Extracting prog: 20m49.163432362s Minimizing prog: 34m21.443604299s Simplifying prog options: 4m51.646782781s Extracting C: 49.43530648s Simplifying C: 0s extracting reproducer from 59 programs testing a last program of every proc single: executing 14 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-openat$binderfs-ioctl$BINDER_WRITE_READ-dup3-ioctl$BINDER_WRITE_READ detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$inet-socketpair$unix-sendmsg$inet-recvmsg$unix-mmap$IORING_OFF_SQ_RING-socket$nl_route-fsopen-socketpair$unix-socketpair$unix-mkdirat-mount-openat-read-syz_ublk_add_dev-syz_io_uring_setup-syz_io_uring_submit$UBLK-syz_ublk_add_dev-socket$inet6_tcp-dup-syz_ublk_setup_queues-syz_ublk_setup_queues detailed listing: executing program 0: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/dynamic_events\x00', 0x40000, 0x0) read(r5, &(0x7f0000000200)=""/256, 0x24) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = syz_io_uring_setup(0x75e7, &(0x7f0000000480)={0x0, 0x7210, 0x2, 0x1, 0x1cb}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) syz_io_uring_submit$UBLK(0x0, r4, r9, 0x0) syz_ublk_add_dev(r8, 0x0, r4, r9, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r3, r7, &(0x7f0000000040)={0x0, 0x6a36, 0x40000, 0x1, 0x40}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa9d8, 0x10000, 0x2, 0x193, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe98a, 0x400, 0x2, 0x2e2, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3428, 0x80, 0x2, 0x2ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd1e3, 0x2, 0x0, 0x1d, 0x0, r11}}], 0x4, &(0x7f0000002dc0)={0x2e, 0x0, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xeba}, 0x0, r6, '\x00', {0x0, 0x2ac, 0x0, &(0x7f0000001dc0)=@buf_4k="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"}}, &(0x7f0000002e40)) syz_ublk_setup_queues(r12, r7, &(0x7f0000000180)={0x0, 0x6569, 0x0, 0x1, 0x38c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7333, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x40000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac2-syz_usb_connect$uac1-openat-ioctl-ioctl-sendmsg$IPCTNL_MSG_CT_GET-syz_usb_control_io$uac2 detailed listing: executing program 0: r0 = syz_usb_connect$uac2(0x2, 0x9f, &(0x7f00000018c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0xda, 0x20, 0x8f, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x7f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x6, 0x405, 0xf6, 0x4, 0x0, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x2, 0x8}, @as_header={0x10, 0x24, 0x1, 0x6, 0xff, 0x2, 0x4, 0x40, 0x200, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf0, 0x3, 0x6, {0x8, 0x25, 0x1, 0x2, 0x33, 0x3, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x6, 0x40, {0x8, 0x25, 0x1, 0x0, 0x33, 0xc0, 0x3}}}}}}}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac1(0x3, 0xd7, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x145, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x2, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x59}, [@mixer_unit={0xb, 0x24, 0x4, 0x4, 0x80, "9935fd3fb94d"}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0xc, 0x5, "b35f895cd8"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x305, 0x5, 0x6, 0x2}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x1, 0x3, [0x6, 0x2, 0x1], 0xfc}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x5, 0x6, [0x5, 0x8, 0x3, 0xc, 0x8, 0x2], 0x3}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x6, 0x4, [0x8, 0x2, 0x9, 0x5], 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xed}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x5, 0x1, {0x7, 0x25, 0x1, 0x4, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x4, 0x0, 0x4, "83602d4d15e770"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x59, 0x80, 0x81, {0x7, 0x25, 0x1, 0x8, 0x5, 0xabbb}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0x0, 0x56, 0x8, 0xff, 0x7}, 0x120, &(0x7f0000000540)={0x5, 0xf, 0x120, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x6, 0xd}, @generic={0xef, 0x10, 0x2, "a3e0a7df67cc3d300fa0ec30a9f49bad45c41ed9975c741e17f0b1b4fedaa8244ab9e646bcaf2817b24b53f12780b46da9cede6ae86816d700582d4e6166d9f6d1e93bc123be7ffa4fbedf7206da38997758f65bd78b42ac67f22882ef2c522fce2ed0e69635e50cd70e980e03fb4ae63f1ea0ef4341040301f84a2e52c163ca455c8a6abc032d3962a0f9cb22adf600537cee8c9ca82ce6d6dd1545b419806955ee84a65889f3e24842fbfe9557025df164a3b1eb6d0d5f3894ad773d29b1efac3fe2532330c51476830f2a2f3d63fb6b8c0c630f622016f6fa0740103a2de9fb32d41ec783319f2b342f53"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "68f060770b3da7f6e351432475a05f64"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7, 0xf8, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x3, 0x2}]}, 0x4, [{0x5f, &(0x7f0000000680)=@string={0x5f, 0x3, "313f1f8d7adf924bf31d074ded1a2fc4abe2f263c879dc1724499c9457187f073890cf2685253e03a54adb13228e8eac183e24924a4cb980aa62999ebbe4f769b10948d8521985b93b5b98ac62080ac30c997e84f38b9c053777ebe802"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x43e}}, {0xed, &(0x7f0000000740)=@string={0xed, 0x3, "12575b71c411902cbeb3b556a486e530b1bf4218ce857f01f5d5572095a923a2542786135f46a0ab9b6dbe5ce471532cd4d835b7af6937684efd8b63a370446942073a7ee210ac9a56285455f7ab74072bd4f09550122e2f8694071227454895423f1bd30edb371a243f74eb1ea1b8080af10e7c9ce2d13239a8617ab07af1389e859aefcc1ff58fbe8887aea63bbceb0bd18731040588262f81eccfe240c0e37ab6285b2f895f0da40f978f16884e5e0692e049361630641ce60d31df151cbdbe04b168d288281ff3683ac4c1336a02227ee1378840a67f5ecd3dfe3a6f977267f01e49c6d39743bda330"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x816}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc013fd03, &(0x7f0000001000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl(r1, 0xc013fd04, &(0x7f0000003000)="04000000000000000000000038010000380100000000000000000000000000003200000000000000000000000000000070") sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x2c, 0x17, [0x0, 0x5, 0x53, 0xc, 0xfffffffb, 0xfff, 0x348, 0x9, 0x7ba62318, 0x81]}]}, 0x50}, 0x1, 0x0, 0x0, 0x845}, 0x20000000) (async) syz_usb_control_io$uac2(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x10, 0x76, {0x76, 0x23, "1f9593e715edb222651c4de4ed7cb2bd1975419325117a69bf2d60379ec7ff783668df7d12ec0f3e9c309d68622fe23b348a2818ba16f460123b220fe86128ecd25473cacaea9e3eeb2e08ee5132c0840f2b6aa0f843782958fbbf8e0ec5f34cef7fc9d1ddfe05228dc83ddc5391151c05856beb"}}, &(0x7f0000000080)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "a5bab6c512e03bae587c148aba78f2d1425bffde97368c28d9bed116"}}}, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x20, 0xc, 0xb1, "b2c5cb3e67da213ffe303ba406f5e9313555a24a2d201a6ea7ddf83e83de12f91bc953a2c44dac9e67e287727b564e3843f2b44b1a1de273d38a67dd53f3d0fc44b3757e9915ff160a25b2a1d95e64a3edba0feddc5374170723651a6a90a07b66e690dd858b086b6bfdb5a1df46d703e62efabeb4aba577bcd314a5b202b2de97c92b52956a88e570f10339f6162cd0ea1d8b930b6dac715ab839526d43bf32835507b101cf095d02b4910cd11fec62f0"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xe0}, &(0x7f0000000240)={0x20, 0x81, 0x1, "c9"}, &(0x7f0000000280)={0x20, 0x82, 0x1, 's'}, &(0x7f00000002c0)={0x20, 0x83, 0x1, 'a'}, &(0x7f0000000300)={0x20, 0x84, 0x3, "edfd5a"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "8f2865"}}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$procfs-add_key$fscrypt_v1-keyctl$set_timeout-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCSREPORT-syz_usb_control_io-syz_usb_control_io$hid-rt_sigprocmask-getpid-gettid-rt_tgsigqueueinfo-signalfd-read-close detailed listing: executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "d7d515477e4f57ea6a5f8cde99112acbaaac1a0b1d6682efea1bd40b9b5b7ef17ed5435de8c03222aed444e56068d11c113a3021768f2fca1bd376f3c35c98fb", 0x1c}, 0x48, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = getpid() r5 = gettid() rt_tgsigqueueinfo(r4, r5, 0x1f, &(0x7f0000000080)={0x0, 0x10, 0x2}) r6 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r6, &(0x7f0000000740)=""/377, 0x179) close(r0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-dup-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff0200000000000000000000f5000001"], 0xffe) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-dup-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff0200000000000000000000f5000001"], 0xffe) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$NFT_BATCH-syz_init_net_socket$nl_generic-socket$inet6_tcp-setsockopt$SO_TIMESTAMP-syz_genetlink_get_family_id$ieee802154-sendmsg$IEEE802154_LLSEC_SETPARAMS-openat$dir-mkdirat-mount-openat-write-socket$nl_netfilter-syz_usb_connect$midi detailed listing: executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x50, &(0x7f0000002900)=0x659c, 0x4) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004804}, 0x8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x460800, 0x81) mkdirat(r3, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x1, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x3, [], [{{0x9, 0x5, 0xb, 0x3, 0xe96f8b4bdad37473, 0xc7, 0x7, 0x8, {0x4}}}]}}}}}]}}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$NFT_BATCH-syz_init_net_socket$nl_generic-socket$inet6_tcp-setsockopt$SO_TIMESTAMP-syz_genetlink_get_family_id$ieee802154-sendmsg$IEEE802154_LLSEC_SETPARAMS-openat$dir-mkdirat-mount-openat-write-socket$nl_netfilter-syz_usb_connect$midi detailed listing: executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x50, &(0x7f0000002900)=0x659c, 0x4) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004804}, 0x8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x460800, 0x81) mkdirat(r3, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x1, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x3, [], [{{0x9, 0x5, 0xb, 0x3, 0xe96f8b4bdad37473, 0xc7, 0x7, 0x8, {0x4}}}]}}}}}]}}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-mmap-ioctl$KVM_SET_MP_STATE-fchdir-openat-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-syz_open_procfs-read$FUSE-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-seccomp$SECCOMP_GET_ACTION_AVAIL-ioctl$KVM_CREATE_VCPU detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000000c0)=0x4) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x113003, 0x488) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack\x00') read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x2, 0x0, 0x1200002, 0x2}]}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x6e0, 0x0, 0x80000100000}]}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7ff00000) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_VCPU_EVENTS-mmap-ioctl$KVM_SET_MP_STATE-fchdir-openat-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-syz_open_procfs-read$FUSE-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-seccomp$SECCOMP_GET_ACTION_AVAIL-ioctl$KVM_CREATE_VCPU detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000000c0)=0x4) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x113003, 0x488) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack\x00') read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x2, 0x0, 0x1200002, 0x2}]}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x6e0, 0x0, 0x80000100000}]}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7ff00000) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendto-recvmmsg-timerfd_create-socket$inet-setsockopt$inet_opts-timerfd_settime-readv-fcntl$dupfd detailed listing: executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000003d40)=""/4052, 0xfd4}, {&(0x7f00000000c0)=""/205, 0xcd}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000ac0)=""/246, 0xf6}, {&(0x7f0000000380)=""/286, 0x11e}, {&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f00000001c0)=""/257, 0x101}, {&(0x7f00000007c0)=""/129, 0x81}], 0x8}, 0x72}, {{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x1f74}, {{0x0, 0x0, 0x0}, 0xe91}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x9c7000}, {{0x0, 0x0, 0x0}, 0xe4f}], 0x7, 0x0, 0x0) r1 = timerfd_create(0x9, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, 0x0, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000440)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1) fcntl$dupfd(r0, 0x0, r1) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendto-recvmmsg-timerfd_create-socket$inet-setsockopt$inet_opts-timerfd_settime-readv-fcntl$dupfd detailed listing: executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000003d40)=""/4052, 0xfd4}, {&(0x7f00000000c0)=""/205, 0xcd}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000ac0)=""/246, 0xf6}, {&(0x7f0000000380)=""/286, 0x11e}, {&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f00000001c0)=""/257, 0x101}, {&(0x7f00000007c0)=""/129, 0x81}], 0x8}, 0x72}, {{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x1f74}, {{0x0, 0x0, 0x0}, 0xe91}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x9c7000}, {{0x0, 0x0, 0x0}, 0xe4f}], 0x7, 0x0, 0x0) r1 = timerfd_create(0x9, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, 0x0, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000440)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1) fcntl$dupfd(r0, 0x0, r1) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$tipc-socket$tipc-socket$tipc-socketpair$tipc-socketpair$tipc-socketpair$tipc-socketpair$tipc-socketpair$tipc-socketpair$tipc-socketpair$tipc-socketpair$tipc-socketpair$tipc-socketpair$tipc-socket$tipc-socket$tipc-socket$tipc-socketpair$tipc-socketpair$tipc-socket$nl_sock_diag-write detailed listing: executing program 0: socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000000f00"/88, 0x58) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$tipc-socket$tipc-socket$tipc-socketpair$tipc-socketpair$tipc-socketpair$tipc-socketpair$tipc-socketpair$tipc-socketpair$tipc-socketpair$tipc-socketpair$tipc-socketpair$tipc-socketpair$tipc-socket$tipc-socket$tipc-socket$tipc-socketpair$tipc-socketpair$tipc-socket$nl_sock_diag-write detailed listing: executing program 0: socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000000f00"/88, 0x58) program did not crash single: failed to extract reproducer bisect: bisecting 59 programs with base timeout 30s testing program (duration=44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 19, 9, 30, 8, 20, 20, 22, 21, 7, 30, 11, 9, 9, 21, 22, 11, 7, 29, 21, 21, 2, 20, 17, 19, 3, 13, 13, 7, 17, 3, 30, 8, 7, 7, 6, 6, 3, 2, 13, 6, 2, 2, 8, 30, 3, 4, 21, 6, 20, 30, 12, 17, 6, 2, 7, 7, 21, 6] detailed listing: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff02000000ffffffffffffff87000001"], 0xffe) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100000000004000010000000009040000020300010009210000000122864eb7106f9714f118000905810300f2ffffff0000000000000000000000050006ecdec9f49fde4bb6dc3f5bfa24bb80e7138e8058b7e844c8b8fbd787ed632819ef679c834f4de136b6b01ea1203529725f530edc7e7ed56a2467758d62c6aa7fbf4c243f51e6c76da6261db59246dc2188325a42290089654c5a917bf373b554be2ac940be37e1ac685f920fb7bc2c29aa61e461cba98be79ea8a78cc61d37c085b0f90b914e7f7daa5b16e544708d5fe79134ece562b883db2294c26ea3aeab9ccb29fa3904d8e248038f61a161f35866be30d7ca27cd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000004ac0)=""/31, &(0x7f0000004b00)=0x1f) syz_usb_connect(0x5, 0xbe6, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0xf5, 0xdc, 0xb1, 0x40, 0x5c6, 0x9009, 0x5156, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd4, 0x4, 0x78, 0x5, 0xc0, 0x7, "", [{{0x9, 0x4, 0xdf, 0x4, 0x4, 0x79, 0x2, 0x33, 0xff, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x5, 0x2, 0x5, 0x6}]}], [{{0x9, 0x5, 0xc, 0x10, 0x10, 0x7, 0x80, 0x1, [@generic={0xfb, 0x22, "22d1ffaaed4f0972b5cf71840d1b057e217c8570606991562f42cf2b5c022bc47bf2d5778e3fc6c6d658821adc968f1e9b848b4cf6375fdb801c01bb97a7b50f25711b0282b0673933c7ce37f374175a5e736decb39d7eaca68361cb4f80b81a6cd78f7cc84e9109aebd00fc240b5c13b0406585335305f3c1a1d8b3f0cc66c1afd60d58e36af1acea10a87e46d0004f462c51362ea2049641bc1a8e7b8446516185b0c9a77b31b3615217b20cc68924caa58b9fdd9b691250af0c9463bec42f5dc34f08a46c9601d0487423dcc58a389b9c0dd9158c55fba6b68ce3378260ff0d052bbdcdd0b3c769eede270bf464d6e35a5ee69c158f9089"}, @generic={0xc5, 0x9, "10d96e424b9d59e745c97620afea5b488c458c113c92e579a1ad3b78adf95034febce16b8425113e42d1508413eb6f8d33edadff7ba2eee0c5c01f9e2ce470545234a9ed166c894ddf70109715258b794ad99190e57711b8f314f276445adec805998aa145e45ace2eb6bb0d7980427fb93120f8bcc1465e6ce7c93ce2433dc0189ff78dea10321c6c03bc14bb76f2a84d7fb4e4aa88286c6fc0a18ad81f7fcdf187681b731392f5294d4e7b60e6fed53ca8448b161ee05ffd1e41ad46cb610612a91b"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x81, 0xf, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x200}, @generic={0x23, 0x22, "c2fbf6360e5a8717739f3bb9c51e713025d15a1182aa22f28699173fd6ec677d84"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x2, 0x1, 0xb}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0x9, 0xb1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0x4}]}}]}}, {{0x9, 0x4, 0xe9, 0xb4, 0xe, 0x8f, 0xc6, 0x26, 0x1, [], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x84, 0x8, 0x3}}, {{0x9, 0x5, 0x5, 0x899f754efba0233d, 0x200, 0x9, 0xf4, 0x6, [@generic={0xb0, 0x24, "1fba1656f49dce337a53d664b971931d20cd9e60f9424c0a597ca26b98dc6f0771bffe44695e0ad2ef956794805b8e6c3354880be804d90e8807dea29352fd9327b83ab1cda09ade23c710400d4742b704234e0de91b21113b3e44c659a2b9db43768067a6e569e621e45d67477b58fd7e54fcba2712f89f5242bf9a9d6763b40ef5f9661cd7c3e8a3f0e36effa9ebdc9d2810d220f363c626ecab36b73298b1f6db9dbbfdb54bbc0a5a7ed57ac6"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x5d7, 0x0, 0x2, 0x0, [@generic={0xa5, 0xd, "5fff25f0443c5631f6f553ac9b761370bf2fbfb0895544e73c55e0e7dc5d9caf052d1ef87080fa838cc47f80e9f4ede9cc1202164f76fa0c0885b12e55647e3a862a362590481995416326c77f398e2b02007e1a81c498e3e74865061695a0c448ad72ddf98e55f8650bafc510251de18800490081ddf804b984995e619864216c4e9761ec734250eee15b20b738ae2cefa511145077a80cd58ac303c275e2bebac336"}]}}, {{0x9, 0x5, 0x6, 0x13db5fe267cb753d, 0x10, 0x5, 0x7b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x6}, @generic={0x58, 0x22, "e3612679641a51b6580a6fcfee95b1e40f37563159b63d3b38d33fde502d30fb7f9bc5a624968d2ab56962a06f8eacb23762b607a586b9da0c34d49f8bb904d1b2bddc0335793f093fc727273b9abaecdb48f986b9b2"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x5, 0x1, 0x4}}, {{0x9, 0x5, 0x2, 0xc, 0x40, 0xb, 0x1, 0xf2}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x80, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0xd}, @generic={0x45, 0x10, "3617fdeea6bf9d45d4bf2f463434f2c020926c5802bf1793ccf0857442ca783dfed227a0493a4eb94615aa2700130e03a63403b89205d006c9b7b289e1d119dfc336fc"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x2, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0xfc01}]}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0x6c, 0x81, 0x1, [@generic={0xfc, 0x21, "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"}, @generic={0x1b, 0xc, "90430f2fca94deca4f367562ba407478029111d47fad03cd76"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x5, 0xa, 0x7f}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x1, 0x44, 0x75, [@generic={0x90, 0x30, "ccf4d6585e4c4fd2fafbaf33a321024bb146425f2dac0d55ba8e36622bdfce22b14a1927c83b6e2421b2691191a80a0c280d438a8256a4423650635abec43c7248f73f0f891d065ead51b92dd50bf352939a76ee9bed03cddc4d3f65eca84ab7287f8e556ebdacd0e018152df9f89d36870fa68756832f26dcc32b197f01315b96e7eca88d887634458259e79e85"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x400, 0x6, 0xfb, 0xd, [@generic={0xa, 0x31, "c620e1a3531c180c"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0xb1, 0x1, 0x6, [@generic={0x2e, 0x1f, "198b87aefe20a580ba12454991793df59547b2d2acc0616ca8062447fd765338ac0e80beb2a884d7bad13793"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x7, 0x0, 0x4}}]}}, {{0x9, 0x4, 0x37, 0x4, 0xd, 0xff, 0x5, 0x75, 0x10, [], [{{0x9, 0x5, 0x1, 0x2, 0x20, 0x91, 0x2}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x4, 0xae, 0x3}}, {{0x9, 0x5, 0x2, 0x8, 0x40, 0x7, 0x40, 0xff, [@generic={0x24, 0xb, "dd4e1d7eeb3e542039a9dcb80c16ca70c8745a04395d571634238892b0a66d4ec01d"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0xfffe}]}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x4, 0xfe, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xfd4f}]}}, {{0x9, 0x5, 0xd, 0x0, 0x220, 0x0, 0x81, 0x7b}}, {{0x9, 0x5, 0x7, 0x1, 0x400, 0x1, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x9}, @generic={0xb6, 0x11, "d466e81260e69415da8ee1bf92c4d2499a915c1938f4960ac6a893895d03a35278eb84e712db839e0d01729967c642e6233fdd221c2e9e8a8d041623cf6aa88c7687fc39b745be0a1db0b6ecd1305e44ad481b8baf43209b6ba38b3b970f35384fd6d5b0a94c517f6efbb087698334d9603c0793e1010336acc6fa0d24b0101395381a1b2cd43c56688ddf9459d93ffb8e2113ea66fbe77f42e889599c9cf96a04c8a341874d68c0a9cd860c776470755f93e01d"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x9, 0x3, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb9, 0x9}, @generic={0xb, 0x2, "2fd76ceb59d9a6dc67"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x6, 0x78, 0x4}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0x3, 0xd0, 0x9, [@generic={0x66, 0x11, "66ba926abd381e0e2b8edea40c3a16c86fb1be3493ff4219f9be1cc3ea744ff9c3b29006075f6d693bc3fc0e459c7bff71675b42165047222a71869fe282d8359cc0d3c8adbcd6a346bcd4b90bf716dd1bad06e3648d9993fdf243868a615a36f39d21fd"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x40}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x5, 0x4, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x8}]}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x3, 0xd, [@generic={0xb1, 0x6, "315e65009faab11c4872750742f990247a2caf380a412aa52975c93074b7b7cd5c6f0028d54f93696441b978447eb09cb77c9ff0c8e9d5d72e1ed100eae10779b74bf943ef6e618a96f9b075f08090d824c9e24a25fad5e66559d6e138f189fedcfdd9d56071b0ece3f038fcb45304a698af27532d737594f56b45fd35e3031e44d928fc6bd7e2f525791c6d7e055d7785d8cc3570669867f9d0048625888e9806fcedaa46ad73c25014ae1948400a"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0x9}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0xfe, 0x6, 0x1, [@generic={0x37, 0x9, "ea41c6d36426d4fd8dc0190247dfb8a38baab5598a4eadd10ff019969a38b823057cd05f3f1167545bb601fe5be7ffc9cb31bf9393"}]}}]}}, {{0x9, 0x4, 0x17, 0x0, 0xf, 0x6c, 0xed, 0xb5, 0xe, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3ab, 0x800, 0xb, 0x5}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xff, 0x3, 0x7, 0x7, "63e0"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x7, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xf3f, 0x0, 0x4, "193b30f364c9"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3, 0x4, 0x4, "6b93baa3"}]}, @hid_hid={0x9, 0x21, 0x80, 0x6, 0x1, {0x22, 0x523}}], [{{0x9, 0x5, 0xe, 0x3, 0x218, 0x40, 0x8, 0x7}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x3, 0x6, 0xa}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x3, 0x0, 0x28, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}]}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0xf7, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe5, 0x2}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x9f, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x508}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x8}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0xc, 0x6, 0x1, [@generic={0xa, 0xa, "ebd1284941099140"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x400, 0xf, 0x0, 0x7}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x1, 0x2e, 0xd}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0xd8, 0x8, 0x7, [@generic={0x55, 0xb, "6f06366cfa624cbe2525cf64cc1c63d9e5223590be9e2e72d2f17610fd0e54674353f632967e5259e43dd310a84caed08b57af2418908d30acac7ccc2ee05f024f3b16a80842011cbf01867c3b51eaba190837"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xc, 0xff, 0x2}}, {{0x9, 0x5, 0xa, 0x4, 0x8, 0x1, 0xb2, 0x1d, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x9}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0xf, 0x5, 0x9, [@generic={0xe8, 0x9, "57ef1d9fa94019ed332db367010aed4730632759c82da0273ef57df41f2ceeeef45012cb7adb650ab8f0594739043fe9476decabe9e4508d88d347d4fa050983e5ac6a0b98fc5ef072d7b7b92cf6c81b8107d9de198f0474870f601aa557148ceb6b7cb46d401a1e9a6a1cd4f074cd23539e05b51d1b50b6bf39d88b575b0c55260d2c1da6839b69e5dcaa272dddc6c23635ab041ea4d21afe01d113af2c35a63fcd70b95db9f4017ed66c0c8a3250fb2e72810d0bb4f2e68916e839d95b2c1e4d2cf94e4e1d29a36f2565bf11bcdc811015bb74835a07077d9cb1057cff53894781d23204ba"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x0, 0xf7, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x4}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x2, 0x3e, 0x1}}, {{0x9, 0x5, 0x45d6e29c72715e78, 0xc, 0x400, 0x6, 0xc, 0xee, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x95, 0x200}]}}]}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x300, 0xa, 0x8d, 0x6, 0x40, 0x1}, 0x45, &(0x7f0000001300)={0x5, 0xf, 0x45, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x2, 0xff00, 0xa3e9, [0x7f4000, 0xc0, 0xc0, 0x0]}, @ssp_cap={0x24, 0x10, 0xa, 0x35, 0x6, 0x9, 0xf00, 0xa, [0xffc000, 0xc0, 0x3f00, 0xc000, 0xc000, 0x30]}]}, 0x2, [{0xd4, &(0x7f0000001380)=@string={0xd4, 0x3, "5c076097fabe84b53635d7fa10829a4ac183f53eb294846c60af7923a85df0e6b10b6bca047a7c731aceba188d3e3e661acd7bea606b0fdaff9b183c16b6b8eb7b4d431c7c1db01d4ff930567283b9a11c2f950acc694ba589c13a45a510f67eccc8ff600d602e6290ae977b800e4971a860c123ad83c4f2655d2da72e242ea4b9857f36e9819b9483d40ac33ecf9ddea553dbf904299634d0342ef65592c0eb9b1a6f164f1f4824d5432b7b05f6435ace93a063d42d8e159e3aedcf91bf5258d6114c4bf519450ab13d093fb7c6213fc400"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x42d}}]}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0x5, 0x2, 0x40, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x5}, {0x50000, 0x8000000, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x25000, 0xc, 0x6, 0xff, 0x3, 0x0, 0x5, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0x3, 0x3, 0xa2, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xf, 0x0, 0x6, 0xff, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xd000, 0xeeee8000, 0xc, 0x1, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x9, 0x88}, {0xdddd1000, 0xeeee0000, 0xa, 0x6, 0x3d, 0x8, 0x6, 0x10, 0xb, 0x3, 0x80, 0x87}, {0x6000, 0x8000}, {0x41000, 0x9}, 0x872fcdcf8176a647, 0x0, 0xdddd1000, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x7, 0x5, 0x5, 0xe]}) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc3}, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x5, 0x9, 0x5, '\x00', 0x7}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b000001090224"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x5000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0xd, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xd, '\x00', 0x8}, {0xd7, 0x6, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x5, 0x5, '\x00', 0x8}, {0x7, 0x1, 0x8}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x16, {[@local=@item_012={0x0, 0x2, 0xc37fd0ed8344de75}, @main=@item_4={0x3, 0x0, 0x9, "6bc489cf"}, @global=@item_012={0x0, 0x1, 0xa}, @main=@item_4={0x3, 0x0, 0x2076de6f0c108430, "5b1f920d"}, @main=@item_4={0x3, 0x0, 0x8, "e9fcc7e8"}, @global=@item_4={0x3, 0x1, 0xa, "2495e765"}]}}, 0x0}, 0x0) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x2, 0x0, 0x1200002, 0x2}]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)={0x2, 0x2000000, [{0x1b, 0x0, 0xfee00c00}, {0x6e0, 0x0, 0x80000100000}]}) executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904"], 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async, rerun: 64) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') (async, rerun: 64) io_setup(0xfffc, &(0x7f0000000800)) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) (async) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) write(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', 0x0}) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920010000030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x52, 0x0}) syz_usb_control_io$uac3(r2, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) futimesat(r1, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000640)={{r3, r4/1000+10000}, {0x77359400}}) (async) getdents(r1, &(0x7f0000000680)=""/176, 0xb0) (async, rerun: 32) syz_usb_connect$uac1(0x4, 0x0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac3(r2, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0) write$vga_arbiter(r5, &(0x7f0000000100)=@unlock_all, 0xb) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0xf, 0xffffcdd8, 0x0, @private2, @loopback, 0x10, 0x8000, 0x1, 0xfffffff5}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000140)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="5f7ec8df714cb8ab4776853c654a055e6546828e69847394b763d486436f82e304441134936315ae88a435c0c5c3f761ac2dd22deb9d25d4afd8bce8397332e0e3c8f645e0dde7f06406584179225731576c2918847d9bc56d53e8", 0x5b}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="e00000010a01010100000000140000000000000000000000010000004f000000000000002400000000000000000000000700000094040100890f580a010100e00000010a010101010000000014000000000000000000000002000000aafdffff000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ac1e01010000000000000000140000000000000000000000010000000300000000000000"], 0xb0}, 0x8010) executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff02000000ffffffffffffff90000001"], 0xffe) executing program 1: socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000000f00"/88, 0x58) executing program 32: socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000000f00"/88, 0x58) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9cae556c58768461ce74c044b9", 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200), 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x308) r7 = openat$cgroup_int(r5, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x5, 0x12) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000966520ce7cfbb22f6200002a002075380700000000000000d2a53a0c687b635e2c2d"], 0x0}, 0x0) executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000)='7', 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x800000, 0x0) setpgid(0x0, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = eventfd2(0x3, 0x1) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=""/10, 0xa) write$eventfd(r4, 0x0, 0x0) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwrite64(r5, &(0x7f00000000c0)="19fc9368c82137d53ab5e217922201dc16d719f8dfb3eac2c0e1dd56d05b9f59737bc5d93c3fe76c1c4f4836c40eec5738391cfc4871822526ae902c9dc4bceb79342ec52b4b25585b8f5bbf7b4b5f7f4b3edbf877a15ce80cc8b5237388e8be9c012374ea1b4c820a37164d3f744fcb8115b0a65a725ce06e24ed6916b55d222538bf", 0x83, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x4}, 0x4) setsockopt(r3, 0x8000, 0x9, &(0x7f00000000c0)="a27387f09ab88e03f802b9685942fae317d7129d8643e9b783c7580666659f35cc0bed3e6137ab52d388f44032f93ef613e72e12991b3593c422190cb87eccfb2fc28c30b0d8", 0x46) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./proc/thread-self/fail-nth\x00', &(0x7f00000001c0), &(0x7f00000002c0)='./proc\x00', 0x7, 0x0) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040814) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "d74edd8242a12aea204d9b3c153a22af"}) executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) ioctl$USBDEVFS_GETDRIVER(r1, 0xbb04, 0x0) r2 = syz_ublk_setup_io_uring(0x1e4, &(0x7f0000000040)={0x0, 0xadf1, 0x0, 0x0, 0x4}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000380)={0xc, 0x6, 0x6, 0xd}) r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000280)={0x2e, 0x56, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x400, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x2, 0x67d, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x14}}}, &(0x7f0000000340)) r7 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) keyctl$clear(0x7, 0x0) ptrace(0x10, r12) tgkill(r12, r12, 0x5) ptrace$peeksig(0x4209, r12, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') fspick(r13, &(0x7f0000000000)='./file0\x00', 0x1) write$selinux_user(r13, 0x0, 0x0) syz_io_uring_submit$UBLK(r3, r7, r11, &(0x7f00000016c0)=@ublk_io_cmd_sqes={0x2e, 0x41, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x0, '\x00', @fetch_req_cmd={0x3, 0x77d, 0x0, &(0x7f00000006c0)=@buf_512="02c6202dc857705992cfa28a3d07daba556fb43cd6a43a6a03e4306af3b14ed93000b61629b50307c02f8bf3b37c26f4581264fa9f6b9785e9953050615140638af5f54bcd969970871dbb6ac77fd73f1c5b9a3b1475fa4af501e7d69d020603cc680ab7ff96f2902ce51523cef51481d77f90c25024738b115c64b435a846858352ec4a2014dcbbdec289f7663ec06aa00d837c330ae6a47db1dc9ca22d5f3b84ef30a274b3b0b091377e09f8e7530c21ee75d4fed053c99a095d2ffaa2d75ef56d9e214a0821b5429cf39407c992f56e7bab90283f61e598e0396d6a6bde8d0a68851daeae73a831759987df29f2dd17e08959c08813839fb454aa75ed55c7bd291c3e178135d3bebd8f9600f9a51a56fc69632c8cdb24b79a3445d6675239239350c0a820391e74263a2a572a5ba02513c891a2f128a2c0afc7fef22c3c5fffd8dd0fa0d48c000147a69baaa978e2ae069a1709932282f6c261c56fdc5919b1ddede36f9d28ac6b2822604665a1f18c67bbf16d82d106058fae2ec8931f8176782fabfe59414494690324d510e0921c2138b7019b33064eb0242c929a4fce5265ecff762f87e923d392e9bac8229ba7a2c9ebdf8b55fbecd3190de86a1070f9ddbd339df7a23cb727ccd17dd7c0fda464031936bb7773d90ad1976b2906e28c087d3edbdf51449b3a8c35213bee21fc6c1026834bc6e96c9cc7137f3b5066"}}) syz_open_dev$ublk_chdev(&(0x7f00000001c0), r6, 0x802) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r14, 0x0, 0x13, &(0x7f00000002c0)=0x2, 0x4) sendto$inet(r14, &(0x7f0000000000)="b695", 0xfdef, 0x40, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) readv(r14, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000700)=""/205, 0xcd}], 0x2) r15 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r15, 0x0, r16, 0x0, 0xf3a, 0x0) ioctl$SIOCSIFMTU(r16, 0x8930, &(0x7f0000000140)={'vlan0\x00', 0xc}) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2c40, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r3, 0xc004ae0a, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01000000000000000000001900000100000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r6, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7c}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5819}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfd}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xdc}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x48000}, 0x0) executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000003d40)=""/4052, 0xfd4}, {&(0x7f00000000c0)=""/205, 0xcd}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000ac0)=""/246, 0xf6}, {&(0x7f0000000380)=""/286, 0x11e}, {&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f00000001c0)=""/257, 0x101}, {&(0x7f00000007c0)=""/129, 0x81}], 0x8}, 0x72}, {{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x1f74}, {{0x0, 0x0, 0x0}, 0xe91}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x9c7000}, {{0x0, 0x0, 0x0}, 0xe4f}], 0x7, 0x0, 0x0) r1 = timerfd_create(0x9, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, 0x0, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000440)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1) fcntl$dupfd(r0, 0x0, r1) executing program 33: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000003d40)=""/4052, 0xfd4}, {&(0x7f00000000c0)=""/205, 0xcd}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000ac0)=""/246, 0xf6}, {&(0x7f0000000380)=""/286, 0x11e}, {&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f00000001c0)=""/257, 0x101}, {&(0x7f00000007c0)=""/129, 0x81}], 0x8}, 0x72}, {{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x1f74}, {{0x0, 0x0, 0x0}, 0xe91}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x9c7000}, {{0x0, 0x0, 0x0}, 0xe4f}], 0x7, 0x0, 0x0) r1 = timerfd_create(0x9, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, 0x0, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000440)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1) fcntl$dupfd(r0, 0x0, r1) executing program 5: socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000008700"/88, 0x58) executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109240, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0xc144f000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000859000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x40, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x400000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1, 0x1, 0x2}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7}}, 0xe4) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000840)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00210000000000180000000700000073000000000000000a0005"], 0x28}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) shutdown(r4, 0x1) setsockopt$inet_int(r4, 0x0, 0x0, &(0x7f0000000180)=0x8, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x40, 0x80) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r6, 0x80045439, 0x40bea7b87a0000) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="247766644b8d046e37e62c82a376ceda6af806b43dbc5d2f3d", @ANYRESHEX=r5, @ANYBLOB=',\x00']) executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2c40, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r3, 0xc004ae0a, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01000000000000000000000001000100000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r6, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7c}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5819}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfd}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xdc}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x48000}, 0x0) executing program 5: setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff0200000000000000000000002b0001"], 0xffe) executing program 5: sched_setscheduler(0x0, 0x1, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0xd) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xac776000) (rerun: 32) capset(&(0x7f0000000040)={0x20071026}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32) r2 = dup(r0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) (rerun: 32) ioctl(r3, 0x40104d09, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'batadv0\x00', @multicast}) (async) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x141000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, 0x0) r8 = fsmount(r4, 0x0, 0x4) r9 = openat$cgroup_ro(r8, &(0x7f0000001200)='cgroup.stat\x00', 0x5000000, 0x0) readv(r9, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4080, 0xff0}], 0x1) (async) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x2, 0x0, 0x10001, 0x0}) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000000c0)=0x4) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x113003, 0x488) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack\x00') read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x2, 0x0, 0x1200002, 0x2}]}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x6e0, 0x0, 0x80000100000}]}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7ff00000) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) executing program 34: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000000c0)=0x4) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x113003, 0x488) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack\x00') read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x2, 0x0, 0x1200002, 0x2}]}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x6e0, 0x0, 0x80000100000}]}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7ff00000) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r0, 0x4068aea3, &(0x7f0000000240)={0xcc, 0x0, 0xfffffffffffffffd}) executing program 3: socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000800e00"/88, 0x58) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./dev/sda1\x00', &(0x7f00000004c0), 0x8488, &(0x7f0000000500)={[{@redirect_dir_on}, {@index_on}, {@index_on}, {@metacopy_off}], [{@obj_role={'obj_role', 0x3d, '.'}}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @private, @broadcast}, &(0x7f0000000140)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x6, 0xc, 0x44, @loopback, @private0, 0x7800, 0x20, 0x78e618a6}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) executing program 3: r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f0000000180)="727a73408b202e2f66696c65303a30", 0xf) write(r0, &(0x7f0000000400)="a399d7e4ad784ee25b5ef02167c690cdd3bfbf2859ee528df869afb8a34dfc", 0x1f) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8ab43, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', r1, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001a662ca40fd07040034860000000109021200000000007f0904800000ff"], 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd30, 0x25dfdbfe}, 0x14}, 0x1, 0xa00}, 0x400d4) executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x50, &(0x7f0000002900)=0x659c, 0x4) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004804}, 0x8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x460800, 0x81) mkdirat(r3, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x1, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x3, [], [{{0x9, 0x5, 0xb, 0x3, 0xe96f8b4bdad37473, 0xc7, 0x7, 0x8, {0x4}}}]}}}}}]}}, 0x0) executing program 35: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x50, &(0x7f0000002900)=0x659c, 0x4) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004804}, 0x8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x460800, 0x81) mkdirat(r3, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x1, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x3, [], [{{0x9, 0x5, 0xb, 0x3, 0xe96f8b4bdad37473, 0xc7, 0x7, 0x8, {0x4}}}]}}}}}]}}, 0x0) executing program 6: setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc81100fe8000000000000000000000000000aaff02000000000000000000000000f501"], 0xffe) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./dev/sda1\x00', &(0x7f00000004c0), 0x8488, &(0x7f0000000500)={[{@redirect_dir_on}, {@index_on}, {@index_on}, {@metacopy_off}], [{@obj_role={'obj_role', 0x3d, '.'}}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) write$vga_arbiter(r0, 0x0, 0xff19) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @private, @broadcast}, &(0x7f0000000140)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x6, 0xc, 0x44, @loopback, @private0, 0x7800, 0x20, 0x78e618a6}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x2c, r1, 0x153071c8480be749, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x5, 0x4) socket$inet(0x2, 0x2, 0x0) executing program 6: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000401"], 0xffe) executing program 6: setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff0200000000000000000000f5000001"], 0xffe) executing program 36: setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff0200000000000000000000f5000001"], 0xffe) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd30, 0x25dfdbfe}, 0x14}, 0x1, 0x1f000000}, 0x400d4) executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0xfffffffe, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) waitid(0x2, 0x0, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x400000b4, 0x0, 0x7}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x40) unshare(0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r3, 0x20000) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x32, 0x8b, 0x26, 0x20, 0x2357, 0x601, 0x3fae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x8, 0xf0, 0x7, "", [{{0x9, 0x4, 0x12, 0x8, 0x0, 0xff, 0xff, 0x0, 0xe}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002180)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x2000, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x13, 0x1, 0x0, 0x25dfdbff, {0x7}}, 0x14}}, 0x20000000) executing program 7: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff02000000000084ffffffffffffff01"], 0xffe) executing program 0: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f00000007c0)={0x1f, 0x3f, @any, 0x4}, 0xe) ioctl$KVM_NMI(r2, 0xae9a) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x1, 0x4, 0x7, 0x3, 0x40}, 0xc) readv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/98, 0x62}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRESOCT=r4], 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030400000004030a28f1e54c2dcbf1a440"]}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22040c}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x1000c800}, 0x4000000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="20020000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fcdbdf250a000000440004800900010073797a30000000001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00000900010073797a31000000004800018044000400200001000a004e210000040100008000000000000000ffffac1e010104000000200002000a004e240000df00fc01000000000000000000000000000104001d00740004804400078008000200a21000000800030008000000080002005bd800000800020002000000080001001e0000000800030080000000080001001100000008000200a40000001300010062726f6164636173742d8d62d85c31"], 0x220}}, 0x80c0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = ioctl$KVM_GET_STATS_FD_cpu(r11, 0xaece) read$FUSE(r12, 0x0, 0x0) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r13, &(0x7f0000000040)={0x24, @long={0x3, 0xfffc, {0xaaaaaaaaaaaa0102}}}, 0x52) connect$802154_dgram(r13, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x2c, r1, 0x153071c8480be749, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}, 0x7ffffffe, 0x0, 0x0, 0x48800}, 0x40000) executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, {0x0, 0xa00, 0x40800000000000, 0x800000000200002}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x202, 0x4, 0x3, 0x0, 0x0, 0x6}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000ac1e0001000000000000000000000000fe80000000000000000000000000002000000a00000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ffffffff000000000000000000000000fe8000000000000006000000000008bbe0000001000000000000000000000000200100000000000000000000000000003c04000002"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 2: socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00000000000000000000000000000000ffffffffffffffef00"/88, 0x58) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) executing program 0: socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000ffffffffffffffef00"/88, 0x58) executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84) io_setup(0x10000, &(0x7f0000001080)=0x0) io_submit(r1, 0x1, &(0x7f00000010c0)=[&(0x7f0000000240)={0x0, 0x0, 0xe4, 0x1, 0xfffc, r0, 0x0, 0x0, 0x600}]) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_cancel(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x4, r2, &(0x7f00000002c0)="c41de9eb0eca816015da5ea7c37b0906f3dffdaee1ff93863ade92cb3ea139aa1fe95cba81352148c9b0ffdd52d77f7d90fd8bf61ce84900d07989c516ce2b45fe13d816f9633f096494df5ef01497212c94f6d8a21da4166fc8c13aa638f78fec12a83efba505f88ef40858fa7dd4bb159bea4fb66ecb1da1d40ae6794f421d28404bbe03c0ef0bdf9d18554c592eb584a75ae720ed62d6fdcfcf962eb41d07366483da60da0c89ffbce5f781ee39c1ecf72eb1999b8f34ccc279f662e58aa3af97183262cf3084bfbbe7f0222722066b4a66cace04b4d14c2f9b6c06979e6b3616bb7b95aca2f8482cf582018305", 0xef, 0x47, 0x0, 0x2, r0}, &(0x7f0000000400)) openat$zero(0xffffffffffffff9c, 0x0, 0x80c42, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x4, @thr={&(0x7f0000000780)="ce57de0f4e2d6458d367b09e1b62ae858db21e141e086cab72078ffc4b6d1b372851bd61e2d439f5db4eab276bd0aed3044bdc75bc2e94a80db2526b25f7ce0165a88304582ae249ca944a04d02eff788bb354829476204a949bfcb549af8e39064fc402e18027478cae92c93a6a5d0803f817b0b823d94f9e1d7ca064e43ec5aedc51c7d71936c018b1cdf757d259b3cb1ce48b69aeda0a4b488f81e936fef369d9f4613e0efc8c32324788cc49208eb7c048600f216885dbd0d19d3abc52c71c7d", &(0x7f0000000880)="8892e8ba0a223ca38f017998ba6533998006620d80cdd3c58da58843328a54820137f71e01cd845dd6"}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = epoll_create1(0x80000) epoll_pwait(r4, 0x0, 0x0, 0x81, 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r5) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r6, 0x0, 0x600}, &(0x7f00000008c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d6d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0154646341bdc3a5a083908aa1eb6caf55aa7094e9c450f0a3ecf95a44c7caefff6df5637a3a717eaec415174842d6cac224aa448dce247f5fb5921b8441fd7b4838d24a13d02953b45f3df7015c8c734fc57e6d275502f34bd2285ef1129ccc1e28ae0ff1c80b83179172a566b2a7bc1f777b0fd94a636233df1ae74d40c9071d347fb47b91154f767bd8a8f7657a158035e13dc8b7800babdff0252836ec3afee53d986084f"], 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x3) r7 = socket(0xa, 0x3, 0x87) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r8) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="e50a2bbd7000fbdbdf25210000000c00018008000104", @ANYRES32=r11, @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x4004891}, 0x4c010) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@empty, 0x22, r12}) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x8936, &(0x7f0000000000)) r13 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') pread64(r13, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x901800, 0x0) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}, {0x3, &(0x7f0000000140)=0x3, 0x2}], 0x2, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) r14 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r14, 0x4068aea3, &(0x7f0000000240)={0xb6, 0x0, 0xfffffffffffffffd}) executing program 7: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r2, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x4) pipe2$9p(&(0x7f0000000000), 0x80) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000140)={0x2, {{0xa, 0x4e21, 0x80000001, @mcast2, 0x4f1}}, {{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x35}}}, 0x108) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r3, 0x8f6, 0xb) syz_usb_connect_ath9k(0x3, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e402, [{{0x9, 0x2, 0xfffffffffffffc3f}}]}}, 0x7fe782539b0b) executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "d7d515477e4f57ea6a5f8cde99112acbaaac1a0b1d6682efea1bd40b9b5b7ef17ed5435de8c03222aed444e56068d11c113a3021768f2fca1bd376f3c35c98fb", 0x1c}, 0x48, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = getpid() r5 = gettid() rt_tgsigqueueinfo(r4, r5, 0x1f, &(0x7f0000000080)={0x0, 0x10, 0x2}) r6 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r6, &(0x7f0000000740)=""/377, 0x179) close(r0) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002180)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffff0700", 0x2000, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @multicast2, 0x1f, 0x9}}) sendto$inet(r0, &(0x7f0000000040), 0xffffffffffffff53, 0x404e, 0x0, 0x0) executing program 7: r0 = syz_usb_connect$uac2(0x2, 0x9f, &(0x7f00000018c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0xda, 0x20, 0x8f, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x7f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x6, 0x405, 0xf6, 0x4, 0x0, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x2, 0x8}, @as_header={0x10, 0x24, 0x1, 0x6, 0xff, 0x2, 0x4, 0x40, 0x200, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf0, 0x3, 0x6, {0x8, 0x25, 0x1, 0x2, 0x33, 0x3, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x6, 0x40, {0x8, 0x25, 0x1, 0x0, 0x33, 0xc0, 0x3}}}}}}}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac1(0x3, 0xd7, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x145, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x2, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x59}, [@mixer_unit={0xb, 0x24, 0x4, 0x4, 0x80, "9935fd3fb94d"}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0xc, 0x5, "b35f895cd8"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x305, 0x5, 0x6, 0x2}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x1, 0x3, [0x6, 0x2, 0x1], 0xfc}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x5, 0x6, [0x5, 0x8, 0x3, 0xc, 0x8, 0x2], 0x3}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x6, 0x4, [0x8, 0x2, 0x9, 0x5], 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xed}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x5, 0x1, {0x7, 0x25, 0x1, 0x4, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x4, 0x0, 0x4, "83602d4d15e770"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x59, 0x80, 0x81, {0x7, 0x25, 0x1, 0x8, 0x5, 0xabbb}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0x0, 0x56, 0x8, 0xff, 0x7}, 0x120, &(0x7f0000000540)={0x5, 0xf, 0x120, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x6, 0xd}, @generic={0xef, 0x10, 0x2, "a3e0a7df67cc3d300fa0ec30a9f49bad45c41ed9975c741e17f0b1b4fedaa8244ab9e646bcaf2817b24b53f12780b46da9cede6ae86816d700582d4e6166d9f6d1e93bc123be7ffa4fbedf7206da38997758f65bd78b42ac67f22882ef2c522fce2ed0e69635e50cd70e980e03fb4ae63f1ea0ef4341040301f84a2e52c163ca455c8a6abc032d3962a0f9cb22adf600537cee8c9ca82ce6d6dd1545b419806955ee84a65889f3e24842fbfe9557025df164a3b1eb6d0d5f3894ad773d29b1efac3fe2532330c51476830f2a2f3d63fb6b8c0c630f622016f6fa0740103a2de9fb32d41ec783319f2b342f53"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "68f060770b3da7f6e351432475a05f64"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7, 0xf8, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x3, 0x2}]}, 0x4, [{0x5f, &(0x7f0000000680)=@string={0x5f, 0x3, "313f1f8d7adf924bf31d074ded1a2fc4abe2f263c879dc1724499c9457187f073890cf2685253e03a54adb13228e8eac183e24924a4cb980aa62999ebbe4f769b10948d8521985b93b5b98ac62080ac30c997e84f38b9c053777ebe802"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x43e}}, {0xed, &(0x7f0000000740)=@string={0xed, 0x3, "12575b71c411902cbeb3b556a486e530b1bf4218ce857f01f5d5572095a923a2542786135f46a0ab9b6dbe5ce471532cd4d835b7af6937684efd8b63a370446942073a7ee210ac9a56285455f7ab74072bd4f09550122e2f8694071227454895423f1bd30edb371a243f74eb1ea1b8080af10e7c9ce2d13239a8617ab07af1389e859aefcc1ff58fbe8887aea63bbceb0bd18731040588262f81eccfe240c0e37ab6285b2f895f0da40f978f16884e5e0692e049361630641ce60d31df151cbdbe04b168d288281ff3683ac4c1336a02227ee1378840a67f5ecd3dfe3a6f977267f01e49c6d39743bda330"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x816}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc013fd03, &(0x7f0000001000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl(r1, 0xc013fd04, &(0x7f0000003000)="04000000000000000000000038010000380100000000000000000000000000003200000000000000000000000000000070") sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x2c, 0x17, [0x0, 0x5, 0x53, 0xc, 0xfffffffb, 0xfff, 0x348, 0x9, 0x7ba62318, 0x81]}]}, 0x50}, 0x1, 0x0, 0x0, 0x845}, 0x20000000) (async) syz_usb_control_io$uac2(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x10, 0x76, {0x76, 0x23, "1f9593e715edb222651c4de4ed7cb2bd1975419325117a69bf2d60379ec7ff783668df7d12ec0f3e9c309d68622fe23b348a2818ba16f460123b220fe86128ecd25473cacaea9e3eeb2e08ee5132c0840f2b6aa0f843782958fbbf8e0ec5f34cef7fc9d1ddfe05228dc83ddc5391151c05856beb"}}, &(0x7f0000000080)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "a5bab6c512e03bae587c148aba78f2d1425bffde97368c28d9bed116"}}}, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x20, 0xc, 0xb1, "b2c5cb3e67da213ffe303ba406f5e9313555a24a2d201a6ea7ddf83e83de12f91bc953a2c44dac9e67e287727b564e3843f2b44b1a1de273d38a67dd53f3d0fc44b3757e9915ff160a25b2a1d95e64a3edba0feddc5374170723651a6a90a07b66e690dd858b086b6bfdb5a1df46d703e62efabeb4aba577bcd314a5b202b2de97c92b52956a88e570f10339f6162cd0ea1d8b930b6dac715ab839526d43bf32835507b101cf095d02b4910cd11fec62f0"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xe0}, &(0x7f0000000240)={0x20, 0x81, 0x1, "c9"}, &(0x7f0000000280)={0x20, 0x82, 0x1, 's'}, &(0x7f00000002c0)={0x20, 0x83, 0x1, 'a'}, &(0x7f0000000300)={0x20, 0x84, 0x3, "edfd5a"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "8f2865"}}) executing program 2: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/dynamic_events\x00', 0x40000, 0x0) read(r5, &(0x7f0000000200)=""/256, 0x24) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = syz_io_uring_setup(0x75e7, &(0x7f0000000480)={0x0, 0x7210, 0x2, 0x1, 0x1cb}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) syz_io_uring_submit$UBLK(0x0, r4, r9, 0x0) syz_ublk_add_dev(r8, 0x0, r4, r9, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r3, r7, &(0x7f0000000040)={0x0, 0x6a36, 0x40000, 0x1, 0x40}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa9d8, 0x10000, 0x2, 0x193, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe98a, 0x400, 0x2, 0x2e2, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3428, 0x80, 0x2, 0x2ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd1e3, 0x2, 0x0, 0x1d, 0x0, r11}}], 0x4, &(0x7f0000002dc0)={0x2e, 0x0, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xeba}, 0x0, r6, '\x00', {0x0, 0x2ac, 0x0, &(0x7f0000001dc0)=@buf_4k="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"}}, &(0x7f0000002e40)) syz_ublk_setup_queues(r12, r7, &(0x7f0000000180)={0x0, 0x6569, 0x0, 0x1, 0x38c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7333, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x40000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) program crashed: SYZFAIL: posix_spawnp failed bisect: bisecting 59 programs bisect: split chunks (needed=false): <59> bisect: split chunk #0 of len 59 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 2, 20, 17, 19, 3, 13, 13, 7, 17, 3, 30, 8, 7, 7, 6, 6, 3, 2, 13, 6, 2, 2, 8, 30, 3, 4, 21, 6, 20, 30, 12, 17, 6, 2, 7, 7, 21, 6] detailed listing: executing program 34: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000000c0)=0x4) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x113003, 0x488) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack\x00') read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x2, 0x0, 0x1200002, 0x2}]}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x6e0, 0x0, 0x80000100000}]}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7ff00000) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r0, 0x4068aea3, &(0x7f0000000240)={0xcc, 0x0, 0xfffffffffffffffd}) executing program 3: socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000800e00"/88, 0x58) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./dev/sda1\x00', &(0x7f00000004c0), 0x8488, &(0x7f0000000500)={[{@redirect_dir_on}, {@index_on}, {@index_on}, {@metacopy_off}], [{@obj_role={'obj_role', 0x3d, '.'}}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @private, @broadcast}, &(0x7f0000000140)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x6, 0xc, 0x44, @loopback, @private0, 0x7800, 0x20, 0x78e618a6}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) executing program 3: r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f0000000180)="727a73408b202e2f66696c65303a30", 0xf) write(r0, &(0x7f0000000400)="a399d7e4ad784ee25b5ef02167c690cdd3bfbf2859ee528df869afb8a34dfc", 0x1f) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8ab43, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', r1, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001a662ca40fd07040034860000000109021200000000007f0904800000ff"], 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd30, 0x25dfdbfe}, 0x14}, 0x1, 0xa00}, 0x400d4) executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x50, &(0x7f0000002900)=0x659c, 0x4) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004804}, 0x8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x460800, 0x81) mkdirat(r3, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x1, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x3, [], [{{0x9, 0x5, 0xb, 0x3, 0xe96f8b4bdad37473, 0xc7, 0x7, 0x8, {0x4}}}]}}}}}]}}, 0x0) executing program 35: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x50, &(0x7f0000002900)=0x659c, 0x4) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004804}, 0x8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x460800, 0x81) mkdirat(r3, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x1, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x3, [], [{{0x9, 0x5, 0xb, 0x3, 0xe96f8b4bdad37473, 0xc7, 0x7, 0x8, {0x4}}}]}}}}}]}}, 0x0) executing program 6: setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc81100fe8000000000000000000000000000aaff02000000000000000000000000f501"], 0xffe) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./dev/sda1\x00', &(0x7f00000004c0), 0x8488, &(0x7f0000000500)={[{@redirect_dir_on}, {@index_on}, {@index_on}, {@metacopy_off}], [{@obj_role={'obj_role', 0x3d, '.'}}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) write$vga_arbiter(r0, 0x0, 0xff19) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @private, @broadcast}, &(0x7f0000000140)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x6, 0xc, 0x44, @loopback, @private0, 0x7800, 0x20, 0x78e618a6}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x2c, r1, 0x153071c8480be749, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x5, 0x4) socket$inet(0x2, 0x2, 0x0) executing program 6: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000401"], 0xffe) executing program 6: setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff0200000000000000000000f5000001"], 0xffe) executing program 36: setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff0200000000000000000000f5000001"], 0xffe) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd30, 0x25dfdbfe}, 0x14}, 0x1, 0x1f000000}, 0x400d4) executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0xfffffffe, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) waitid(0x2, 0x0, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x400000b4, 0x0, 0x7}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x40) unshare(0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r3, 0x20000) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x32, 0x8b, 0x26, 0x20, 0x2357, 0x601, 0x3fae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x8, 0xf0, 0x7, "", [{{0x9, 0x4, 0x12, 0x8, 0x0, 0xff, 0xff, 0x0, 0xe}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002180)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x2000, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x13, 0x1, 0x0, 0x25dfdbff, {0x7}}, 0x14}}, 0x20000000) executing program 7: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff02000000000084ffffffffffffff01"], 0xffe) executing program 0: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f00000007c0)={0x1f, 0x3f, @any, 0x4}, 0xe) ioctl$KVM_NMI(r2, 0xae9a) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x1, 0x4, 0x7, 0x3, 0x40}, 0xc) readv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/98, 0x62}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRESOCT=r4], 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030400000004030a28f1e54c2dcbf1a440"]}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22040c}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x1000c800}, 0x4000000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="20020000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fcdbdf250a000000440004800900010073797a30000000001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00000900010073797a31000000004800018044000400200001000a004e210000040100008000000000000000ffffac1e010104000000200002000a004e240000df00fc01000000000000000000000000000104001d00740004804400078008000200a21000000800030008000000080002005bd800000800020002000000080001001e0000000800030080000000080001001100000008000200a40000001300010062726f6164636173742d8d62d85c31"], 0x220}}, 0x80c0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = ioctl$KVM_GET_STATS_FD_cpu(r11, 0xaece) read$FUSE(r12, 0x0, 0x0) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r13, &(0x7f0000000040)={0x24, @long={0x3, 0xfffc, {0xaaaaaaaaaaaa0102}}}, 0x52) connect$802154_dgram(r13, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x2c, r1, 0x153071c8480be749, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}, 0x7ffffffe, 0x0, 0x0, 0x48800}, 0x40000) executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, {0x0, 0xa00, 0x40800000000000, 0x800000000200002}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x202, 0x4, 0x3, 0x0, 0x0, 0x6}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000ac1e0001000000000000000000000000fe80000000000000000000000000002000000a00000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ffffffff000000000000000000000000fe8000000000000006000000000008bbe0000001000000000000000000000000200100000000000000000000000000003c04000002"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 2: socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00000000000000000000000000000000ffffffffffffffef00"/88, 0x58) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) executing program 0: socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000ffffffffffffffef00"/88, 0x58) executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84) io_setup(0x10000, &(0x7f0000001080)=0x0) io_submit(r1, 0x1, &(0x7f00000010c0)=[&(0x7f0000000240)={0x0, 0x0, 0xe4, 0x1, 0xfffc, r0, 0x0, 0x0, 0x600}]) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_cancel(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x4, r2, &(0x7f00000002c0)="c41de9eb0eca816015da5ea7c37b0906f3dffdaee1ff93863ade92cb3ea139aa1fe95cba81352148c9b0ffdd52d77f7d90fd8bf61ce84900d07989c516ce2b45fe13d816f9633f096494df5ef01497212c94f6d8a21da4166fc8c13aa638f78fec12a83efba505f88ef40858fa7dd4bb159bea4fb66ecb1da1d40ae6794f421d28404bbe03c0ef0bdf9d18554c592eb584a75ae720ed62d6fdcfcf962eb41d07366483da60da0c89ffbce5f781ee39c1ecf72eb1999b8f34ccc279f662e58aa3af97183262cf3084bfbbe7f0222722066b4a66cace04b4d14c2f9b6c06979e6b3616bb7b95aca2f8482cf582018305", 0xef, 0x47, 0x0, 0x2, r0}, &(0x7f0000000400)) openat$zero(0xffffffffffffff9c, 0x0, 0x80c42, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x4, @thr={&(0x7f0000000780)="ce57de0f4e2d6458d367b09e1b62ae858db21e141e086cab72078ffc4b6d1b372851bd61e2d439f5db4eab276bd0aed3044bdc75bc2e94a80db2526b25f7ce0165a88304582ae249ca944a04d02eff788bb354829476204a949bfcb549af8e39064fc402e18027478cae92c93a6a5d0803f817b0b823d94f9e1d7ca064e43ec5aedc51c7d71936c018b1cdf757d259b3cb1ce48b69aeda0a4b488f81e936fef369d9f4613e0efc8c32324788cc49208eb7c048600f216885dbd0d19d3abc52c71c7d", &(0x7f0000000880)="8892e8ba0a223ca38f017998ba6533998006620d80cdd3c58da58843328a54820137f71e01cd845dd6"}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = epoll_create1(0x80000) epoll_pwait(r4, 0x0, 0x0, 0x81, 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r5) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r6, 0x0, 0x600}, &(0x7f00000008c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d6d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0154646341bdc3a5a083908aa1eb6caf55aa7094e9c450f0a3ecf95a44c7caefff6df5637a3a717eaec415174842d6cac224aa448dce247f5fb5921b8441fd7b4838d24a13d02953b45f3df7015c8c734fc57e6d275502f34bd2285ef1129ccc1e28ae0ff1c80b83179172a566b2a7bc1f777b0fd94a636233df1ae74d40c9071d347fb47b91154f767bd8a8f7657a158035e13dc8b7800babdff0252836ec3afee53d986084f"], 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x3) r7 = socket(0xa, 0x3, 0x87) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r8) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="e50a2bbd7000fbdbdf25210000000c00018008000104", @ANYRES32=r11, @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x4004891}, 0x4c010) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@empty, 0x22, r12}) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x8936, &(0x7f0000000000)) r13 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') pread64(r13, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x901800, 0x0) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}, {0x3, &(0x7f0000000140)=0x3, 0x2}], 0x2, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) r14 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r14, 0x4068aea3, &(0x7f0000000240)={0xb6, 0x0, 0xfffffffffffffffd}) executing program 7: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r2, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x4) pipe2$9p(&(0x7f0000000000), 0x80) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000140)={0x2, {{0xa, 0x4e21, 0x80000001, @mcast2, 0x4f1}}, {{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x35}}}, 0x108) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r3, 0x8f6, 0xb) syz_usb_connect_ath9k(0x3, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e402, [{{0x9, 0x2, 0xfffffffffffffc3f}}]}}, 0x7fe782539b0b) executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "d7d515477e4f57ea6a5f8cde99112acbaaac1a0b1d6682efea1bd40b9b5b7ef17ed5435de8c03222aed444e56068d11c113a3021768f2fca1bd376f3c35c98fb", 0x1c}, 0x48, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = getpid() r5 = gettid() rt_tgsigqueueinfo(r4, r5, 0x1f, &(0x7f0000000080)={0x0, 0x10, 0x2}) r6 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r6, &(0x7f0000000740)=""/377, 0x179) close(r0) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002180)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffff0700", 0x2000, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @multicast2, 0x1f, 0x9}}) sendto$inet(r0, &(0x7f0000000040), 0xffffffffffffff53, 0x404e, 0x0, 0x0) executing program 7: r0 = syz_usb_connect$uac2(0x2, 0x9f, &(0x7f00000018c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0xda, 0x20, 0x8f, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x7f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x6, 0x405, 0xf6, 0x4, 0x0, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x2, 0x8}, @as_header={0x10, 0x24, 0x1, 0x6, 0xff, 0x2, 0x4, 0x40, 0x200, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf0, 0x3, 0x6, {0x8, 0x25, 0x1, 0x2, 0x33, 0x3, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x6, 0x40, {0x8, 0x25, 0x1, 0x0, 0x33, 0xc0, 0x3}}}}}}}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac1(0x3, 0xd7, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x145, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x2, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x59}, [@mixer_unit={0xb, 0x24, 0x4, 0x4, 0x80, "9935fd3fb94d"}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0xc, 0x5, "b35f895cd8"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x305, 0x5, 0x6, 0x2}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x1, 0x3, [0x6, 0x2, 0x1], 0xfc}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x5, 0x6, [0x5, 0x8, 0x3, 0xc, 0x8, 0x2], 0x3}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x6, 0x4, [0x8, 0x2, 0x9, 0x5], 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xed}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x5, 0x1, {0x7, 0x25, 0x1, 0x4, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x4, 0x0, 0x4, "83602d4d15e770"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x59, 0x80, 0x81, {0x7, 0x25, 0x1, 0x8, 0x5, 0xabbb}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0x0, 0x56, 0x8, 0xff, 0x7}, 0x120, &(0x7f0000000540)={0x5, 0xf, 0x120, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x6, 0xd}, @generic={0xef, 0x10, 0x2, "a3e0a7df67cc3d300fa0ec30a9f49bad45c41ed9975c741e17f0b1b4fedaa8244ab9e646bcaf2817b24b53f12780b46da9cede6ae86816d700582d4e6166d9f6d1e93bc123be7ffa4fbedf7206da38997758f65bd78b42ac67f22882ef2c522fce2ed0e69635e50cd70e980e03fb4ae63f1ea0ef4341040301f84a2e52c163ca455c8a6abc032d3962a0f9cb22adf600537cee8c9ca82ce6d6dd1545b419806955ee84a65889f3e24842fbfe9557025df164a3b1eb6d0d5f3894ad773d29b1efac3fe2532330c51476830f2a2f3d63fb6b8c0c630f622016f6fa0740103a2de9fb32d41ec783319f2b342f53"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "68f060770b3da7f6e351432475a05f64"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7, 0xf8, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x3, 0x2}]}, 0x4, [{0x5f, &(0x7f0000000680)=@string={0x5f, 0x3, "313f1f8d7adf924bf31d074ded1a2fc4abe2f263c879dc1724499c9457187f073890cf2685253e03a54adb13228e8eac183e24924a4cb980aa62999ebbe4f769b10948d8521985b93b5b98ac62080ac30c997e84f38b9c053777ebe802"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x43e}}, {0xed, &(0x7f0000000740)=@string={0xed, 0x3, "12575b71c411902cbeb3b556a486e530b1bf4218ce857f01f5d5572095a923a2542786135f46a0ab9b6dbe5ce471532cd4d835b7af6937684efd8b63a370446942073a7ee210ac9a56285455f7ab74072bd4f09550122e2f8694071227454895423f1bd30edb371a243f74eb1ea1b8080af10e7c9ce2d13239a8617ab07af1389e859aefcc1ff58fbe8887aea63bbceb0bd18731040588262f81eccfe240c0e37ab6285b2f895f0da40f978f16884e5e0692e049361630641ce60d31df151cbdbe04b168d288281ff3683ac4c1336a02227ee1378840a67f5ecd3dfe3a6f977267f01e49c6d39743bda330"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x816}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc013fd03, &(0x7f0000001000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl(r1, 0xc013fd04, &(0x7f0000003000)="04000000000000000000000038010000380100000000000000000000000000003200000000000000000000000000000070") sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x2c, 0x17, [0x0, 0x5, 0x53, 0xc, 0xfffffffb, 0xfff, 0x348, 0x9, 0x7ba62318, 0x81]}]}, 0x50}, 0x1, 0x0, 0x0, 0x845}, 0x20000000) (async) syz_usb_control_io$uac2(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x10, 0x76, {0x76, 0x23, "1f9593e715edb222651c4de4ed7cb2bd1975419325117a69bf2d60379ec7ff783668df7d12ec0f3e9c309d68622fe23b348a2818ba16f460123b220fe86128ecd25473cacaea9e3eeb2e08ee5132c0840f2b6aa0f843782958fbbf8e0ec5f34cef7fc9d1ddfe05228dc83ddc5391151c05856beb"}}, &(0x7f0000000080)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "a5bab6c512e03bae587c148aba78f2d1425bffde97368c28d9bed116"}}}, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x20, 0xc, 0xb1, "b2c5cb3e67da213ffe303ba406f5e9313555a24a2d201a6ea7ddf83e83de12f91bc953a2c44dac9e67e287727b564e3843f2b44b1a1de273d38a67dd53f3d0fc44b3757e9915ff160a25b2a1d95e64a3edba0feddc5374170723651a6a90a07b66e690dd858b086b6bfdb5a1df46d703e62efabeb4aba577bcd314a5b202b2de97c92b52956a88e570f10339f6162cd0ea1d8b930b6dac715ab839526d43bf32835507b101cf095d02b4910cd11fec62f0"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xe0}, &(0x7f0000000240)={0x20, 0x81, 0x1, "c9"}, &(0x7f0000000280)={0x20, 0x82, 0x1, 's'}, &(0x7f00000002c0)={0x20, 0x83, 0x1, 'a'}, &(0x7f0000000300)={0x20, 0x84, 0x3, "edfd5a"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "8f2865"}}) executing program 2: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/dynamic_events\x00', 0x40000, 0x0) read(r5, &(0x7f0000000200)=""/256, 0x24) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = syz_io_uring_setup(0x75e7, &(0x7f0000000480)={0x0, 0x7210, 0x2, 0x1, 0x1cb}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) syz_io_uring_submit$UBLK(0x0, r4, r9, 0x0) syz_ublk_add_dev(r8, 0x0, r4, r9, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r3, r7, &(0x7f0000000040)={0x0, 0x6a36, 0x40000, 0x1, 0x40}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa9d8, 0x10000, 0x2, 0x193, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe98a, 0x400, 0x2, 0x2e2, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3428, 0x80, 0x2, 0x2ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd1e3, 0x2, 0x0, 0x1d, 0x0, r11}}], 0x4, &(0x7f0000002dc0)={0x2e, 0x0, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xeba}, 0x0, r6, '\x00', {0x0, 0x2ac, 0x0, &(0x7f0000001dc0)=@buf_4k="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"}}, &(0x7f0000002e40)) syz_ublk_setup_queues(r12, r7, &(0x7f0000000180)={0x0, 0x6569, 0x0, 0x1, 0x38c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7333, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x40000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) program crashed: SYZFAIL: posix_spawnp failed bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 2, 2, 8, 30, 3, 4, 21, 6, 20, 30, 12, 17, 6, 2, 7, 7, 21, 6] detailed listing: executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002180)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x2000, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x13, 0x1, 0x0, 0x25dfdbff, {0x7}}, 0x14}}, 0x20000000) executing program 7: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff02000000000084ffffffffffffff01"], 0xffe) executing program 0: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f00000007c0)={0x1f, 0x3f, @any, 0x4}, 0xe) ioctl$KVM_NMI(r2, 0xae9a) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x1, 0x4, 0x7, 0x3, 0x40}, 0xc) readv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/98, 0x62}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRESOCT=r4], 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030400000004030a28f1e54c2dcbf1a440"]}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22040c}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x1000c800}, 0x4000000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="20020000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fcdbdf250a000000440004800900010073797a30000000001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00000900010073797a31000000004800018044000400200001000a004e210000040100008000000000000000ffffac1e010104000000200002000a004e240000df00fc01000000000000000000000000000104001d00740004804400078008000200a21000000800030008000000080002005bd800000800020002000000080001001e0000000800030080000000080001001100000008000200a40000001300010062726f6164636173742d8d62d85c31"], 0x220}}, 0x80c0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = ioctl$KVM_GET_STATS_FD_cpu(r11, 0xaece) read$FUSE(r12, 0x0, 0x0) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r13, &(0x7f0000000040)={0x24, @long={0x3, 0xfffc, {0xaaaaaaaaaaaa0102}}}, 0x52) connect$802154_dgram(r13, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x2c, r1, 0x153071c8480be749, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}, 0x7ffffffe, 0x0, 0x0, 0x48800}, 0x40000) executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, {0x0, 0xa00, 0x40800000000000, 0x800000000200002}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x202, 0x4, 0x3, 0x0, 0x0, 0x6}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000ac1e0001000000000000000000000000fe80000000000000000000000000002000000a00000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ffffffff000000000000000000000000fe8000000000000006000000000008bbe0000001000000000000000000000000200100000000000000000000000000003c04000002"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 2: socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00000000000000000000000000000000ffffffffffffffef00"/88, 0x58) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) executing program 0: socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000ffffffffffffffef00"/88, 0x58) executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84) io_setup(0x10000, &(0x7f0000001080)=0x0) io_submit(r1, 0x1, &(0x7f00000010c0)=[&(0x7f0000000240)={0x0, 0x0, 0xe4, 0x1, 0xfffc, r0, 0x0, 0x0, 0x600}]) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_cancel(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x4, r2, &(0x7f00000002c0)="c41de9eb0eca816015da5ea7c37b0906f3dffdaee1ff93863ade92cb3ea139aa1fe95cba81352148c9b0ffdd52d77f7d90fd8bf61ce84900d07989c516ce2b45fe13d816f9633f096494df5ef01497212c94f6d8a21da4166fc8c13aa638f78fec12a83efba505f88ef40858fa7dd4bb159bea4fb66ecb1da1d40ae6794f421d28404bbe03c0ef0bdf9d18554c592eb584a75ae720ed62d6fdcfcf962eb41d07366483da60da0c89ffbce5f781ee39c1ecf72eb1999b8f34ccc279f662e58aa3af97183262cf3084bfbbe7f0222722066b4a66cace04b4d14c2f9b6c06979e6b3616bb7b95aca2f8482cf582018305", 0xef, 0x47, 0x0, 0x2, r0}, &(0x7f0000000400)) openat$zero(0xffffffffffffff9c, 0x0, 0x80c42, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x4, @thr={&(0x7f0000000780)="ce57de0f4e2d6458d367b09e1b62ae858db21e141e086cab72078ffc4b6d1b372851bd61e2d439f5db4eab276bd0aed3044bdc75bc2e94a80db2526b25f7ce0165a88304582ae249ca944a04d02eff788bb354829476204a949bfcb549af8e39064fc402e18027478cae92c93a6a5d0803f817b0b823d94f9e1d7ca064e43ec5aedc51c7d71936c018b1cdf757d259b3cb1ce48b69aeda0a4b488f81e936fef369d9f4613e0efc8c32324788cc49208eb7c048600f216885dbd0d19d3abc52c71c7d", &(0x7f0000000880)="8892e8ba0a223ca38f017998ba6533998006620d80cdd3c58da58843328a54820137f71e01cd845dd6"}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = epoll_create1(0x80000) epoll_pwait(r4, 0x0, 0x0, 0x81, 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r5) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r6, 0x0, 0x600}, &(0x7f00000008c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d6d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0154646341bdc3a5a083908aa1eb6caf55aa7094e9c450f0a3ecf95a44c7caefff6df5637a3a717eaec415174842d6cac224aa448dce247f5fb5921b8441fd7b4838d24a13d02953b45f3df7015c8c734fc57e6d275502f34bd2285ef1129ccc1e28ae0ff1c80b83179172a566b2a7bc1f777b0fd94a636233df1ae74d40c9071d347fb47b91154f767bd8a8f7657a158035e13dc8b7800babdff0252836ec3afee53d986084f"], 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x3) r7 = socket(0xa, 0x3, 0x87) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r8) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="e50a2bbd7000fbdbdf25210000000c00018008000104", @ANYRES32=r11, @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x4004891}, 0x4c010) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@empty, 0x22, r12}) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x8936, &(0x7f0000000000)) r13 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') pread64(r13, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x901800, 0x0) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}, {0x3, &(0x7f0000000140)=0x3, 0x2}], 0x2, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) r14 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r14, 0x4068aea3, &(0x7f0000000240)={0xb6, 0x0, 0xfffffffffffffffd}) executing program 7: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r2, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x4) pipe2$9p(&(0x7f0000000000), 0x80) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000140)={0x2, {{0xa, 0x4e21, 0x80000001, @mcast2, 0x4f1}}, {{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x35}}}, 0x108) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r3, 0x8f6, 0xb) syz_usb_connect_ath9k(0x3, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e402, [{{0x9, 0x2, 0xfffffffffffffc3f}}]}}, 0x7fe782539b0b) executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "d7d515477e4f57ea6a5f8cde99112acbaaac1a0b1d6682efea1bd40b9b5b7ef17ed5435de8c03222aed444e56068d11c113a3021768f2fca1bd376f3c35c98fb", 0x1c}, 0x48, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = getpid() r5 = gettid() rt_tgsigqueueinfo(r4, r5, 0x1f, &(0x7f0000000080)={0x0, 0x10, 0x2}) r6 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r6, &(0x7f0000000740)=""/377, 0x179) close(r0) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002180)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffff0700", 0x2000, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @multicast2, 0x1f, 0x9}}) sendto$inet(r0, &(0x7f0000000040), 0xffffffffffffff53, 0x404e, 0x0, 0x0) executing program 7: r0 = syz_usb_connect$uac2(0x2, 0x9f, &(0x7f00000018c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0xda, 0x20, 0x8f, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x7f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x6, 0x405, 0xf6, 0x4, 0x0, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x2, 0x8}, @as_header={0x10, 0x24, 0x1, 0x6, 0xff, 0x2, 0x4, 0x40, 0x200, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf0, 0x3, 0x6, {0x8, 0x25, 0x1, 0x2, 0x33, 0x3, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x6, 0x40, {0x8, 0x25, 0x1, 0x0, 0x33, 0xc0, 0x3}}}}}}}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac1(0x3, 0xd7, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x145, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x2, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x59}, [@mixer_unit={0xb, 0x24, 0x4, 0x4, 0x80, "9935fd3fb94d"}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0xc, 0x5, "b35f895cd8"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x305, 0x5, 0x6, 0x2}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x1, 0x3, [0x6, 0x2, 0x1], 0xfc}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x5, 0x6, [0x5, 0x8, 0x3, 0xc, 0x8, 0x2], 0x3}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x6, 0x4, [0x8, 0x2, 0x9, 0x5], 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xed}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x5, 0x1, {0x7, 0x25, 0x1, 0x4, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x4, 0x0, 0x4, "83602d4d15e770"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x59, 0x80, 0x81, {0x7, 0x25, 0x1, 0x8, 0x5, 0xabbb}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0x0, 0x56, 0x8, 0xff, 0x7}, 0x120, &(0x7f0000000540)={0x5, 0xf, 0x120, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x6, 0xd}, @generic={0xef, 0x10, 0x2, "a3e0a7df67cc3d300fa0ec30a9f49bad45c41ed9975c741e17f0b1b4fedaa8244ab9e646bcaf2817b24b53f12780b46da9cede6ae86816d700582d4e6166d9f6d1e93bc123be7ffa4fbedf7206da38997758f65bd78b42ac67f22882ef2c522fce2ed0e69635e50cd70e980e03fb4ae63f1ea0ef4341040301f84a2e52c163ca455c8a6abc032d3962a0f9cb22adf600537cee8c9ca82ce6d6dd1545b419806955ee84a65889f3e24842fbfe9557025df164a3b1eb6d0d5f3894ad773d29b1efac3fe2532330c51476830f2a2f3d63fb6b8c0c630f622016f6fa0740103a2de9fb32d41ec783319f2b342f53"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "68f060770b3da7f6e351432475a05f64"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7, 0xf8, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x3, 0x2}]}, 0x4, [{0x5f, &(0x7f0000000680)=@string={0x5f, 0x3, "313f1f8d7adf924bf31d074ded1a2fc4abe2f263c879dc1724499c9457187f073890cf2685253e03a54adb13228e8eac183e24924a4cb980aa62999ebbe4f769b10948d8521985b93b5b98ac62080ac30c997e84f38b9c053777ebe802"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x43e}}, {0xed, &(0x7f0000000740)=@string={0xed, 0x3, "12575b71c411902cbeb3b556a486e530b1bf4218ce857f01f5d5572095a923a2542786135f46a0ab9b6dbe5ce471532cd4d835b7af6937684efd8b63a370446942073a7ee210ac9a56285455f7ab74072bd4f09550122e2f8694071227454895423f1bd30edb371a243f74eb1ea1b8080af10e7c9ce2d13239a8617ab07af1389e859aefcc1ff58fbe8887aea63bbceb0bd18731040588262f81eccfe240c0e37ab6285b2f895f0da40f978f16884e5e0692e049361630641ce60d31df151cbdbe04b168d288281ff3683ac4c1336a02227ee1378840a67f5ecd3dfe3a6f977267f01e49c6d39743bda330"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x816}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc013fd03, &(0x7f0000001000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl(r1, 0xc013fd04, &(0x7f0000003000)="04000000000000000000000038010000380100000000000000000000000000003200000000000000000000000000000070") sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x2c, 0x17, [0x0, 0x5, 0x53, 0xc, 0xfffffffb, 0xfff, 0x348, 0x9, 0x7ba62318, 0x81]}]}, 0x50}, 0x1, 0x0, 0x0, 0x845}, 0x20000000) (async) syz_usb_control_io$uac2(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x10, 0x76, {0x76, 0x23, "1f9593e715edb222651c4de4ed7cb2bd1975419325117a69bf2d60379ec7ff783668df7d12ec0f3e9c309d68622fe23b348a2818ba16f460123b220fe86128ecd25473cacaea9e3eeb2e08ee5132c0840f2b6aa0f843782958fbbf8e0ec5f34cef7fc9d1ddfe05228dc83ddc5391151c05856beb"}}, &(0x7f0000000080)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "a5bab6c512e03bae587c148aba78f2d1425bffde97368c28d9bed116"}}}, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x20, 0xc, 0xb1, "b2c5cb3e67da213ffe303ba406f5e9313555a24a2d201a6ea7ddf83e83de12f91bc953a2c44dac9e67e287727b564e3843f2b44b1a1de273d38a67dd53f3d0fc44b3757e9915ff160a25b2a1d95e64a3edba0feddc5374170723651a6a90a07b66e690dd858b086b6bfdb5a1df46d703e62efabeb4aba577bcd314a5b202b2de97c92b52956a88e570f10339f6162cd0ea1d8b930b6dac715ab839526d43bf32835507b101cf095d02b4910cd11fec62f0"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xe0}, &(0x7f0000000240)={0x20, 0x81, 0x1, "c9"}, &(0x7f0000000280)={0x20, 0x82, 0x1, 's'}, &(0x7f00000002c0)={0x20, 0x83, 0x1, 'a'}, &(0x7f0000000300)={0x20, 0x84, 0x3, "edfd5a"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "8f2865"}}) executing program 2: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/dynamic_events\x00', 0x40000, 0x0) read(r5, &(0x7f0000000200)=""/256, 0x24) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = syz_io_uring_setup(0x75e7, &(0x7f0000000480)={0x0, 0x7210, 0x2, 0x1, 0x1cb}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) syz_io_uring_submit$UBLK(0x0, r4, r9, 0x0) syz_ublk_add_dev(r8, 0x0, r4, r9, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r3, r7, &(0x7f0000000040)={0x0, 0x6a36, 0x40000, 0x1, 0x40}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa9d8, 0x10000, 0x2, 0x193, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe98a, 0x400, 0x2, 0x2e2, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3428, 0x80, 0x2, 0x2ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd1e3, 0x2, 0x0, 0x1d, 0x0, r11}}], 0x4, &(0x7f0000002dc0)={0x2e, 0x0, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xeba}, 0x0, r6, '\x00', {0x0, 0x2ac, 0x0, &(0x7f0000001dc0)=@buf_4k="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"}}, &(0x7f0000002e40)) syz_ublk_setup_queues(r12, r7, &(0x7f0000000180)={0x0, 0x6569, 0x0, 0x1, 0x38c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7333, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x40000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 2, 20, 17, 19, 3, 13, 13, 7, 17, 3, 30, 8, 7, 7, 6, 6, 3, 2, 13] detailed listing: executing program 34: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000000c0)=0x4) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x113003, 0x488) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack\x00') read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x2, 0x0, 0x1200002, 0x2}]}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x6e0, 0x0, 0x80000100000}]}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7ff00000) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r0, 0x4068aea3, &(0x7f0000000240)={0xcc, 0x0, 0xfffffffffffffffd}) executing program 3: socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000800e00"/88, 0x58) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./dev/sda1\x00', &(0x7f00000004c0), 0x8488, &(0x7f0000000500)={[{@redirect_dir_on}, {@index_on}, {@index_on}, {@metacopy_off}], [{@obj_role={'obj_role', 0x3d, '.'}}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @private, @broadcast}, &(0x7f0000000140)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x6, 0xc, 0x44, @loopback, @private0, 0x7800, 0x20, 0x78e618a6}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) executing program 3: r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f0000000180)="727a73408b202e2f66696c65303a30", 0xf) write(r0, &(0x7f0000000400)="a399d7e4ad784ee25b5ef02167c690cdd3bfbf2859ee528df869afb8a34dfc", 0x1f) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8ab43, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', r1, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001a662ca40fd07040034860000000109021200000000007f0904800000ff"], 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd30, 0x25dfdbfe}, 0x14}, 0x1, 0xa00}, 0x400d4) executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x50, &(0x7f0000002900)=0x659c, 0x4) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004804}, 0x8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x460800, 0x81) mkdirat(r3, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x1, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x3, [], [{{0x9, 0x5, 0xb, 0x3, 0xe96f8b4bdad37473, 0xc7, 0x7, 0x8, {0x4}}}]}}}}}]}}, 0x0) executing program 35: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x50, &(0x7f0000002900)=0x659c, 0x4) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004804}, 0x8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x460800, 0x81) mkdirat(r3, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x1, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x3, [], [{{0x9, 0x5, 0xb, 0x3, 0xe96f8b4bdad37473, 0xc7, 0x7, 0x8, {0x4}}}]}}}}}]}}, 0x0) executing program 6: setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc81100fe8000000000000000000000000000aaff02000000000000000000000000f501"], 0xffe) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./dev/sda1\x00', &(0x7f00000004c0), 0x8488, &(0x7f0000000500)={[{@redirect_dir_on}, {@index_on}, {@index_on}, {@metacopy_off}], [{@obj_role={'obj_role', 0x3d, '.'}}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) write$vga_arbiter(r0, 0x0, 0xff19) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @private, @broadcast}, &(0x7f0000000140)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x6, 0xc, 0x44, @loopback, @private0, 0x7800, 0x20, 0x78e618a6}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x2c, r1, 0x153071c8480be749, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x5, 0x4) socket$inet(0x2, 0x2, 0x0) executing program 6: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000401"], 0xffe) executing program 6: setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff0200000000000000000000f5000001"], 0xffe) executing program 36: setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff0200000000000000000000f5000001"], 0xffe) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd30, 0x25dfdbfe}, 0x14}, 0x1, 0x1f000000}, 0x400d4) executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0xfffffffe, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) waitid(0x2, 0x0, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x400000b4, 0x0, 0x7}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x40) unshare(0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r3, 0x20000) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x32, 0x8b, 0x26, 0x20, 0x2357, 0x601, 0x3fae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x8, 0xf0, 0x7, "", [{{0x9, 0x4, 0x12, 0x8, 0x0, 0xff, 0xff, 0x0, 0xe}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) program crashed: SYZFAIL: posix_spawnp failed bisect: the chunk can be dropped bisect: split chunks (needed=true): <20> bisect: split chunk #0 of len 20 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 30, 8, 7, 7, 6, 6, 3, 2, 13] detailed listing: executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x2c, r1, 0x153071c8480be749, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x5, 0x4) socket$inet(0x2, 0x2, 0x0) executing program 6: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000401"], 0xffe) executing program 6: setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff0200000000000000000000f5000001"], 0xffe) executing program 36: setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff0200000000000000000000f5000001"], 0xffe) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd30, 0x25dfdbfe}, 0x14}, 0x1, 0x1f000000}, 0x400d4) executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0xfffffffe, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) waitid(0x2, 0x0, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x400000b4, 0x0, 0x7}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x40) unshare(0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r3, 0x20000) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x32, 0x8b, 0x26, 0x20, 0x2357, 0x601, 0x3fae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x8, 0xf0, 0x7, "", [{{0x9, 0x4, 0x12, 0x8, 0x0, 0xff, 0xff, 0x0, 0xe}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) program crashed: SYZFAIL: posix_spawnp failed bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <10> bisect: split chunk #0 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 6, 3, 2, 13] detailed listing: executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) executing program 8: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd30, 0x25dfdbfe}, 0x14}, 0x1, 0x1f000000}, 0x400d4) executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0xfffffffe, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) waitid(0x2, 0x0, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x400000b4, 0x0, 0x7}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x40) unshare(0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r3, 0x20000) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x32, 0x8b, 0x26, 0x20, 0x2357, 0x601, 0x3fae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x8, 0xf0, 0x7, "", [{{0x9, 0x4, 0x12, 0x8, 0x0, 0xff, 0xff, 0x0, 0xe}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 30, 8, 7, 7] detailed listing: executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x2c, r1, 0x153071c8480be749, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x5, 0x4) socket$inet(0x2, 0x2, 0x0) executing program 6: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000401"], 0xffe) executing program 6: setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff0200000000000000000000f5000001"], 0xffe) executing program 36: setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff0200000000000000000000f5000001"], 0xffe) program crashed: SYZFAIL: open(/proc/self/ns/net) failed bisect: the chunk can be dropped bisect: split chunks (needed=true): <5> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 7] detailed listing: executing program 6: setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff0200000000000000000000f5000001"], 0xffe) executing program 36: setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff0200000000000000000000f5000001"], 0xffe) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 30, 8] detailed listing: executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x2c, r1, 0x153071c8480be749, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x5, 0x4) socket$inet(0x2, 0x2, 0x0) executing program 6: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000401"], 0xffe) program crashed: SYZFAIL: posix_spawnp failed bisect: the chunk can be dropped bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-setns-openat$tun-ioctl$TUNSETIFF-socket$inet6_tcp-dup-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 6: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000401"], 0xffe) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 30] detailed listing: executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x2c, r1, 0x153071c8480be749, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x5, 0x4) socket$inet(0x2, 0x2, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-openat-fallocate-openat$selinux_attr-rt_sigqueueinfo-sendmsg$IPSET_CMD_CREATE-openat$tun-write$tun-syz_clone-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mprotect-ioctl$KVM_SET_MP_STATE-ptrace-readv-ptrace$setregs-ptrace$cont-socket$inet detailed listing: executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x5, 0x4) socket$inet(0x2, 0x2, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x5, 0x4) socket$inet(0x2, 0x2, 0x0) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-openat-fallocate-openat$selinux_attr-rt_sigqueueinfo-sendmsg$IPSET_CMD_CREATE-openat$tun-write$tun-syz_clone-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mprotect-ioctl$KVM_SET_MP_STATE-ptrace-readv-ptrace$setregs-ptrace$cont-socket$inet detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x5, 0x4) socket$inet(0x2, 0x2, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed bisect: concatenation succeeded found reproducer with 30 syscalls minimizing guilty program testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-openat-fallocate-openat$selinux_attr-rt_sigqueueinfo-sendmsg$IPSET_CMD_CREATE-openat$tun-write$tun-syz_clone-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mprotect-ioctl$KVM_SET_MP_STATE-ptrace-readv-ptrace$setregs-ptrace$cont detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x5, 0x4) program crashed: SYZFAIL: posix_spawnp failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-openat-fallocate-openat$selinux_attr-rt_sigqueueinfo-sendmsg$IPSET_CMD_CREATE-openat$tun-write$tun-syz_clone-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mprotect-ioctl$KVM_SET_MP_STATE-ptrace-readv-ptrace$setregs detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-openat-fallocate-openat$selinux_attr-rt_sigqueueinfo-sendmsg$IPSET_CMD_CREATE-openat$tun-write$tun-syz_clone-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mprotect-ioctl$KVM_SET_MP_STATE-ptrace-readv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-openat-fallocate-openat$selinux_attr-rt_sigqueueinfo-sendmsg$IPSET_CMD_CREATE-openat$tun-write$tun-syz_clone-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mprotect-ioctl$KVM_SET_MP_STATE-ptrace detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3) ptrace(0x10, r4) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-openat-fallocate-openat$selinux_attr-rt_sigqueueinfo-sendmsg$IPSET_CMD_CREATE-openat$tun-write$tun-syz_clone-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mprotect-ioctl$KVM_SET_MP_STATE detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000040)=0x3) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-openat-fallocate-openat$selinux_attr-rt_sigqueueinfo-sendmsg$IPSET_CMD_CREATE-openat$tun-write$tun-syz_clone-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mprotect detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-openat-fallocate-openat$selinux_attr-rt_sigqueueinfo-sendmsg$IPSET_CMD_CREATE-openat$tun-write$tun-syz_clone-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-openat-fallocate-openat$selinux_attr-rt_sigqueueinfo-sendmsg$IPSET_CMD_CREATE-openat$tun-write$tun-syz_clone-openat$kvm-ioctl$KVM_CREATE_VM detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-openat-fallocate-openat$selinux_attr-rt_sigqueueinfo-sendmsg$IPSET_CMD_CREATE-openat$tun-write$tun-syz_clone-openat$kvm detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-openat-fallocate-openat$selinux_attr-rt_sigqueueinfo-sendmsg$IPSET_CMD_CREATE-openat$tun-write$tun-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-openat-fallocate-openat$selinux_attr-rt_sigqueueinfo-sendmsg$IPSET_CMD_CREATE-openat$tun-write$tun detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4656243f9637", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "a41ba6", 0xc3, 0x5e, 0x1, @loopback, @private0, {[@fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x100}], "222bab8a090230feea9ee25342de5d04128ede1d1cf9951da899c738f4c45fa4ae4aa818341c8fce4432d8a6280a3730633e07f29cf5ceb2aa744d76b4247b1f40b989bc5bceb9eeb7fce9205eaee0ad1dbd55691b9460449c69bd1822a7fcdd597d85fce915509e44147458ceb3af68698d394404a4f20182c7267150ad1205e4263baa261281c2e50c522bf7228ee6646530bf3b83b735f0533748ae05194cd83c733209ccbd0aad58034b9fbc86cedd2647650a0c98088957da"}}}}}}, 0xfd) program did not crash testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-openat-fallocate-openat$selinux_attr-rt_sigqueueinfo-sendmsg$IPSET_CMD_CREATE-openat$tun-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-openat-fallocate-openat$selinux_attr-rt_sigqueueinfo-sendmsg$IPSET_CMD_CREATE-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-openat-fallocate-openat$selinux_attr-rt_sigqueueinfo-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-openat-fallocate-openat$selinux_attr-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-openat-fallocate-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-openat-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-mprotect-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-ioctl$KVM_CHECK_EXTENSION-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-openat$kvm-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mkdirat-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-ioctl$TIOCSETD-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-openat$ttyS3-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$TUNSETIFF-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=44.356546562s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone program did not crash simplifying guilty program options testing program (duration=44.356546562s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed extracting C reproducer testing compiled C program (duration=44.356546562s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone program did not crash testing program (duration=44.356546562s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=44.356546562s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: posix_spawnp failed extracting C reproducer testing compiled C program (duration=44.356546562s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone program did not crash testing program (duration=44.356546562s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: posix_spawnp failed validation run: crashed=true testing program (duration=44.356546562s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: posix_spawnp failed validation run: crashed=true testing program (duration=44.356546562s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: posix_spawnp failed validation run: crashed=true reproducing took 1h4m19.090977791s repro crashed as (corrupted=false): SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF final repro crashed as (corrupted=false): SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF