Extracting prog: 8m56.168472794s Minimizing prog: 17m3.041580205s Simplifying prog options: 0s Extracting C: 47.758618965s Simplifying C: 17m31.988672615s extracting reproducer from 69 programs testing a last program of every proc single: executing 19 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_route-mkdirat-mount-openat-syz_emit_vhci-socket$kcm-read$FUSE-syz_mount_image$squashfs detailed listing: executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_getroute={0x1c, 0x1a, 0x501, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x2, 0xfd, 0x0, 0xc8, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/events/enable\x00', 0x100, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_auth_payload_to={{0x7}, {0x5, 0xc9}}}}, 0x9) socket$kcm(0x10, 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000001000)=ANY=[], 0x11, 0x1bf, &(0x7f00000003c0)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdGna/Myc9dbWWyTIztHpqy4PFTkHE5FJ7jNwkF/NIMDOEph5ZVFxZlZ2Yk5NaVLyQoeJWclLF6RMMLNftr6k0S3A6/JHncEjSdNBhOuLjkTWjsYRzkpSmGBtbpsLZMx/k17FpHGF4tIJ5Y51nXmNdYerUvLS8pKqsqqx5EydunNnY2di4cmJdVJrfKsaWFJdNTZ2MTA5b1AQ2MxuqT7LRnvCufdXDJAfWHg+/5lPGSq9hnl5RNXPCF6XZjIbfGe7w/IcCCYsGE86v/yEqklMaGNIuhjFyMDAwtG05wwbVyJB8gin0KMfSmRIWB4SqTv601HzrkOg2Y9tTB7YzPIeP86wp6BP0PC7B4LRQ8L8MyKcJDQ1lGmuZltou+FKk8VfCa7WxUwaDuz3TUliAsjSAyJVQnixYT0LyCg8dTU2jlOSEhk0SCUluBYbKDFv3cK4WaGBAijYVBgaG7YywuIWAazDGKBgFo2AUjIJRMApGwSgYBaNgFIyCEQEAAQAA//9x2ZXv") program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$smackfs_logging-read-clock_getres-openat$full-ioctl$DRM_IOCTL_AGP_ENABLE-ioctl$AUTOFS_IOC_PROTOSUBVER-ioctl$BTRFS_IOC_LOGICAL_INO-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_SET_DEVICE-socket$nl_generic-getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST-getsockopt$inet_sctp_SCTP_RTOINFO-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL-read$FUSE-getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE-getsockopt$inet_sctp_SCTP_ECN_SUPPORTED-ioctl$NILFS_IOCTL_RESIZE-socket$inet_udp-getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS-socket$igmp-ioctl$SIOCGETSGCNT_IN6-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_SET_MPATH-getsockopt$IP_VS_SO_GET_SERVICES-syz_genetlink_get_family_id$fou-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-sendmsg$FOU_CMD_GET-sendmsg$IPCTNL_MSG_CT_GET_STATS-accept4 detailed listing: executing program 0: r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r0, &(0x7f0000000040)=""/176, 0xb0) clock_getres(0xd558eea7c8763c7f, &(0x7f0000000100)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x80081, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000180)=0x9) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000001c0)) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000240)={0x100000000, 0x28, '\x00', 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x134, r2, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x100, 0x8, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8d9}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00', 0x9}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x134}, 0x1, 0x0, 0x0, 0x40040}, 0x8800) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000004c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000540)={r5, 0x35, 0x50, 0x40}, &(0x7f0000000580)=0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x23}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) read$FUSE(r1, &(0x7f0000000700)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000002740)={r4, 0x6, 0x6}, &(0x7f0000002780)=0x8) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r1, 0x84, 0x82, &(0x7f00000027c0)={r8}, &(0x7f0000002800)=0x8) ioctl$NILFS_IOCTL_RESIZE(r3, 0x40086e8b, &(0x7f0000002840)) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000002880)={r6, 0x5b0, 0x30, 0x4}, &(0x7f00000028c0)=0x18) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r9, 0x89e1, &(0x7f0000002900)={@mcast1, @empty}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), r3) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x38, r10, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008005}, 0x20000000) getsockopt$IP_VS_SO_GET_SERVICES(r9, 0x0, 0x482, &(0x7f0000002a80)=""/4096, &(0x7f0000003a80)=0x1000) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000003b00), r3) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000003bc0)={'syztnl2\x00', &(0x7f0000003b40)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x6, 0x6, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, 0x20, 0x8, 0x6, 0x2}}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000003c80)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x34, r11, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}, @FOU_ATTR_IFINDEX={0x8, 0xb, r12}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000003d80)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24048880}, 0x40840) accept4(r9, &(0x7f0000003dc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000003e40)=0x80, 0x40800) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$TIOCL_GETSHIFTSTATE-socket$netlink-bind$netlink-socket$netlink-socket$netlink-bind$netlink-setsockopt$sock_int-setsockopt$netlink_NETLINK_BROADCAST_ERROR-mknodat$loop-openat-socket-mount$9p_fd-syz_genetlink_get_family_id$devlink-syz_io_uring_setup-io_uring_enter-syz_io_uring_setup-ioctl$sock_FIOGETOWN-syz_ublk_add_dev-sendmsg$DEVLINK_CMD_RATE_NEW-connect$vsock_stream-socket$nl_generic-syz_init_net_socket$802154_dgram-fcntl$dupfd-sendmsg$IPSET_CMD_FLUSH-syz_genetlink_get_family_id$nl80211-ioctl$VHOST_VSOCK_SET_RUNNING-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_LINKINFO_SET detailed listing: executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x4b2f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) (async, rerun: 64) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1000, 0x0) (rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40042, 0x1) (async, rerun: 64) r5 = socket(0x28, 0x801, 0x0) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) (async, rerun: 32) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r7 = syz_io_uring_setup(0x7890, &(0x7f0000000440)={0x0, 0xd52b, 0x10000, 0x5, 0x240004f}, &(0x7f00000004c0), &(0x7f0000000540), &(0x7f0000000580)) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) r8 = syz_io_uring_setup(0xefd, &(0x7f00000005c0)={0x0, 0x80b2, 0x110101, 0x6, 0x289}, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0) (async) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000800)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000740)={0x2e, 0x59, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000007c0)=@new_dev={0x4, 0x382, 0x0, 0x0, 0x1000, 0xffffffff, r12, 0x0, 0xc8}}}, 0x0) (async, rerun: 32) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async, rerun: 32) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r15 = fcntl$dupfd(r14, 0x406, r14) sendmsg$IPSET_CMD_FLUSH(r15, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r15) ioctl$VHOST_VSOCK_SET_RUNNING(r15, 0x4004af61, &(0x7f0000000280)) (async, rerun: 32) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="efdcb034000000", @ANYRES16=r16, @ANYBLOB="01002dbd7000fcdbdf2503000000180001801400020073797a5f74756e0000000000000000000500050003000000"], 0x34}}, 0x24000880) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket$nl_generic-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_CONNECT-setns-socket$netlink-writev detailed listing: executing program 0: setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r1, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x40}, 0x1, 0x0, 0x0, 0x200048d0}, 0x4004850) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000050000005600000025000000190004000400000007fd170000000000040000000000000000", 0x39}], 0x1) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_open_dev$tty1-syz_open_dev$tty1-dup-write$UHID_INPUT-mmap-mmap-mkdirat-mount-getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT-getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED-getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED-openat-openat$fb0-openat$fb0-ioctl$FBIOBLANK-write-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-madvise detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4, &(0x7f0000000280)={[{@grpquota}, {@noload}, {@discard}, {@nodiscard}, {@delalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xda5}}, {@usrquota}, {@nogrpid}]}, 0x0, 0x62c, &(0x7f0000001900)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000008c0)={0x9, {"a2e3ad214fc752f91b29090942f70e0dd038e7ff7fc6e5539b324c078b089b34383b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r1, 0x84, 0x84, &(0x7f0000000300)={0x2, @in={{0x2, 0x4e21, @broadcast}}, 0x4e21}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000400)={r2, 0x5}, &(0x7f0000000440)=0x8) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000400)={r2, 0x5}, &(0x7f0000000440)=0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20180, 0x0) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20180, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x0) write(r3, &(0x7f00000001c0)='9', 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-rseq-gettid-bpf$MAP_CREATE-bpf$PROG_LOAD-socket$inet_tcp-ioctl$sock_SIOCGIFINDEX-bpf$PROG_LOAD-bpf$BPF_LINK_CREATE_XDP-syz_emit_ethernet-socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @empty, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "70c867", 0x0, 0x4, 0xff, @empty, @dev={0xfe, 0x80, '\x00', 0x13}}}}}, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="200001000000000000000000fe80000000000000000000000000002b86dd"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-rseq-gettid-bpf$MAP_CREATE-bpf$PROG_LOAD-socket$inet_tcp-ioctl$sock_SIOCGIFINDEX-bpf$PROG_LOAD-bpf$BPF_LINK_CREATE_XDP-syz_emit_ethernet-socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @empty, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "70c867", 0x0, 0x4, 0xff, @empty, @dev={0xfe, 0x80, '\x00', 0x13}}}}}, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="200001000000000000000000fe80000000000000000000000000002b86dd"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-syz_ublk_setup_io_uring-mmap$IORING_OFF_SQ_RING-mount-openat-fremovexattr-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-socket$nl_route-nanosleep-sendmsg$nl_route-openat-mount$9p_virtio-ioctl$SECCOMP_IOCTL_NOTIF_RECV detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x147) r0 = syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000b, 0x11, r0, 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/nvme0n1\x00', 0x2, 0x140) fremovexattr(r1, &(0x7f00000004c0)=@known='system.sockprotoname\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f00000005c0)=@raw=[@generic={0xbf, 0x6, 0x1}, @call={0x85, 0x0, 0x0, 0xd0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0xe, 0x0, &(0x7f0000000700)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) nanosleep(&(0x7f0000000440)={0x77359400}, &(0x7f0000000480)) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000100001002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10080400000000001c002b80080003001100000008000100", @ANYRES32, @ANYBLOB='\x00\x00\n\x00', @ANYRES32, @ANYBLOB="14003500626f6e645f736c6176655f3000000000080028"], 0x58}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2) mount$9p_virtio(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x408, &(0x7f0000000140)=ANY=[@ANYBLOB="740269b60be98872616e733d81bf8764da76717274696f2c63616368653d6e"]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0484e41, 0x0) program crashed: WARNING in io_sq_thread_stop single: successfully extracted reproducer found reproducer with 14 syscalls minimizing guilty program testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-syz_ublk_setup_io_uring-mmap$IORING_OFF_SQ_RING-mount-openat-fremovexattr-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-socket$nl_route-nanosleep-sendmsg$nl_route-openat-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x147) r0 = syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000b, 0x11, r0, 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/nvme0n1\x00', 0x2, 0x140) fremovexattr(r1, &(0x7f00000004c0)=@known='system.sockprotoname\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f00000005c0)=@raw=[@generic={0xbf, 0x6, 0x1}, @call={0x85, 0x0, 0x0, 0xd0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0xe, 0x0, &(0x7f0000000700)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) nanosleep(&(0x7f0000000440)={0x77359400}, &(0x7f0000000480)) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000100001002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10080400000000001c002b80080003001100000008000100", @ANYRES32, @ANYBLOB='\x00\x00\n\x00', @ANYRES32, @ANYBLOB="14003500626f6e645f736c6176655f3000000000080028"], 0x58}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2) mount$9p_virtio(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x408, &(0x7f0000000140)=ANY=[@ANYBLOB="740269b60be98872616e733d81bf8764da76717274696f2c63616368653d6e"]) program crashed: WARNING in io_sq_thread_stop testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-syz_ublk_setup_io_uring-mmap$IORING_OFF_SQ_RING-mount-openat-fremovexattr-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-socket$nl_route-nanosleep-sendmsg$nl_route-openat detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x147) r0 = syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000b, 0x11, r0, 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/nvme0n1\x00', 0x2, 0x140) fremovexattr(r1, &(0x7f00000004c0)=@known='system.sockprotoname\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f00000005c0)=@raw=[@generic={0xbf, 0x6, 0x1}, @call={0x85, 0x0, 0x0, 0xd0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0xe, 0x0, &(0x7f0000000700)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) nanosleep(&(0x7f0000000440)={0x77359400}, &(0x7f0000000480)) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000100001002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10080400000000001c002b80080003001100000008000100", @ANYRES32, @ANYBLOB='\x00\x00\n\x00', @ANYRES32, @ANYBLOB="14003500626f6e645f736c6176655f3000000000080028"], 0x58}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2) program crashed: WARNING in io_sq_thread_stop testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-syz_ublk_setup_io_uring-mmap$IORING_OFF_SQ_RING-mount-openat-fremovexattr-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-socket$nl_route-nanosleep-sendmsg$nl_route detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x147) r0 = syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000b, 0x11, r0, 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/nvme0n1\x00', 0x2, 0x140) fremovexattr(r1, &(0x7f00000004c0)=@known='system.sockprotoname\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f00000005c0)=@raw=[@generic={0xbf, 0x6, 0x1}, @call={0x85, 0x0, 0x0, 0xd0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0xe, 0x0, &(0x7f0000000700)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) nanosleep(&(0x7f0000000440)={0x77359400}, &(0x7f0000000480)) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000100001002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10080400000000001c002b80080003001100000008000100", @ANYRES32, @ANYBLOB='\x00\x00\n\x00', @ANYRES32, @ANYBLOB="14003500626f6e645f736c6176655f3000000000080028"], 0x58}}, 0x0) program crashed: WARNING in io_sq_thread_stop testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-syz_ublk_setup_io_uring-mmap$IORING_OFF_SQ_RING-mount-openat-fremovexattr-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-socket$nl_route-nanosleep detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x147) r0 = syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000b, 0x11, r0, 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/nvme0n1\x00', 0x2, 0x140) fremovexattr(r1, &(0x7f00000004c0)=@known='system.sockprotoname\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f00000005c0)=@raw=[@generic={0xbf, 0x6, 0x1}, @call={0x85, 0x0, 0x0, 0xd0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0xe, 0x0, &(0x7f0000000700)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) nanosleep(&(0x7f0000000440)={0x77359400}, &(0x7f0000000480)) program crashed: WARNING in io_sq_thread_stop testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-syz_ublk_setup_io_uring-mmap$IORING_OFF_SQ_RING-mount-openat-fremovexattr-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-socket$nl_route detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x147) r0 = syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000b, 0x11, r0, 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/nvme0n1\x00', 0x2, 0x140) fremovexattr(r1, &(0x7f00000004c0)=@known='system.sockprotoname\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f00000005c0)=@raw=[@generic={0xbf, 0x6, 0x1}, @call={0x85, 0x0, 0x0, 0xd0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0xe, 0x0, &(0x7f0000000700)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) program crashed: WARNING in io_sq_thread_stop testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-syz_ublk_setup_io_uring-mmap$IORING_OFF_SQ_RING-mount-openat-fremovexattr-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x147) r0 = syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000b, 0x11, r0, 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/nvme0n1\x00', 0x2, 0x140) fremovexattr(r1, &(0x7f00000004c0)=@known='system.sockprotoname\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f00000005c0)=@raw=[@generic={0xbf, 0x6, 0x1}, @call={0x85, 0x0, 0x0, 0xd0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0xe, 0x0, &(0x7f0000000700)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) program crashed: WARNING in io_sq_thread_stop testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-syz_ublk_setup_io_uring-mmap$IORING_OFF_SQ_RING-mount-openat-fremovexattr-bpf$PROG_LOAD detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x147) r0 = syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000b, 0x11, r0, 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/nvme0n1\x00', 0x2, 0x140) fremovexattr(r1, &(0x7f00000004c0)=@known='system.sockprotoname\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f00000005c0)=@raw=[@generic={0xbf, 0x6, 0x1}, @call={0x85, 0x0, 0x0, 0xd0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) program crashed: WARNING in io_sq_thread_stop testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-syz_ublk_setup_io_uring-mmap$IORING_OFF_SQ_RING-mount-openat-fremovexattr detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x147) r0 = syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000b, 0x11, r0, 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/nvme0n1\x00', 0x2, 0x140) fremovexattr(r1, &(0x7f00000004c0)=@known='system.sockprotoname\x00') program crashed: WARNING in io_sq_thread_stop testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-syz_ublk_setup_io_uring-mmap$IORING_OFF_SQ_RING-mount-openat detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x147) r0 = syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000b, 0x11, r0, 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/nvme0n1\x00', 0x2, 0x140) program crashed: WARNING in io_sq_thread_stop testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-syz_ublk_setup_io_uring-mmap$IORING_OFF_SQ_RING-mount detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x147) r0 = syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000b, 0x11, r0, 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) program crashed: WARNING in io_sq_thread_stop testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-syz_ublk_setup_io_uring-mmap$IORING_OFF_SQ_RING detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x147) r0 = syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000b, 0x11, r0, 0x0) program crashed: WARNING in io_sq_thread_stop testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-syz_ublk_setup_io_uring detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x147) syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) program crashed: WARNING in io_sq_thread_stop testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x147) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring detailed listing: executing program 0: syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) program crashed: WARNING in io_sq_thread_stop testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring detailed listing: executing program 0: syz_ublk_setup_io_uring(0x3085, 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring detailed listing: executing program 0: syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, 0x0, &(0x7f0000000300), &(0x7f0000000340)) program crashed: WARNING in io_sq_thread_stop testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring detailed listing: executing program 0: syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, 0x0, 0x0, &(0x7f0000000340)) program crashed: WARNING in io_sq_thread_stop testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring detailed listing: executing program 0: syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, 0x0, 0x0, 0x0) program crashed: WARNING in io_sq_thread_stop extracting C reproducer testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring program crashed: WARNING in io_sq_thread_stop simplifying C reproducer testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring program crashed: WARNING in io_sq_thread_stop testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring program crashed: WARNING in io_sq_thread_stop testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring program did not crash testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring program crashed: WARNING in io_sq_thread_stop testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring program crashed: WARNING in io_sq_thread_stop testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring program crashed: WARNING in io_sq_thread_stop testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring program did not crash testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring program crashed: WARNING in io_sq_thread_stop testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring program did not crash testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring program crashed: WARNING in io_sq_thread_stop testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring program crashed: WARNING in io_sq_thread_stop testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring program crashed: WARNING in io_sq_thread_stop testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring program did not crash testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring program crashed: WARNING in io_sq_thread_stop testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring program crashed: WARNING in io_sq_thread_stop testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring detailed listing: executing program 0: syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, 0x0, 0x0, 0x0) program crashed: WARNING in io_sq_thread_stop validation run: crashed=true testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring detailed listing: executing program 0: syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, 0x0, 0x0, 0x0) program crashed: WARNING in io_sq_thread_stop validation run: crashed=true testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring detailed listing: executing program 0: syz_ublk_setup_io_uring(0x3085, &(0x7f0000000240)={0x0, 0xee67, 0x12, 0x1, 0x39b}, 0x0, 0x0, 0x0) program crashed: WARNING in io_sq_thread_stop validation run: crashed=true reproducing took 47m58.861951351s repro crashed as (corrupted=false): ------------[ cut here ]------------ WARNING: io_uring/sqpoll.c:88 at io_sq_thread_stop+0x180/0x1b0 io_uring/sqpoll.c:88, CPU#0: kworker/u8:1/13 Modules linked in: CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 Workqueue: iou_exit io_ring_exit_work pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : io_sq_thread_stop+0x180/0x1b0 io_uring/sqpoll.c:88 lr : io_sq_thread_stop+0x180/0x1b0 io_uring/sqpoll.c:88 sp : ffff80008fa578e0 x29: ffff80008fa578e0 x28: ffff0000e95c98a0 x27: ffff0000e95c9898 x26: ffff0000e95c9898 x25: ffff0000cd8b84d8 x24: 1fffe00019b17090 x23: dfff800000000000 x22: 0000000000000001 x21: dfff800000000000 x20: ffff0000e95c9918 x19: ffff0000e95c9800 x18: 1fffe000359cf228 x17: 0000000000000003 x16: ffff8000898b7000 x15: ffff80008996b2e0 x14: 000000000023ddf4 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff60001d2b9302 x9 : 0000000000000000 x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff800081942848 x2 : 0000000000000001 x1 : ffff0000c1a6d880 x0 : 0000000000000000 Call trace: io_sq_thread_stop+0x180/0x1b0 io_uring/sqpoll.c:88 (P) io_put_sq_data+0x90/0x120 io_uring/sqpoll.c:105 io_sq_thread_finish+0x1d4/0x224 io_uring/sqpoll.c:130 io_ring_ctx_free+0x3c/0x5e0 io_uring/io_uring.c:2322 io_ring_exit_work+0x4b0/0x53c io_uring/io_uring.c:2658 process_one_work kernel/workqueue.c:3495 [inline] process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3578 worker_thread+0x798/0xbd0 kernel/workqueue.c:3659 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854 irq event stamp: 576386 hardirqs last enabled at (576385): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] hardirqs last enabled at (576385): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:221 hardirqs last disabled at (576386): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:484 softirqs last enabled at (576320): [] spin_unlock_bh include/linux/spinlock.h:407 [inline] softirqs last enabled at (576320): [] nsim_dev_trap_report drivers/net/netdevsim/dev.c:816 [inline] softirqs last enabled at (576320): [] nsim_dev_trap_report_work+0x670/0x9cc drivers/net/netdevsim/dev.c:847 softirqs last disabled at (576318): [] spin_lock_bh include/linux/spinlock.h:353 [inline] softirqs last disabled at (576318): [] nsim_dev_trap_report drivers/net/netdevsim/dev.c:812 [inline] softirqs last disabled at (576318): [] nsim_dev_trap_report_work+0x5ec/0x9cc drivers/net/netdevsim/dev.c:847 ---[ end trace 0000000000000000 ]--- final repro crashed as (corrupted=false): ------------[ cut here ]------------ WARNING: io_uring/sqpoll.c:88 at io_sq_thread_stop+0x180/0x1b0 io_uring/sqpoll.c:88, CPU#0: kworker/u8:1/13 Modules linked in: CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 Workqueue: iou_exit io_ring_exit_work pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : io_sq_thread_stop+0x180/0x1b0 io_uring/sqpoll.c:88 lr : io_sq_thread_stop+0x180/0x1b0 io_uring/sqpoll.c:88 sp : ffff80008fa578e0 x29: ffff80008fa578e0 x28: ffff0000e95c98a0 x27: ffff0000e95c9898 x26: ffff0000e95c9898 x25: ffff0000cd8b84d8 x24: 1fffe00019b17090 x23: dfff800000000000 x22: 0000000000000001 x21: dfff800000000000 x20: ffff0000e95c9918 x19: ffff0000e95c9800 x18: 1fffe000359cf228 x17: 0000000000000003 x16: ffff8000898b7000 x15: ffff80008996b2e0 x14: 000000000023ddf4 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff60001d2b9302 x9 : 0000000000000000 x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff800081942848 x2 : 0000000000000001 x1 : ffff0000c1a6d880 x0 : 0000000000000000 Call trace: io_sq_thread_stop+0x180/0x1b0 io_uring/sqpoll.c:88 (P) io_put_sq_data+0x90/0x120 io_uring/sqpoll.c:105 io_sq_thread_finish+0x1d4/0x224 io_uring/sqpoll.c:130 io_ring_ctx_free+0x3c/0x5e0 io_uring/io_uring.c:2322 io_ring_exit_work+0x4b0/0x53c io_uring/io_uring.c:2658 process_one_work kernel/workqueue.c:3495 [inline] process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3578 worker_thread+0x798/0xbd0 kernel/workqueue.c:3659 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854 irq event stamp: 576386 hardirqs last enabled at (576385): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] hardirqs last enabled at (576385): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:221 hardirqs last disabled at (576386): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:484 softirqs last enabled at (576320): [] spin_unlock_bh include/linux/spinlock.h:407 [inline] softirqs last enabled at (576320): [] nsim_dev_trap_report drivers/net/netdevsim/dev.c:816 [inline] softirqs last enabled at (576320): [] nsim_dev_trap_report_work+0x670/0x9cc drivers/net/netdevsim/dev.c:847 softirqs last disabled at (576318): [] spin_lock_bh include/linux/spinlock.h:353 [inline] softirqs last disabled at (576318): [] nsim_dev_trap_report drivers/net/netdevsim/dev.c:812 [inline] softirqs last disabled at (576318): [] nsim_dev_trap_report_work+0x5ec/0x9cc drivers/net/netdevsim/dev.c:847 ---[ end trace 0000000000000000 ]---