Extracting prog: 32m32.98145556s Minimizing prog: 8m48.32900501s Simplifying prog options: 0s Extracting C: 1m52.446203231s Simplifying C: 8m26.911806447s extracting reproducer from 42 programs testing a last program of every proc single: executing 7 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_TEST_RUN detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0xc0, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x70, 0x5, 0x0, 0x1, [{0x5, 0x4, @local}, {0xa}, {0xa, 0x4, @remote}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @random="7f9351052a55"}, {0xa}, {0xa, 0x4, @broadcast}]}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve0\x00'}]}, 0xc0}}, 0x8000) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$nbd-ioctl$SIOCSIFHWADDR-syz_open_dev$vcsa-socket$inet_tcp-socket$inet_icmp_raw-setsockopt$IPT_SO_SET_REPLACE-syz_io_uring_complete-socket$nl_route detailed listing: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000022c0)={'lo\x00', @local}) syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x600000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x0, 0x1000000, 0xffffffff, 0x248, 0xffffffff, 0x2e0, 0xffffffff, 0xffffffff, 0x2e0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'vcan0\x00', {}, {0xff}, 0x4, 0x0, 0x28}, 0x0, 0x220, 0x248, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0xf, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3d8) syz_io_uring_complete(0x0) socket$nl_route(0x10, 0x3, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$igmp6-bpf$MAP_CREATE-socket$packet-sendto$packet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD-fsopen-fsconfig$FSCONFIG_SET_BINARY-openat$ptmx-ioctl$TCSETAF-write$binfmt_aout-ioctl$TCSETS-syz_open_pts-dup3-ioctl$TIOCSTI detailed listing: executing program 0: socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7d}}, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) r3 = syz_open_pts(r2, 0x20800) dup3(r3, r2, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x44) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-socket$inet6-sendto$inet6-socket$nl_route-sendmsg$nl_route-recvfrom$inet6 detailed listing: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="8c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="580a010023120100640012800800010073697400", @ANYRES16=r1, @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-sendmmsg$inet6-shutdown detailed listing: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x88, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000002280)=[{&(0x7f00000004c0)="b4", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000000c0)="189f90a7ad", 0x5}], 0x1}}], 0x2, 0x931766f6319eed00) shutdown(r0, 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_clone-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001300010600000000e4fedbdf25000000", @ANYRES32=r2, @ANYBLOB="242400002019000008001300", @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) program did not crash single: failed to extract reproducer bisect: bisecting 42 programs with base timeout 1m40s testing program (duration=1m50s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 2, 4, 19, 13, 9, 2, 7, 2, 2, 3, 8, 3, 2, 3, 7, 13, 2, 3, 5, 4, 5, 1, 4, 2, 5, 2, 4, 2, 4, 5, 8, 3, 4, 2, 2, 6, 15, 8, 9, 2, 2] detailed listing: executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f7a7e40720c86009722010201010400"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000040)={0x0, 0x1}, 0x8) sendmmsg$sock(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@txtime={{0x15, 0x1, 0x3d, 0x3fd}}], 0x18}}], 0x1, 0x44000) executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f137bf1fcaaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$vcs(0xffffffffffffff9c, 0x0, 0x101000, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0xfe90) executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002180)={@ipv4={'\x00', '\xff\xff', @remote}, @mcast1, @mcast1, 0x6, 0x0, 0x0, 0x400, 0x780000000, 0x2720019}) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x12) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, r1, 0x1, 0xf, 0x6, @broadcast}, 0x14) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r2, 0x0, r0, 0x0, 0xa, 0x6) executing program 6: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt(r0, 0x1, 0x9, &(0x7f0000000640)=""/73, &(0x7f00000006c0)=0x49) executing program 6: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) executing program 2: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) executing program 2: r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf08, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) write$nbd(r0, &(0x7f0000000100)=ANY=[], 0x1010) write$P9_RREAD(r0, &(0x7f0000001700)={0xec7, 0x75, 0x2, {0xebc, "f35d8ca99b53a1ff63c8d30799badfe3c8f9f91c8cbdaa417a9cb15d986dd40c26b60dcebf9f91409e1a40f7496fc506ba6148bbcc3052a70d0b317ea20483b74995bef10584e3c3a53ac8c3ce5849608199a6bfe1253afd92dd0d5d3b3e5d6b3121264bdb0e1f4679de18ecd87aa4e60f902c0def6656bd581de3acc06d5fabeb87d7fdaf063777b115eeab2a00a6f919414e1a625cc60cb1131d04f8f5855943b5928cff8e16cf8526569d26bacfa3f64d4042bc1c8435cbaa507e517a3a503720710c537d0a6477bcb59240f09cb7c415d56ac7a0c915685cf016cdefe9f699e7d8a7f2d7b7ce4b84f3f533da4152de5664196769ba24f1a2d577dea2d07683ab9bddcc6914520cfee7459bde36363d7269c5c90247fd44a73b0875124aaae3a2a2154812d28373636e64a10d4147e096b2a26f38ad38d33fa8ab0f009be2a25e18a655a514d1f9f057a1e6aa1fa7c4b3fe42d8f6e0c2d4f0a97cac7e5c0ced01277e922abf91ff26ca6986a68b41ba83091ecec8b514f6ffb85690582670fa84e2e4a69a7b23c15910cc803498406356a629085c8fdfcb4e10aa0cd0106ae1f8ad6c93f10750bd293a6af336e589bdabe891b72127f6d9bb3af188515298c72adaf57fd7e7cae2a80b084b664686ca92aef5aed7283f73a6b90045fc54b85c3a4035edcd5c44f927dde52203ea95e727a53415221b2e1fc367b0ef9bc4a9a5307dad1f2ec8b5d30bdcc9d69ebb65f1686de1260437b8b7946e8a5dded029b952a56a1c3801e925f9fd5173b55b88409c32ef385fdcf5fe43045bc3118c6ed3df51c26c0abe0a6997649c89773307063cdce28e32462a67292df6dd7584d07aa8a75bcf81923464d354724fb31817ecd0ca2077aeb77c3b41a0661ae43ef916c7a9c02c9d8854a584512f28e63ce1d14240af15f842892ef3d8b2d103ece1d52147acadec20351a9311df025531910488b78e92cdef992ecb8776a851a117abe4f7c49fd668a1d4f1a7136b2d376129f338ca5bd6943fe7c554cc76ab11310ea1905dfbe64eda556152e301ecf56ef9ab54a292b3d90e57162cd6dba75c2d4a7ab4a4c32cf2a05476608e6abf3fbbf6e6733acaa463935f248a2d4311eef3866275c15e3168ae746c27af7bfa95953e8ebc6c0be64e69461510cb415cabf56f184424c7f02e277af139383505636bc437f8b82b262eb0ad3f0f423f5aeeb6b3a219a94ca38553284e6ec9d414acc142e36d705d177fd6dba0dcca849a5dfbb98ee612324a322be0a9a542745c2b1f8fc96919f8dad65b934e2f602fc3c9df40e9e9955429ca3b798694be5df1abb095d3641fa28eaff426c310bd5e5f611e922b064ab9515feec0f8350d1d33935c9ab402c68c55ea5ea18c48386b929d32e60cd8de65d7f95699f792d4000eeb7487b4cb99ba8ac61a28660b5eb31156d767a717e894990397389280200cc13119d9330b6bc5eb23cc5b8f67e8e0bc5806e6d1dcf211b16e463b6b2dd6938a98b986345724988771db552d6d6dacd0b2f2cf7ec4a93a672a479123fb32ce2bf1931c154d5a47e21f4eebe2a229d3faaf099c41e418e7f3db02bb8909e5e1fabfdf1f218340ad835b3ce797d9cba7a53d6513e84d8aa85f00a4d0d9f14f7fdf229e98eb7e1f720f3f316fe405695300cafffee08bd523b7e440f2f8eab9d863cbcf1b1ccc78c79b533264a77c7234e1c125593c2e33a135c213c77a365f7176764dee5d4c7df871ce9a2f615f4ff25b2ca92344752e6315a990e3f3bc701ea8736f7426bbedd7a760284971aa63d8edf0c196cf607985dabfe0ad3a450db4e4a25a601f35a9b683333262bf092972add8ddfed0f7ab422d8cf7bd02a2d315181e82f91e9c38c9a6f1560c9037a381a5bba65a1792530be762c63da7116e59a23fac9d2321565d1476825dbef9d6da2b593c0dd0b91087398274c44b700ce812b6a5f00f7baebd4b873b2645b64df6cfee464295e2e1721632cfa90f4754c63c3a7cf4d0555870f6c946bae1a433ab2ad492b7dd10450fa036b923a81c3b6fb76c8e36f799b7fb5267917f013b2913c71a7f7135c5181b4dee7c80d3705186e0a30409c6ac8c4b200b9eb4a345bafacf7130dcd5707fc72b9caf44d5a3d4ac1e7abc738c5d6d083a703d8685ca9a38cc3669595ebb0f17a2e2d9afde300754839d8695fbee030734cee5a4bdf7a36d160335866769effb1572f32a97cd265d05097392009684012d8c2e84063b0e65b34a048ed2fd010fc3fc8a4d9e6538b26c19435a26b04dddd1018a2c4806c57fb079a653b50cb6f061abae15dede05970c453270193c7ffbaa06dd032c3450c941189c77cd028d602c91c3a6531b4ad78e88757b9ab97a68e3f287fd167cf325782f09fbb87a90c09b3d5a69b513735f9dbdf1a7043857272fef219cc5d1f0361ec108d01b0f80abd754231a89e71c24d3a639a0f475739b7689d6135a9e18f7c446b6ec565155eb4bc5db77a6f3c49a1c6e0a1c5bf4e28e075c0b934a3ef7d4761d799dfe618025ed7a6336c9cc2c4fffb7a3d025d683aa6bd447802b5064e815a8f6c3c42f9038ca489660da1d691ae464f192d2e56160caafa2548ae7bf828aaf2cb7072ff999aabe7021407659b6d922bf2b49c0d5a96feb46fcf8013d25a32eb012bb9f36279db1aec47256bbaa220adac5895fc23a23930e6d1f0850b370e9430267c47fad88a2c4e0a5ff4a68e8c312bb1305cb3351829d53def79def9235e38c0eedc461cbaa2f2f0f85d5956425cc2d1d0fd7a4371e9b19638bee9eb8dacbc26114bf91a9a3b36d0cd2b903ecc4b2174bcacdcb32137a69d1d6deec121ae9ce83d6e889ce4633e55aaf655531413a8742afc14bb4917fbc1cd99fef6faf25e82ca00483c5c17fb3b085adae4005547036b65dd38d7efa6471f2e0f3697f29d9963df1d099e7551af17dd7448b19b1bd6f507ab14468fd3aa59517398b1441c70252ac8dfd79f477f85e93ddfd4622b81475373409e89c83752caa413e8d7b1de758d7788c499b242cff56c0c329c3ab01bfa66bf683566cbc16c3d1ad5791412e785ad8ad17bea63a466556bde37b4399ecc6ac39b626ca1bb365fdb3ed51e5b915148e30dbd03cb816a90a08d6900a3d5bcb956255d67735d404850f0a788239d4003950e53379f76923fae3eb4be4ffe010699787a7dfa15d9cfb1b893b7f19d92af95df6bace851bad6d7588958487fe3fcb7b554349624ed4de843b3cf301d2705d890ffb34d08f383dad6157292084c83372e75d4584a0bccc7049d56f80b7613527b099834c8e17b49aa2201e4f09d9675a6ffbb0b909749b8a4206080ec53bc5761fe0a32d6a3034a796319cbbe5e0b4e9080d3eb6ef330afb77e4211a959a25af6c1e6550a27baaf8e25ea0f36a03424dd3c9c67590e86c68baec87da91f770b48de3318a2630a8359fea632690d925884f6c498efac8f005e99a82739385706aaad86740756a3e1f72189aa58fbe837a76d8c83ef63c4d38b9e84ba973836847111a49cdf17f2790e9cf01e1fc0e23cc5e535281481c93e327eeb2a97e8d980c5b684cdfebc584bf2e454f84e50c7b7cfb4998c6220b40a25914a3714c600a75aa8453ce37e3380351695a02d976a77b24285ec0bf2ef1177823b83edf1572d726546a173ea3a990226021394d839448a2196b592a7a2ace8471a3f43793a7ad8d55565f1e5ea6dcc5ca49b8d011f057f5dcfd7dcd59a0e4cc7e5d3dbf68a57669bcbdc4639e740f4fe71ad7776827a4a9d190583196e52921bbf5dee53b9d2aa3edbb444cd574861a775cd854423cd9b1c889c6a15fbcbc7766edb5d31dd69e7cc764a722d8c63727a2aff7abc78f58072e4e94ebb6a8cc9b8ffff37c074acc159b04c894b6ff76fc64e90b4fdf7aec9e7ed76091c22c7f212afe7a3cd5bc3a8a058e98e79fd9765f6a879e6f2bc74f3226830044e978721013fe6498733d574c3702af702c1416326351fe3de2c3604c22ba27d3bdf2437bd3a32e0312c78dae9e20c8e4b911dc625d23984e49adf97e05f6c7b33abf32cca17afa6447e08a03709e870798f0b26308f9a134020ffdf1d7b7a434fce2e219b8cb1b292d9aff522aac8cb50a07013bf69fe205f2db8cd3ae405e80300ebde4bf68d139ac90d83d2d1e1e6fe53187493f0afeb84c960c2653a7c4b9e85fb78c238621141ab95bba55f6f4f7d60653ee1321d2968807dfabbb7d54db2cd33d1b49bc4592d076fb776d7ef01095ae8b2a3b836af7bf541e96dc1195b0001fb963843f7b03c09307d0cf08fd9139f8cb6a85518e54615d0ba6d3938861d7a4c311e1de1a24e09671279a66f96a8208eb8aabb88d231ceeb4301575f9ebbd65cdff7e0cc582a62ad47b96efaca6fb4edc137db49f3c26d865e0012069e4779d38ca1506a126e7550862cae5e28d38f9ed771c265f07e0c3dbd49c36c192473a49c6077945013e78b98244a6ef886dff334b73bba592d1a9bf27b1eb6bbba6227f25f3357ef777c901e13dc67f0229c1311e05f9b555cdf532f2a987499999b3b5f9ec34419260fa24627cb3c5235fc52581d6dc57330471af37b7d2c34d97bad3d24c50e03b3bfe719b687fe1f2503c2325352034adba7420cd07c5af07f5bed0471f1a68a694eaf70c52205d6a25863a31c05c93be3f9a45cf5996aa5c4ef67032573b24ac2bffdad30b7bb561280fcc66c0d989e1b3399da0762f52af134fa37b8a9f35946de9035034dd0aafeb336131e9895ca4fc92c85252f7816ed37a700711f8f075f861692b6e990708beeefca351b476cded37882ee6ca29cb05aa09017581bed344380f13d64ba6eda65e6dad1806b728c49fc5dc3d6c7aad7bb07b07eea1beb8595e575d4779cf25cc8385dd488c83c8a4714706d70579b9c15b8dd298005dfd3557f8a391308ee18a4b17bdf28e6844a15eecfc1920e7c20641dedd4df20585cd04c4dae44488cd5598f6c9712e56d316c8d220dcc7ff12010e20e28d0759e13e92b24deb263595b87d080f511ed2b53ca1104bb317d945cadc135db8e270ae789a559ac54e8d8163a1e4835329d2acb40aaa95515f57e235652a1523056b5957afb00b1e663fe75e9e79dffef596f5e98b80df61ca8e0acfa597e571648c1d380362985b4f88ba679fe4f658a04d51d204083dbef7fbdfad82ffde816bd856635f5e2295df35acd3f135b5ba03a4dbc1f8682589d0376452735debb9de885d52991a5ccbe91375fb57c40630513c9d462e264e6a69c2259fa9df2561267cf6cc169f5e33f8812a85cb0044d7f9a7255c0396072b71fcf86d"}}, 0xec7) executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x8}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000005a000100"], 0x18}}, 0x0) executing program 3: r0 = socket(0xa, 0x3, 0x87) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) setuid(0xee01) sendmsg$NFT_BATCH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001800)=ANY=[@ANYBLOB="14000000100001"], 0x7f4}}, 0x40040) executing program 1: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000008ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/96, 0x60}, 0x4}], 0x1, 0x10002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001500)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4092}) r2 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000240)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xffffffff) executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 4: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r0, 0xfffffffffffffffe, 0xff, 0x4) executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) write(r0, &(0x7f0000000040), 0xffffff4a) executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) keyctl$setperm(0x5, r0, 0x30925) executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd2900008400020005"], 0x48) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x20000, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x2000}, [@IFLA_CARRIER={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4054) executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 0: syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0xce1d, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@txtime={{0x15, 0x1, 0x3d, 0x3fd}}], 0x18}}], 0x1, 0x44000) executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x56, 0x4) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001300010600000000e4fedbdf25000000", @ANYRES32=r2, @ANYBLOB="242400002019000008001300", @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) executing program 2: unshare(0x26000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x503, 0x70bd27, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x88, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000002280)=[{&(0x7f00000004c0)="b4", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000000c0)="189f90a7ad", 0x5}], 0x1}}], 0x2, 0x931766f6319eed00) shutdown(r0, 0x1) executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f000007c000/0x2000)=nil, &(0x7f0000839000/0x1000)=nil, 0xb8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4c}) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_MARK={0x8}]}, 0x9c}}, 0x0) executing program 6: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x18, 0x1404, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40000) executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="8c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="580a010023120100640012800800010073697400", @ANYRES16=r1, @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 5: socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7d}}, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) r3 = syz_open_pts(r2, 0x20800) dup3(r3, r2, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x44) executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000022c0)={'lo\x00', @local}) syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x600000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x0, 0x1000000, 0xffffffff, 0x248, 0xffffffff, 0x2e0, 0xffffffff, 0xffffffff, 0x2e0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'vcan0\x00', {}, {0xff}, 0x4, 0x0, 0x28}, 0x0, 0x220, 0x248, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0xf, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3d8) syz_io_uring_complete(0x0) socket$nl_route(0x10, 0x3, 0x0) executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf08, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) write$nbd(r1, &(0x7f0000000100)=ANY=[], 0x1010) write$P9_RREAD(r1, &(0x7f0000001700)={0xec7, 0x75, 0x2, {0xebc, "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"}}, 0xec7) executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0xc0, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x70, 0x5, 0x0, 0x1, [{0x5, 0x4, @local}, {0xa}, {0xa, 0x4, @remote}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @random="7f9351052a55"}, {0xa}, {0xa, 0x4, @broadcast}]}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve0\x00'}]}, 0xc0}}, 0x8000) executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) program crashed: memory leak in prepare_creds bisect: bisecting 42 programs bisect: split chunks (needed=false): <42> bisect: split chunk #0 of len 42 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 7, 13, 2, 3, 5, 4, 5, 1, 4, 2, 5, 2, 4, 2, 4, 5, 8, 3, 4, 2, 2, 6, 15, 8, 9, 2, 2] detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) setuid(0xee01) sendmsg$NFT_BATCH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001800)=ANY=[@ANYBLOB="14000000100001"], 0x7f4}}, 0x40040) executing program 1: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000008ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/96, 0x60}, 0x4}], 0x1, 0x10002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001500)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4092}) r2 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000240)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xffffffff) executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 4: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r0, 0xfffffffffffffffe, 0xff, 0x4) executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) write(r0, &(0x7f0000000040), 0xffffff4a) executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) keyctl$setperm(0x5, r0, 0x30925) executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd2900008400020005"], 0x48) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x20000, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x2000}, [@IFLA_CARRIER={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4054) executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 0: syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0xce1d, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@txtime={{0x15, 0x1, 0x3d, 0x3fd}}], 0x18}}], 0x1, 0x44000) executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x56, 0x4) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001300010600000000e4fedbdf25000000", @ANYRES32=r2, @ANYBLOB="242400002019000008001300", @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) executing program 2: unshare(0x26000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x503, 0x70bd27, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x88, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000002280)=[{&(0x7f00000004c0)="b4", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000000c0)="189f90a7ad", 0x5}], 0x1}}], 0x2, 0x931766f6319eed00) shutdown(r0, 0x1) executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f000007c000/0x2000)=nil, &(0x7f0000839000/0x1000)=nil, 0xb8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4c}) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_MARK={0x8}]}, 0x9c}}, 0x0) executing program 6: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x18, 0x1404, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40000) executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="8c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="580a010023120100640012800800010073697400", @ANYRES16=r1, @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 5: socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7d}}, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) r3 = syz_open_pts(r2, 0x20800) dup3(r3, r2, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x44) executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000022c0)={'lo\x00', @local}) syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x600000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x0, 0x1000000, 0xffffffff, 0x248, 0xffffffff, 0x2e0, 0xffffffff, 0xffffffff, 0x2e0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'vcan0\x00', {}, {0xff}, 0x4, 0x0, 0x28}, 0x0, 0x220, 0x248, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0xf, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3d8) syz_io_uring_complete(0x0) socket$nl_route(0x10, 0x3, 0x0) executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf08, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) write$nbd(r1, &(0x7f0000000100)=ANY=[], 0x1010) write$P9_RREAD(r1, &(0x7f0000001700)={0xec7, 0x75, 0x2, {0xebc, "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"}}, 0xec7) executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0xc0, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x70, 0x5, 0x0, 0x1, [{0x5, 0x4, @local}, {0xa}, {0xa, 0x4, @remote}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @random="7f9351052a55"}, {0xa}, {0xa, 0x4, @broadcast}]}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve0\x00'}]}, 0xc0}}, 0x8000) executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) program crashed: memory leak in prepare_creds bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4, 5, 8, 3, 4, 2, 2, 6, 15, 8, 9, 2, 2] detailed listing: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x56, 0x4) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001300010600000000e4fedbdf25000000", @ANYRES32=r2, @ANYBLOB="242400002019000008001300", @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) executing program 2: unshare(0x26000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x503, 0x70bd27, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x88, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000002280)=[{&(0x7f00000004c0)="b4", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000000c0)="189f90a7ad", 0x5}], 0x1}}], 0x2, 0x931766f6319eed00) shutdown(r0, 0x1) executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f000007c000/0x2000)=nil, &(0x7f0000839000/0x1000)=nil, 0xb8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4c}) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_MARK={0x8}]}, 0x9c}}, 0x0) executing program 6: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x18, 0x1404, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40000) executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="8c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="580a010023120100640012800800010073697400", @ANYRES16=r1, @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 5: socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7d}}, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) r3 = syz_open_pts(r2, 0x20800) dup3(r3, r2, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x44) executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000022c0)={'lo\x00', @local}) syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x600000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x0, 0x1000000, 0xffffffff, 0x248, 0xffffffff, 0x2e0, 0xffffffff, 0xffffffff, 0x2e0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'vcan0\x00', {}, {0xff}, 0x4, 0x0, 0x28}, 0x0, 0x220, 0x248, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0xf, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3d8) syz_io_uring_complete(0x0) socket$nl_route(0x10, 0x3, 0x0) executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf08, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) write$nbd(r1, &(0x7f0000000100)=ANY=[], 0x1010) write$P9_RREAD(r1, &(0x7f0000001700)={0xec7, 0x75, 0x2, {0xebc, "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"}}, 0xec7) executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0xc0, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x70, 0x5, 0x0, 0x1, [{0x5, 0x4, @local}, {0xa}, {0xa, 0x4, @remote}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @random="7f9351052a55"}, {0xa}, {0xa, 0x4, @broadcast}]}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve0\x00'}]}, 0xc0}}, 0x8000) executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) program crashed: memory leak in prepare_creds bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 bisect: split chunks (needed=true): <14> bisect: split chunk #0 of len 14 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6, 15, 8, 9, 2, 2] detailed listing: executing program 6: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x18, 0x1404, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40000) executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="8c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="580a010023120100640012800800010073697400", @ANYRES16=r1, @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 5: socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7d}}, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) r3 = syz_open_pts(r2, 0x20800) dup3(r3, r2, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x44) executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000022c0)={'lo\x00', @local}) syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x600000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x0, 0x1000000, 0xffffffff, 0x248, 0xffffffff, 0x2e0, 0xffffffff, 0xffffffff, 0x2e0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'vcan0\x00', {}, {0xff}, 0x4, 0x0, 0x28}, 0x0, 0x220, 0x248, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0xf, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3d8) syz_io_uring_complete(0x0) socket$nl_route(0x10, 0x3, 0x0) executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf08, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) write$nbd(r1, &(0x7f0000000100)=ANY=[], 0x1010) write$P9_RREAD(r1, &(0x7f0000001700)={0xec7, 0x75, 0x2, {0xebc, "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"}}, 0xec7) executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0xc0, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x70, 0x5, 0x0, 0x1, [{0x5, 0x4, @local}, {0xa}, {0xa, 0x4, @remote}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @random="7f9351052a55"}, {0xa}, {0xa, 0x4, @broadcast}]}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve0\x00'}]}, 0xc0}}, 0x8000) executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4, 5, 8, 3, 4, 2] detailed listing: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x56, 0x4) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001300010600000000e4fedbdf25000000", @ANYRES32=r2, @ANYBLOB="242400002019000008001300", @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) executing program 2: unshare(0x26000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x503, 0x70bd27, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x88, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000002280)=[{&(0x7f00000004c0)="b4", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000000c0)="189f90a7ad", 0x5}], 0x1}}], 0x2, 0x931766f6319eed00) shutdown(r0, 0x1) executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f000007c000/0x2000)=nil, &(0x7f0000839000/0x1000)=nil, 0xb8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4c}) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_MARK={0x8}]}, 0x9c}}, 0x0) program crashed: memory leak in prepare_creds bisect: the chunk can be dropped bisect: split chunks (needed=true): <7> bisect: split chunk #0 of len 7 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 4, 2] detailed listing: executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x88, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000002280)=[{&(0x7f00000004c0)="b4", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000000c0)="189f90a7ad", 0x5}], 0x1}}], 0x2, 0x931766f6319eed00) shutdown(r0, 0x1) executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f000007c000/0x2000)=nil, &(0x7f0000839000/0x1000)=nil, 0xb8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4c}) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_MARK={0x8}]}, 0x9c}}, 0x0) program crashed: memory leak in prepare_creds bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$IPCTNL_MSG_CT_GET detailed listing: executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_MARK={0x8}]}, 0x9c}}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 4] detailed listing: executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x88, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000002280)=[{&(0x7f00000004c0)="b4", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000000c0)="189f90a7ad", 0x5}], 0x1}}], 0x2, 0x931766f6319eed00) shutdown(r0, 0x1) executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f000007c000/0x2000)=nil, &(0x7f0000839000/0x1000)=nil, 0xb8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4c}) program crashed: memory leak in prepare_creds bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$zero-mmap$binder-syz_open_procfs$pagemap-ioctl$PAGEMAP_SCAN detailed listing: executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f000007c000/0x2000)=nil, &(0x7f0000839000/0x1000)=nil, 0xb8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4c}) program crashed: memory leak in prepare_creds bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f000007c000/0x2000)=nil, &(0x7f0000839000/0x1000)=nil, 0xb8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4c}) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$zero-mmap$binder-syz_open_procfs$pagemap-ioctl$PAGEMAP_SCAN detailed listing: executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f000007c000/0x2000)=nil, &(0x7f0000839000/0x1000)=nil, 0xb8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4c}) program crashed: memory leak in prepare_creds bisect: concatenation succeeded found reproducer with 4 syscalls minimizing guilty program testing program (duration=1m40.892896844s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$zero-mmap$binder-syz_open_procfs$pagemap detailed listing: executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) program crashed: memory leak in prepare_creds testing program (duration=1m40.892896844s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$zero-mmap$binder detailed listing: executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) program crashed: memory leak in prepare_creds testing program (duration=1m40.892896844s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$zero detailed listing: executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) program did not crash testing program (duration=1m40.892896844s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$binder detailed listing: executing program 0: mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8000000000000000) program did not crash testing program (duration=1m40.892896844s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$zero-mmap$binder detailed listing: executing program 0: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) program did not crash extracting C reproducer testing compiled C program (duration=1m40.892896844s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$zero-mmap$binder program crashed: memory leak in prepare_creds simplifying C reproducer testing compiled C program (duration=1m40.892896844s, {Threaded:false Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$zero-mmap$binder program crashed: memory leak in prepare_creds testing compiled C program (duration=1m40.892896844s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$zero-mmap$binder program crashed: memory leak in prepare_creds testing compiled C program (duration=1m40.892896844s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$zero-mmap$binder program crashed: memory leak in prepare_creds testing compiled C program (duration=1m40.892896844s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$zero-mmap$binder program crashed: memory leak in prepare_creds testing compiled C program (duration=1m40.892896844s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$zero-mmap$binder program crashed: memory leak in prepare_creds testing compiled C program (duration=1m40.892896844s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$zero-mmap$binder program crashed: memory leak in prepare_creds testing compiled C program (duration=1m40.892896844s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$zero-mmap$binder program crashed: memory leak in prepare_creds testing program (duration=1m40.892896844s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$zero-mmap$binder detailed listing: executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) program crashed: memory leak in prepare_creds validation run: crashed=true testing program (duration=1m40.892896844s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$zero-mmap$binder detailed listing: executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) program crashed: memory leak in prepare_creds validation run: crashed=true testing program (duration=1m40.892896844s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$zero-mmap$binder detailed listing: executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) program crashed: memory leak in prepare_creds validation run: crashed=true reproducing took 56m2.748277255s repro crashed as (corrupted=false): 2025/12/23 22:11:28 executed programs: 5 BUG: memory leak unreferenced object 0xffff888108aa3600 (size 184): comm "syz-executor", pid 5993, jiffies 4294944430 hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc baf6856f): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] kmem_cache_alloc_noprof+0x3b4/0x590 mm/slub.c:5270 prepare_creds+0x22/0x5e0 kernel/cred.c:185 copy_creds+0x44/0x290 kernel/cred.c:286 copy_process+0x979/0x2860 kernel/fork.c:2086 kernel_clone+0x119/0x6c0 kernel/fork.c:2651 __do_sys_clone+0x7b/0xb0 kernel/fork.c:2792 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xa4/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff888109dfb540 (size 32): comm "syz-executor", pid 5993, jiffies 4294944430 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ f8 52 86 00 81 88 ff ff 00 00 00 00 00 00 00 00 .R.............. backtrace (crc 336e1c5f): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] lsm_blob_alloc+0x4d/0x70 security/security.c:192 lsm_cred_alloc security/security.c:209 [inline] security_prepare_creds+0x2f/0x270 security/security.c:2763 prepare_creds+0x385/0x5e0 kernel/cred.c:215 copy_creds+0x44/0x290 kernel/cred.c:286 copy_process+0x979/0x2860 kernel/fork.c:2086 kernel_clone+0x119/0x6c0 kernel/fork.c:2651 __do_sys_clone+0x7b/0xb0 kernel/fork.c:2792 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xa4/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88810a0b9a80 (size 184): comm "syz.0.17", pid 6079, jiffies 4294944430 hex dump (first 32 bytes): 00 00 00 00 07 00 0e 02 00 e4 66 85 ff ff ff ff ..........f..... 30 51 1a 11 81 88 ff ff 00 00 00 00 00 00 00 00 0Q.............. backtrace (crc 9c6d3916): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] kmem_cache_alloc_noprof+0x3b4/0x590 mm/slub.c:5270 alloc_empty_file+0x51/0x1a0 fs/file_table.c:237 alloc_file fs/file_table.c:354 [inline] alloc_file_pseudo+0xae/0x140 fs/file_table.c:383 __shmem_file_setup+0x11a/0x210 mm/shmem.c:5846 shmem_kernel_file_setup mm/shmem.c:5865 [inline] __shmem_zero_setup mm/shmem.c:5905 [inline] shmem_zero_setup_desc+0x33/0x90 mm/shmem.c:5936 mmap_zero_prepare+0x4e/0x60 drivers/char/mem.c:524 vfs_mmap_prepare include/linux/fs.h:2058 [inline] call_mmap_prepare mm/vma.c:2596 [inline] __mmap_region+0x8b8/0x13e0 mm/vma.c:2692 mmap_region+0x19f/0x1e0 mm/vma.c:2786 do_mmap+0x6a3/0xb60 mm/mmap.c:558 vm_mmap_pgoff+0x1a6/0x2d0 mm/util.c:581 ksys_mmap_pgoff+0x233/0x2d0 mm/mmap.c:604 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:82 [inline] __x64_sys_mmap+0x6f/0xa0 arch/x86/kernel/sys_x86_64.c:82 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xa4/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88810d5ee140 (size 40): comm "syz.0.17", pid 6079, jiffies 4294944430 hex dump (first 32 bytes): ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 f8 52 86 00 81 88 ff ff .........R...... backtrace (crc 2d2a393c): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] kmem_cache_alloc_noprof+0x3b4/0x590 mm/slub.c:5270 lsm_file_alloc security/security.c:169 [inline] security_file_alloc+0x30/0x240 security/security.c:2380 init_file+0x3e/0x160 fs/file_table.c:159 alloc_empty_file+0x6f/0x1a0 fs/file_table.c:241 alloc_file fs/file_table.c:354 [inline] alloc_file_pseudo+0xae/0x140 fs/file_table.c:383 __shmem_file_setup+0x11a/0x210 mm/shmem.c:5846 shmem_kernel_file_setup mm/shmem.c:5865 [inline] __shmem_zero_setup mm/shmem.c:5905 [inline] shmem_zero_setup_desc+0x33/0x90 mm/shmem.c:5936 mmap_zero_prepare+0x4e/0x60 drivers/char/mem.c:524 vfs_mmap_prepare include/linux/fs.h:2058 [inline] call_mmap_prepare mm/vma.c:2596 [inline] __mmap_region+0x8b8/0x13e0 mm/vma.c:2692 mmap_region+0x19f/0x1e0 mm/vma.c:2786 do_mmap+0x6a3/0xb60 mm/mmap.c:558 vm_mmap_pgoff+0x1a6/0x2d0 mm/util.c:581 ksys_mmap_pgoff+0x233/0x2d0 mm/mmap.c:604 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:82 [inline] __x64_sys_mmap+0x6f/0xa0 arch/x86/kernel/sys_x86_64.c:82 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xa4/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff888108aa3f00 (size 184): comm "syz-executor", pid 5993, jiffies 4294944431 hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 6f7e1a43): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] kmem_cache_alloc_noprof+0x3b4/0x590 mm/slub.c:5270 prepare_creds+0x22/0x5e0 kernel/cred.c:185 copy_creds+0x44/0x290 kernel/cred.c:286 copy_process+0x979/0x2860 kernel/fork.c:2086 kernel_clone+0x119/0x6c0 kernel/fork.c:2651 __do_sys_clone+0x7b/0xb0 kernel/fork.c:2792 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xa4/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff888109dfb380 (size 32): comm "syz-executor", pid 5993, jiffies 4294944431 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ f8 52 86 00 81 88 ff ff 00 00 00 00 00 00 00 00 .R.............. backtrace (crc 336e1c5f): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] lsm_blob_alloc+0x4d/0x70 security/security.c:192 lsm_cred_alloc security/security.c:209 [inline] security_prepare_creds+0x2f/0x270 security/security.c:2763 prepare_creds+0x385/0x5e0 kernel/cred.c:215 copy_creds+0x44/0x290 kernel/cred.c:286 copy_process+0x979/0x2860 kernel/fork.c:2086 kernel_clone+0x119/0x6c0 kernel/fork.c:2651 __do_sys_clone+0x7b/0xb0 kernel/fork.c:2792 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xa4/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF final repro crashed as (corrupted=false): 2025/12/23 22:11:28 executed programs: 5 BUG: memory leak unreferenced object 0xffff888108aa3600 (size 184): comm "syz-executor", pid 5993, jiffies 4294944430 hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc baf6856f): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] kmem_cache_alloc_noprof+0x3b4/0x590 mm/slub.c:5270 prepare_creds+0x22/0x5e0 kernel/cred.c:185 copy_creds+0x44/0x290 kernel/cred.c:286 copy_process+0x979/0x2860 kernel/fork.c:2086 kernel_clone+0x119/0x6c0 kernel/fork.c:2651 __do_sys_clone+0x7b/0xb0 kernel/fork.c:2792 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xa4/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff888109dfb540 (size 32): comm "syz-executor", pid 5993, jiffies 4294944430 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ f8 52 86 00 81 88 ff ff 00 00 00 00 00 00 00 00 .R.............. backtrace (crc 336e1c5f): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] lsm_blob_alloc+0x4d/0x70 security/security.c:192 lsm_cred_alloc security/security.c:209 [inline] security_prepare_creds+0x2f/0x270 security/security.c:2763 prepare_creds+0x385/0x5e0 kernel/cred.c:215 copy_creds+0x44/0x290 kernel/cred.c:286 copy_process+0x979/0x2860 kernel/fork.c:2086 kernel_clone+0x119/0x6c0 kernel/fork.c:2651 __do_sys_clone+0x7b/0xb0 kernel/fork.c:2792 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xa4/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88810a0b9a80 (size 184): comm "syz.0.17", pid 6079, jiffies 4294944430 hex dump (first 32 bytes): 00 00 00 00 07 00 0e 02 00 e4 66 85 ff ff ff ff ..........f..... 30 51 1a 11 81 88 ff ff 00 00 00 00 00 00 00 00 0Q.............. backtrace (crc 9c6d3916): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] kmem_cache_alloc_noprof+0x3b4/0x590 mm/slub.c:5270 alloc_empty_file+0x51/0x1a0 fs/file_table.c:237 alloc_file fs/file_table.c:354 [inline] alloc_file_pseudo+0xae/0x140 fs/file_table.c:383 __shmem_file_setup+0x11a/0x210 mm/shmem.c:5846 shmem_kernel_file_setup mm/shmem.c:5865 [inline] __shmem_zero_setup mm/shmem.c:5905 [inline] shmem_zero_setup_desc+0x33/0x90 mm/shmem.c:5936 mmap_zero_prepare+0x4e/0x60 drivers/char/mem.c:524 vfs_mmap_prepare include/linux/fs.h:2058 [inline] call_mmap_prepare mm/vma.c:2596 [inline] __mmap_region+0x8b8/0x13e0 mm/vma.c:2692 mmap_region+0x19f/0x1e0 mm/vma.c:2786 do_mmap+0x6a3/0xb60 mm/mmap.c:558 vm_mmap_pgoff+0x1a6/0x2d0 mm/util.c:581 ksys_mmap_pgoff+0x233/0x2d0 mm/mmap.c:604 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:82 [inline] __x64_sys_mmap+0x6f/0xa0 arch/x86/kernel/sys_x86_64.c:82 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xa4/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88810d5ee140 (size 40): comm "syz.0.17", pid 6079, jiffies 4294944430 hex dump (first 32 bytes): ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 f8 52 86 00 81 88 ff ff .........R...... backtrace (crc 2d2a393c): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] kmem_cache_alloc_noprof+0x3b4/0x590 mm/slub.c:5270 lsm_file_alloc security/security.c:169 [inline] security_file_alloc+0x30/0x240 security/security.c:2380 init_file+0x3e/0x160 fs/file_table.c:159 alloc_empty_file+0x6f/0x1a0 fs/file_table.c:241 alloc_file fs/file_table.c:354 [inline] alloc_file_pseudo+0xae/0x140 fs/file_table.c:383 __shmem_file_setup+0x11a/0x210 mm/shmem.c:5846 shmem_kernel_file_setup mm/shmem.c:5865 [inline] __shmem_zero_setup mm/shmem.c:5905 [inline] shmem_zero_setup_desc+0x33/0x90 mm/shmem.c:5936 mmap_zero_prepare+0x4e/0x60 drivers/char/mem.c:524 vfs_mmap_prepare include/linux/fs.h:2058 [inline] call_mmap_prepare mm/vma.c:2596 [inline] __mmap_region+0x8b8/0x13e0 mm/vma.c:2692 mmap_region+0x19f/0x1e0 mm/vma.c:2786 do_mmap+0x6a3/0xb60 mm/mmap.c:558 vm_mmap_pgoff+0x1a6/0x2d0 mm/util.c:581 ksys_mmap_pgoff+0x233/0x2d0 mm/mmap.c:604 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:82 [inline] __x64_sys_mmap+0x6f/0xa0 arch/x86/kernel/sys_x86_64.c:82 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xa4/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff888108aa3f00 (size 184): comm "syz-executor", pid 5993, jiffies 4294944431 hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 6f7e1a43): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] kmem_cache_alloc_noprof+0x3b4/0x590 mm/slub.c:5270 prepare_creds+0x22/0x5e0 kernel/cred.c:185 copy_creds+0x44/0x290 kernel/cred.c:286 copy_process+0x979/0x2860 kernel/fork.c:2086 kernel_clone+0x119/0x6c0 kernel/fork.c:2651 __do_sys_clone+0x7b/0xb0 kernel/fork.c:2792 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xa4/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff888109dfb380 (size 32): comm "syz-executor", pid 5993, jiffies 4294944431 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ f8 52 86 00 81 88 ff ff 00 00 00 00 00 00 00 00 .R.............. backtrace (crc 336e1c5f): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] lsm_blob_alloc+0x4d/0x70 security/security.c:192 lsm_cred_alloc security/security.c:209 [inline] security_prepare_creds+0x2f/0x270 security/security.c:2763 prepare_creds+0x385/0x5e0 kernel/cred.c:215 copy_creds+0x44/0x290 kernel/cred.c:286 copy_process+0x979/0x2860 kernel/fork.c:2086 kernel_clone+0x119/0x6c0 kernel/fork.c:2651 __do_sys_clone+0x7b/0xb0 kernel/fork.c:2792 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xa4/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF