12.0-syzkaller-08446-g228a1157fb9f #0 Not tainted ----------------------------- sshd/5965 is trying to lock: ffffffff8e3a3298 (stack_list_lock){-.-.}-{3:3}, at: add_stack_record_to_list mm/page_owner.c:182 [inline] ffffffff8e3a3298 (stack_list_lock){-.-.}-{3:3}, at: inc_stack_record_count mm/page_owner.c:214 [inline] ffffffff8e3a3298 (stack_list_lock){-.-.}-{3:3}, at: __set_page_owner+0x3ea/0x560 mm/page_owner.c:329 other info that might help us debug this: context-{2:2} 4 locks held by sshd/5965: #0: ffff888028b3a8e0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_downgrade include/linux/mmap_lock.h:138 [inline] #0: ffff888028b3a8e0 (&mm->mmap_lock){++++}-{4:4}, at: vms_complete_munmap_vmas+0x710/0x980 mm/vma.c:1139 #1: ffffffff8e1bbac0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #1: ffffffff8e1bbac0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffffff8e1bbac0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x42/0x540 mm/pgtable-generic.c:287 #2: ffff8880323f30d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: spin_lock include/linux/spinlock.h:351 [inline] #2: ffff8880323f30d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0xf1/0x300 mm/pgtable-generic.c:375 #3: ffff88806a83eb18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:598 stack backtrace: CPU: 2 UID: 0 PID: 5965 Comm: sshd Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_lock_invalid_wait_context kernel/locking/lockdep.c:4826 [inline] check_wait_context kernel/locking/lockdep.c:4898 [inline] __lock_acquire+0x878/0x3c40 kernel/locking/lockdep.c:5176 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5849 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:162 add_stack_record_to_list mm/page_owner.c:182 [inline] inc_stack_record_count mm/page_owner.c:214 [inline] __set_page_owner+0x3ea/0x560 mm/page_owner.c:329 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1556 prep_new_page mm/page_alloc.c:1564 [inline] get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3474 __alloc_pages_noprof+0x223/0x25a0 mm/page_alloc.c:4751 alloc_pages_mpol_noprof+0x2c9/0x610 mm/mempolicy.c:2265 stack_depot_save_flags+0x566/0x8f0 lib/stackdepot.c:627 kasan_save_stack+0x42/0x60 mm/kasan/common.c:48 __kasan_record_aux_stack+0xba/0xd0 mm/kasan/generic.c:541 task_work_add+0xc0/0x3b0 kernel/task_work.c:77 task_tick_numa kernel/sched/fair.c:3607 [inline] task_tick_fair+0x524/0x8e0 kernel/sched/fair.c:13054 sched_tick+0x1dd/0x4f0 kernel/sched/core.c:5652 update_process_times+0x19c/0x2d0 kernel/time/timer.c:2524 tick_sched_handle kernel/time/tick-sched.c:276 [inline] tick_nohz_handler+0x376/0x530 kernel/time/tick-sched.c:297 __run_hrtimer kernel/time/hrtimer.c:1739 [inline] __hrtimer_run_queues+0x5fb/0xae0 kernel/time/hrtimer.c:1803 hrtimer_interrupt+0x392/0x8e0 kernel/time/hrtimer.c:1865 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline] __sysvec_apic_timer_interrupt+0x10f/0x400 arch/x86/kernel/apic/apic.c:1055 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0x9f/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:find_first_bit include/linux/find.h:205 [inline] RIP: 0010:__first_node include/linux/nodemask.h:266 [inline] RIP: 0010:policy_nodemask+0x3b6/0x4e0 mm/mempolicy.c:2053 Code: 00 e9 4d fd ff ff e8 39 9a a0 ff 48 8d 7d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 15 01 00 00 <48> 8b 5d 08 31 ff bd 40 00 00 00 48 89 de e8 77 9c a0 ff 48 85 db RSP: 0018:ffffc900045cf4b0 EFLAGS: 00000246 RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff81ed9c30 RDX: 1ffffffff350b661 RSI: ffffffff81ed9f67 RDI: ffffffff9a85b308 RBP: ffffffff9a85b300 R08: 0000000000000003 R09: 0000000000000006 R10: 0000000000000001 R11: 0000000000000003 R12: ffffc900045cf548 R13: ffffffffffffffff R14: 0000000000002800 R15: dffffc0000000000 alloc_pages_mpol_noprof+0x9c/0x610 mm/mempolicy.c:2227 get_free_pages_noprof+0xc/0x40 mm/page_alloc.c:4798 tlb_next_batch mm/mmu_gather.c:35 [inline] __tlb_remove_folio_pages_size.constprop.0+0x2f0/0x560 mm/mmu_gather.c:196 zap_present_folio_ptes mm/memory.c:1525 [inline] zap_present_ptes mm/memory.c:1579 [inline] zap_pte_range mm/memory.c:1621 [inline] zap_pmd_range mm/memory.c:1739 [inline] zap_pud_range mm/memory.c:1768 [inline] zap_p4d_range mm/memory.c:1789 [inline] unmap_page_range+0x151a/0x3cf0 mm/memory.c:1810 unmap_single_vma+0x194/0x2b0 mm/memory.c:1856 unmap_vmas+0x22f/0x490 mm/memory.c:1900 vms_clear_ptes+0x426/0x780 mm/vma.c:1095 vms_complete_munmap_vmas+0x1ce/0x980 mm/vma.c:1144 do_vmi_align_munmap+0x619/0x890 mm/vma.c:1353 do_vmi_munmap+0x20b/0x3e0 mm/vma.c:1401 __vm_munmap+0x14f/0x340 mm/mmap.c:1623 __do_sys_munmap mm/mmap.c:1640 [inline] __se_sys_munmap mm/mmap.c:1637 [inline] __x64_sys_munmap+0x59/0x80 mm/mmap.c:1637 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f637dd1d817 Code: ff ff 76 10 48 8b 15 10 36 0d 00 f7 d8 64 89 02 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 35 0d 00 f7 d8 64 89 01 48 RSP: 002b:00007ffc4d8091d8 EFLAGS: 00000207 ORIG_RAX: 000000000000000b RAX: ffffffffffffffda RBX: fffffffffffffe98 RCX: 00007f637dd1d817 RDX: 0000000000000000 RSI: 00000000002b9000 RDI: 00007f637d438000 RBP: 0000000000000020 R08: 00007f637d438000 R09: 0000000000000000 R10: 0000000000000022 R11: 0000000000000207 R12: 00007f637d438000 R13: 00007f637d438010 R14: 00000000002b8000 R15: 00007ffc4d8093b8 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: e9 4d fd ff ff jmp 0xfffffd52 5: e8 39 9a a0 ff call 0xffa09a43 a: 48 8d 7d 08 lea 0x8(%rbp),%rdi e: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 15: fc ff df 18: 48 89 fa mov %rdi,%rdx 1b: 48 c1 ea 03 shr $0x3,%rdx 1f: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 23: 0f 85 15 01 00 00 jne 0x13e * 29: 48 8b 5d 08 mov 0x8(%rbp),%rbx <-- trapping instruction 2d: 31 ff xor %edi,%edi 2f: bd 40 00 00 00 mov $0x40,%ebp 34: 48 89 de mov %rbx,%rsi 37: e8 77 9c a0 ff call 0xffa09cb3 3c: 48 85 db test %rbx,%rbx final repro crashed as (corrupted=false): ============================= [ BUG: Invalid wait context ] 6.12.0-syzkaller-08446-g228a1157fb9f #0 Not tainted ----------------------------- sshd/5965 is trying to lock: ffffffff8e3a3298 (stack_list_lock){-.-.}-{3:3}, at: add_stack_record_to_list mm/page_owner.c:182 [inline] ffffffff8e3a3298 (stack_list_lock){-.-.}-{3:3}, at: inc_stack_record_count mm/page_owner.c:214 [inline] ffffffff8e3a3298 (stack_list_lock){-.-.}-{3:3}, at: __set_page_owner+0x3ea/0x560 mm/page_owner.c:329 other info that might help us debug this: context-{2:2} 4 locks held by sshd/5965: #0: ffff888028b3a8e0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_downgrade include/linux/mmap_lock.h:138 [inline] #0: ffff888028b3a8e0 (&mm->mmap_lock){++++}-{4:4}, at: vms_complete_munmap_vmas+0x710/0x980 mm/vma.c:1139 #1: ffffffff8e1bbac0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #1: ffffffff8e1bbac0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffffff8e1bbac0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x42/0x540 mm/pgtable-generic.c:287 #2: ffff8880323f30d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: spin_lock include/linux/spinlock.h:351 [inline] #2: ffff8880323f30d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0xf1/0x300 mm/pgtable-generic.c:375 #3: ffff88806a83eb18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:598 stack backtrace: CPU: 2 UID: 0 PID: 5965 Comm: sshd Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_lock_invalid_wait_context kernel/locking/lockdep.c:4826 [inline] check_wait_context kernel/locking/lockdep.c:4898 [inline] __lock_acquire+0x878/0x3c40 kernel/locking/lockdep.c:5176 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5849 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:162 add_stack_record_to_list mm/page_owner.c:182 [inline] inc_stack_record_count mm/page_owner.c:214 [inline] __set_page_owner+0x3ea/0x560 mm/page_owner.c:329 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1556 prep_new_page mm/page_alloc.c:1564 [inline] get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3474 __alloc_pages_noprof+0x223/0x25a0 mm/page_alloc.c:4751 alloc_pages_mpol_noprof+0x2c9/0x610 mm/mempolicy.c:2265 stack_depot_save_flags+0x566/0x8f0 lib/stackdepot.c:627 kasan_save_stack+0x42/0x60 mm/kasan/common.c:48 __kasan_record_aux_stack+0xba/0xd0 mm/kasan/generic.c:541 task_work_add+0xc0/0x3b0 kernel/task_work.c:77 task_tick_numa kernel/sched/fair.c:3607 [inline] task_tick_fair+0x524/0x8e0 kernel/sched/fair.c:13054 sched_tick+0x1dd/0x4f0 kernel/sched/core.c:5652 update_process_times+0x19c/0x2d0 kernel/time/timer.c:2524 tick_sched_handle kernel/time/tick-sched.c:276 [inline] tick_nohz_handler+0x376/0x530 kernel/time/tick-sched.c:297 __run_hrtimer kernel/time/hrtimer.c:1739 [inline] __hrtimer_run_queues+0x5fb/0xae0 kernel/time/hrtimer.c:1803 hrtimer_interrupt+0x392/0x8e0 kernel/time/hrtimer.c:1865 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline] __sysvec_apic_timer_interrupt+0x10f/0x400 arch/x86/kernel/apic/apic.c:1055 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0x9f/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:find_first_bit include/linux/find.h:205 [inline] RIP: 0010:__first_node include/linux/nodemask.h:266 [inline] RIP: 0010:policy_nodemask+0x3b6/0x4e0 mm/mempolicy.c:2053 Code: 00 e9 4d fd ff ff e8 39 9a a0 ff 48 8d 7d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 15 01 00 00 <48> 8b 5d 08 31 ff bd 40 00 00 00 48 89 de e8 77 9c a0 ff 48 85 db RSP: 0018:ffffc900045cf4b0 EFLAGS: 00000246 RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff81ed9c30 RDX: 1ffffffff350b661 RSI: ffffffff81ed9f67 RDI: ffffffff9a85b308 RBP: ffffffff9a85b300 R08: 0000000000000003 R09: 0000000000000006 R10: 0000000000000001 R11: 0000000000000003 R12: ffffc900045cf548 R13: ffffffffffffffff R14: 0000000000002800 R15: dffffc0000000000 alloc_pages_mpol_noprof+0x9c/0x610 mm/mempolicy.c:2227 get_free_pages_noprof+0xc/0x40 mm/page_alloc.c:4798 tlb_next_batch mm/mmu_gather.c:35 [inline] __tlb_remove_folio_pages_size.constprop.0+0x2f0/0x560 mm/mmu_gather.c:196 zap_present_folio_ptes mm/memory.c:1525 [inline] zap_present_ptes mm/memory.c:1579 [inline] zap_pte_range mm/memory.c:1621 [inline] zap_pmd_range mm/memory.c:1739 [inline] zap_pud_range mm/memory.c:1768 [inline] zap_p4d_range mm/memory.c:1789 [inline] unmap_page_range+0x151a/0x3cf0 mm/memory.c:1810 unmap_single_vma+0x194/0x2b0 mm/memory.c:1856 unmap_vmas+0x22f/0x490 mm/memory.c:1900 vms_clear_ptes+0x426/0x780 mm/vma.c:1095 vms_complete_munmap_vmas+0x1ce/0x980 mm/vma.c:1144 do_vmi_align_munmap+0x619/0x890 mm/vma.c:1353 do_vmi_munmap+0x20b/0x3e0 mm/vma.c:1401 __vm_munmap+0x14f/0x340 mm/mmap.c:1623 __do_sys_munmap mm/mmap.c:1640 [inline] __se_sys_munmap mm/mmap.c:1637 [inline] __x64_sys_munmap+0x59/0x80 mm/mmap.c:1637 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f637dd1d817 Code: ff ff 76 10 48 8b 15 10 36 0d 00 f7 d8 64 89 02 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 35 0d 00 f7 d8 64 89 01 48 RSP: 002b:00007ffc4d8091d8 EFLAGS: 00000207 ORIG_RAX: 000000000000000b RAX: ffffffffffffffda RBX: fffffffffffffe98 RCX: 00007f637dd1d817 RDX: 0000000000000000 RSI: 00000000002b9000 RDI: 00007f637d438000 RBP: 0000000000000020 R08: 00007f637d438000 R09: 0000000000000000 R10: 0000000000000022 R11: 0000000000000207 R12: 00007f637d438000 R13: 00007f637d438010 R14: 00000000002b8000 R15: 00007ffc4d8093b8 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: e9 4d fd ff ff jmp 0xfffffd52 5: e8 39 9a a0 ff call 0xffa09a43 a: 48 8d 7d 08 lea 0x8(%rbp),%rdi e: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 15: fc ff df 18: 48 89 fa mov %rdi,%rdx 1b: 48 c1 ea 03 shr $0x3,%rdx 1f: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 23: 0f 85 15 01 00 00 jne 0x13e * 29: 48 8b 5d 08 mov 0x8(%rbp),%rbx <-- trapping instruction 2d: 31 ff xor %edi,%edi 2f: bd 40 00 00 00 mov $0x40,%ebp 34: 48 89 de mov %rbx,%rsi 37: e8 77 9c a0 ff call 0xffa09cb3 3c: 48 85 db test %rbx,%rbx