Extracting prog: 8m42.915458767s
Minimizing prog: 37m15.435495877s
Simplifying prog options: 0s
Extracting C: 31.336207883s
Simplifying C: 19m23.180851697s


extracting reproducer from 38 programs
testing a last program of every proc
single: executing 8 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_open_dev$admmidi-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-readv-readv-mmap-syz_open_dev$loop-ioctl$LOOP_SET_STATUS-ioctl$BLKIOMIN-madvise-madvise-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0)
readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/193, 0xc1}], 0x1)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/186, 0xba}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/181, 0xb5}], 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0)
ioctl$BLKIOMIN(r3, 0x1278, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRESOCT=r0, @ANYRES32=r3], 0x6c}}, 0x20000014)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-socket$nl_xfrm-sendmsg$nl_xfrm-unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-socket$nl_xfrm-sendmsg$nl_xfrm
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0)
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000) (async)
syz_usb_disconnect(r1) (async)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') (async)
io_uring_setup(0x2e34, &(0x7f0000000180)) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDFONTOP_SET_DEF-getsockopt$inet_sctp_SCTP_MAX_BURST-sendmsg$IPSET_CMD_TEST-socket$nl_generic-sendmsg$nl_generic-syz_emit_ethernet
detailed listing:
executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000004c0)={0x2, 0x1, 0x0, 0x0, 0x0, 0x0})
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x80, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '$.\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffffd}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}]}]}, 0x80}}, 0x40800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004"], 0x528}}, 0x4800)
syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES64=r0], 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-setsockopt$sock_int
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x400, @loopback, 0x8e}]}, &(0x7f0000000100)=0x10)
setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_S_FMT-writev
detailed listing:
executing program 0:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x400, 0x4f424752, 0x1, 0x8, 0x6, 0xb, 0xa, 0x0, 0x8, 0x0, 0x7}})
writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="8466879d520d5346f39317470bf20e1bf513dcd41379e234be3f5a869f2aee7032dd18e573dfd0a86cd4f327bdf53193635b59bf0404dc304c07cb7c7d94a14c005967877c999dcfba20e1963f7e5646e6cb419bc8f4914a2a02fdbec483bd391a5edb641bd896838a836bf3a305090eb5186d8f4d31b408c00cdcd37871cfd4afd2f02ecf71fbb57916d49dce43ef5620612253ece8e285c35b68b3f880787cbf8f67f31205274db53bf4aa199ca1d2c85b44b04a5b4f70f4a792e83d56a5504ad00a", 0xc3}], 0x1)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_S_FMT-writev
detailed listing:
executing program 0:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x400, 0x4f424752, 0x1, 0x8, 0x6, 0xb, 0xa, 0x0, 0x8, 0x0, 0x7}})
writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="8466879d520d5346f39317470bf20e1bf513dcd41379e234be3f5a869f2aee7032dd18e573dfd0a86cd4f327bdf53193635b59bf0404dc304c07cb7c7d94a14c005967877c999dcfba20e1963f7e5646e6cb419bc8f4914a2a02fdbec483bd391a5edb641bd896838a836bf3a305090eb5186d8f4d31b408c00cdcd37871cfd4afd2f02ecf71fbb57916d49dce43ef5620612253ece8e285c35b68b3f880787cbf8f67f31205274db53bf4aa199ca1d2c85b44b04a5b4f70f4a792e83d56a5504ad00a", 0xc3}], 0x1)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-ioctl$USBDEVFS_DISCONNECT_CLAIM-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_ENUM_FMT-ioctl$KVM_SET_USER_MEMORY_REGION-socket-socket$inet-getsockopt$inet_sctp_SCTP_MAX_BURST-pipe2$watch_queue-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-setsockopt$inet_sctp_SCTP_MAX_BURST-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-close_range
detailed listing:
executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x2, "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"})
r1 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x30, 0x1, 0x0, "000000000034b52ba75066c27891ca55e21f0000000000b2b60ec400", 0x30323953})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, r5, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000040), 0x0}, 0x20)
setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000001080)=@assoc_value={r4, 0x3e}, 0x8)
r7 = fsopen(&(0x7f0000000500)='bfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f0000000240)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000007c0)='\xdd_\x98E\xcb\x84\n\xb7Qg^\x01D]\xa9\xd7\n\x93M\x00\x00\xd1v\tk4B\xf8\xe3b\xf1~z\xa3\xb98P\xd1K\xc8M\xc40~\xa6\xf9\x0e/\x9cj\xb0\xa90y\x91=e\xce\xcaO\xf5\xbf>W-)\xd8\t\xc8\x14y6\xf2\xa3\xdbO]\xc8\xed&\xa2`_\xd1QG\x01\xba\'+c\xb8\v}\x17\x84]jT\xfa\xbe\x96\x0f\x9b\xd6\xc82\xfd\x14\xaf\ta\x02\xab\xe31\xc9\xfe^\x00'/132, &(0x7f0000000600)='9\xc9', 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-ioctl$USBDEVFS_DISCONNECT_CLAIM-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_ENUM_FMT-ioctl$KVM_SET_USER_MEMORY_REGION-socket-socket$inet-getsockopt$inet_sctp_SCTP_MAX_BURST-pipe2$watch_queue-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-setsockopt$inet_sctp_SCTP_MAX_BURST-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-close_range
detailed listing:
executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x2, "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"})
r1 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x30, 0x1, 0x0, "000000000034b52ba75066c27891ca55e21f0000000000b2b60ec400", 0x30323953})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, r5, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000040), 0x0}, 0x20)
setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000001080)=@assoc_value={r4, 0x3e}, 0x8)
r7 = fsopen(&(0x7f0000000500)='bfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f0000000240)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000007c0)='\xdd_\x98E\xcb\x84\n\xb7Qg^\x01D]\xa9\xd7\n\x93M\x00\x00\xd1v\tk4B\xf8\xe3b\xf1~z\xa3\xb98P\xd1K\xc8M\xc40~\xa6\xf9\x0e/\x9cj\xb0\xa90y\x91=e\xce\xcaO\xf5\xbf>W-)\xd8\t\xc8\x14y6\xf2\xa3\xdbO]\xc8\xed&\xa2`_\xd1QG\x01\xba\'+c\xb8\v}\x17\x84]jT\xfa\xbe\x96\x0f\x9b\xd6\xc82\xfd\x14\xaf\ta\x02\xab\xe31\xc9\xfe^\x00'/132, &(0x7f0000000600)='9\xc9', 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 38 programs with base timeout 30s
testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 10, 12, 24, 30, 17, 17, 22, 30, 4, 6, 21, 3, 3, 7, 1, 22, 20, 11, 14, 19, 40, 20, 10, 5, 20, 5, 11, 3, 9, 9, 15, 2, 24, 8, 7, 26, 14]
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', <r2=>0x0})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x9, 0x0, 0x0, 0x9})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r2, @ANYBLOB="800002000a00020001"], 0x28}}, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000100)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x64, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "ce75713e1f83ac361c8b3ce671d0f6040eeeb5f3d682aa44b5baa75d0e6f30e9", "f78c045a5d3e3dd45207daba0bf8fb10", {"4633251188e45d79a220d115a0774e8a", "0c3e29a4f380cf106865a0edf7bf2a3d"}}}}}}}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4)
close(0xffffffffffffffff)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000002c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000001c0)={0x400, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000180)=[0x1], &(0x7f0000000200), &(0x7f00000000c0)})
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a000008000280040005"], 0x76}}, 0xc000)
r3 = socket$unix(0x1, 0x5, 0x0)
sendmmsg$unix(r3, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="8f29e38d717cff1d06630323bd", 0xd}, {&(0x7f00000000c0)="11bccc48ef2606c8476918ccba7ee3c79c6e965b12e3ba6bafb770b669e304aec49bfb4568b56154f92df59ccb2ae76eb9589676c56f38b6218fb6eb9272c350d7803d14e40390e0c3caa1a1a74bc471405fc885801bca3d1346ee506ad78e909bdb970186274db30be9a1b0e9b5287fbe36746abe630acf0da03a1986459a0cd530687720d320521427d58dae2cb4db089ff594745dff2e51bf453118", 0x9d}, {&(0x7f00000001c0)="13b4749c022c0526d0e09202212fe29b474816f647ac50f7689bc9399487ff83e013bae429c779dd6e7d8e31e7aeed91510a231bbd597a54e8048e712af94a261b87a26f5777469962", 0x49}], 0x3, 0x0, 0x0, 0x40001}}, {{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000000300)="687b8f77f77dffba91e7e8c4fea1fd7250540387b849f46c17122b7b2dd8c1859e74ecf5d627b991e974315d61684e2049010b40ac7feb0074f29214caa523e6e3a3500342bb2e9107bd4949053804efc0c2dc6ecf4a7db832cda4292136c2a0f658627892cd7e2e33e945869a2cea81e5d50e8880f4dd94de480e46e413baa3c2a89c50f7c7712aba58214e2a3e5e37530cf063351d66da266d8d1b86c8ef48686ad3823495d9803a13fbf8a554c0c6b0bc0d55d1275729829d58f9", 0xbc}, {&(0x7f00000003c0)="6175b12248ba7757f58573ebb807ee9fbb0075301cf1c62d6a6f8189cfd29263e428d8e0727b8eaca98ff4c490b3c18070c3cb3862ad3d404e2ae47c7535d1dc75380cdfbee5dc6ccc3386d6cfd26f4e9e300ee779f026ec7ee8285b3cf85404314c8ea179a4caaa7a91ce94ccf687e3e9ef52ebbc41c06ded45383d82b28653a51a5d3a7f56c552f8909dd5208546a541ec46a674c02c06cba2c38a91392b3ecd3729daa8284e2d4555a163003c04f02d50adc819e275d22df3cee48bee4f8e3f7b12cbab53abdc4c4e36de840c544c70c4515e87e2698bc2013b9635322e", 0xdf}, {&(0x7f00000004c0)="1dad910b81e1d81a8635129ba2922d5cae5923ec0b24691c16aafc7ecca274d29a5dbe3f864fd6e7b911c3b7d11eae6e15ec3bce001164cbb5db63d9da0ef2d0274bbdca1d7b09730f771e4330929235e81d118aa67df5bd43686192e0c6a640a35e3b83dd1fdb9572fa72bce221d4ddd3d619526cdbefad4641bbf999e92c0cad9c19609f137dcff34c76fa51cf581a501d13a39e14d196197103246ece7d4cfffcb1a9c0bce125dc1630ae679c97de4c6b7f1d6a2b4ba0fbd440ce6e030ebc7cbe9ef2c0e698b28a888832379e8e223ab092f21dba4457811c91d8fd8a8ea13ca39f409b07bba1252c46f33c6fd7408652782b3fab503fe14ba9", 0xfb}, {&(0x7f00000005c0)="2f131555a04311fb927f4a859c6d371d8f01d88b7cdb883a14a5beb057495d438985be27ebf16a395753619d4429694e874ae022deb21d1a2e1ef5", 0x3b}, {&(0x7f0000000600)="7175e0560b65e403402bcbbdec0405a1371262fec08b81db31f7a276002afde63379fafd096a52a76426b809b83b0eb653a676634ef92f63da06a278ee6b67869c449786ff1c9190aa62606299fe48a99855e9a23cc98de08d0983fe59c31f095e35f830fbc298a15048a4c55aa925c4a4de91488461aaeee90ee7c5a1524c028adcd4a4be0b505b8a365fd277caa7af1c0d331ca4f5aec4de3ecfc10ec780dc3768ea1dc3b3555c9c974c13eb4d1219bce779e18df9e45fad884cf4dea7decd46e28a357b06a93e7d383cee1501d0f0d0702776ba8a", 0xd6}, {&(0x7f0000000700)="dc9d5609dcbec7ac0554b8db81b4cb09cd8fb509bfec5b3a8b93364ed80a61c4972d2637ed8c93b8a9c999158b76898e696865fc7a0c4b22e23a32b492484d8e022c075321373370760d7fac529602bd091129ab13c69f7960d5a9562d575dcbce43ceb3b5badb58c77910c10c39b6b2b1ee5c8ab12239a44ab3ac723bea91a10e2d163efcd823b78b2610edfa94ab5b977c92757706509bf16be14e0c4d3e1e4605e72dbb3c058a4b1e35a7c0e5870ec4a459c0140f2f235fb9a87ad75dbd3679e4a61332c341994919e1b8bd564dd85b0ec30e85c2d2ac8f833a3ad757f3716e2d6585ef7281e7393379dd3ea2a51c8eae290b0f564569dec1d7a0fa23136ac8d837c355cf3ff3de2ca434587cd5b4e38f28df920ff5663b278f696d73d2854d2410d29a97eae6c92dcfdaee18a568803852537ee0c90390e94fec8eb7b634dea849b0a6a43c8652f64f8755d659482182778cef8f6f51ff77e60b292e1f3dd1afd0d9035c23e302e694d1411fc2972321a56cf8df2429df1159339fbe56d1e1cfe45c808794ae85a1be12563f2bbd6dcb191a449e0f351a89e79c6ed5c6a2fe0d7dbc735e3ac996ee744ba0b3b165d74fbe233c7190ac01af6c2fd623c08eb03d92c4289bab73bae5b9c40b67071f97dc7da55cdb5c9782eb56ab469de4575b5a67862e8e2008a4c07efdd278a83c1533880faab3175f7982b8db882d8cb30354507c5711e1223e837fe2f156ae4ac99b4f026a05ec4c26fad19ae21d5b1383a49eef5f6f475d5058eb42beca106ad261105ee5b454d160aabac9be4ec62eb57417f9314b26ab8dc5655596cc34ee71ccbe4b819675adaec8b1da9d222036e6788c544ab73b74a6b85367c0f437eccc87b88fc55f97af7639356cdba2e359c44a5992f88c97cdf27827e5a9284cbf3a47cc5e69cbaa77e8b755515ba4cd2dea741f3b52780e86439a3639337193cfb427b9908213d89a9f3f44a2a3fe7f7fa8a60373de17c95725117078688dd5717c0dc743e7613ff6266758f5af9d08164cad1b7a7d7f93e7bd93d8513ff1f87bd4edd0df8c7e291273850f8b4a1097ee41fd61444baf3e637daf2978c00f3b51585d15658c863540dce6fd5640ae8d272e70af81c5ab9e356607b38ef030f5b72247b323b1311bd6e18a92c299b23c7e9837e6ffd0669b8d05d988f96c636b54dcdf7f275077b5056c65665f79a936fdc6a890131ac08953da52fc095772d603c60e571e643f1d779c3521c1db927a8511dc595227af4560dc46132384810b6392169dd772c18f28b74265b59c605d2b6884f77203a651fc6d383faa27b5edefb061010fcac1c90efe29a55f6852ae647e8500bceda6f6da81331186c16596a2a14d12fb520240a9697f450f36be5eb740606a48cb7c0fc497e57aaf34da5b75e266c85f188db5ad71a42f47270594f78951aa443ec747c000e8d1b03ffc756e3e00209db5dc5b4012e9de009c819dec8eea223d0038faf02696aa09bd48ce2404ac150b5d22432021bcb2fa2bd488501189cde1b1d23ac0976088643b41ee52b2204690b3e7c5150fbeb41026f8176fa92d5cd738319af388eb4757b627f4009816aafa18070db04eabecdf27b2865aa864feb68dab9d6ecf8778df8cebfc4ce6223b3e077c81a50b970fd2724aafc1d8aa10cf23996c1dee1c97fb81d04ecef826cf79097853ffc51e12dccd47ebd4673db64bc6053670c6519066539f3f7aeb3614c61c84556d14b6a0ec28a5bf5aecfadf0a87eacf32229064ef38837d99fe0dbed31375f3f87ced36d553020845ea01a11bd82713f947a7de63b8bad5481e43e22c571662e600448a75aebe7c1d154173feb47f3380528262468d72f219f9562d0a9e3f2e20577e8b59a7c55e1ad21f27938bf10a00b4fa0ef2ec24505c3ee2695a5fdbe4ad46a7ebd275d330304f13649240f14b42c43937742062496fccbe92e85d6d7176d986418805434f2370479770a6b73c73b80239dd101c69a8a15b87afe8a9827ef862491191c86a9483cd210ba4a209867e93907b36dd9f8ca157d16046d99ed983547b11a5b8ce1577883ae93993cc2e52c228694fa44bb2e2be5b1a8be47cd2a5e7136cf8cd24505744893c7661e531b328da256e340852718ad252cc171386748745014f95aee61df67fc27a65726130bb985e8a41f1b8a7eb106cdca1361122ed0746b5671e54cd1f00d0d34ef1e31a11ca4cda44611d6b273dc601f4299cff97929904ec293379639ef986ae04c606d12dc034023b40819b7f3f20419e7ba4e44135f8801bd9aee826a821a79ce59618572bcfea416f3070b01a6e9b325d2ca239d3f6bd4fd85aeefc9220585e970d848ffed0d36754d08653f593e9d75e306bfc65b2986d7b326f3d3982226919df81c685537f1a1cb5ca5ed5f369b8194532a4b7744d4c49b9fd2f0a91e1cc27c4caab323999b8662b218252f147431bd93fa1501cd5fff316e075e9c528524c591dc79f57f5190b73928390b8f706f0c8c3fa4c6f1df6e1fc8259f5eb383501a20c83c7d29d63a70dec6f893bce65377f439865a6761559f55d37d7721312fc63b3545ae5f4e10a8ae2e61c5428bb069abafef3f1999f4e174a32c4b1d0274b2d6486ca1d828527403837b26e7aa780b33da781c33c47264223b65767343ae6238347faefcdc93a1c91157ebf838e9c29218d06ea4b0857b0a36e649aa21b84e08fe9c745e9d7482e88f99bd14f78b51698dd37c42fee3a74f71adee69de98b583e5de98a02f5ab5d9cc99c1567d0b0c0cb543c5884b0692f1a5c9ec73eac7d537ca7c51abdbd18084be58d780358a6ad0653b17589bd29aec29229092ebafc1d131cb26c857ea14e9d905e9248a74baea32f5967c28a9dd8949e2733c27e8584593f30290faa9739cee3a0ce8a12b8561e1e287fa0b2db2f47d6a91c07fcb7f9a8ade70af128f8185178c3bcefe5b7e4761f4d280a45394e141f5c7d3a5a6f2e75df6c28f9eb11d8e99cfedcc4579cd37365d560cc68a31dc0fbb117e1dbd73c4b9b31c3b5f5ee12538f93f99d455dd42ac9fc610d2197591c61e8ccb066a8adf46d674b4c68747eed6a7059c33e1b1b7329edb36e1c51accd81804ad6157f8743591139007070d6f3373a2085198e6f9973556aa5dba4948444ea44b14c67c818f623279af3e0d9e034cb39f99bd9208c4f9e836996180704dd06e5d69a652a3c052385dddd8db001b82512e18ceb671a79cf4ada01b0108bd71381fb6187cc752883d982df4067376a9191ecdcc3b82911b37e7559639468d875819bb1d683015158c23807ddfcb29ac7f06022d6f69bf8c9bd09e43fd98e3a3eec0f3b3ed5ab1577424216b8ccd2a5d854842a233229c14f8a1edbe89431df883711c6faa9563a3773c473758f8d4936807c185b1ad5b141a8d90eeb4c4a2a02a60b9aa9112885aff14317ac793f38b61188b70163ace85e01ea9a7fbfb0b21b41810e6c7fa13d466f39965d8ae47feffaf157c9bc2ec51c4e8127b2948c4b9e6e5a6c3c11b794632333dff835aa02036dd24d7688551ee16e30f1a4834845ce6d557d7c68095394875ab2c5a000a0af555e8cb0fe0873ca5274175184cae09ec3fc6de42ac50303d13f865e4dd928ec7a52ac225220b1800789eb0f5ac4d531d03e692f3f60ee2b713c8e61ae7af55078d9425eddd6b3c6e17f61b5a08fdba3f5aa5c40e9134d654f3caa33dd69edcc86935beae205057d3acde0ef4d6af9d99ad30aaf7d725aeb5f34b514b677d1ae1249c91c19c87ebad8259fa2bd6636653d7c341204c7bcbb32d1d1273cc40de7f18cc37e1f3175adb9377d66c1999cb6f06cf7e57643181058edfc72695cae8fdf981de1dfe5779e12d8dcb41d859697d0d6c89315576088d1437039052320443cb4b74067dab4f57045ca39159693cfb4d47bfb6af5bd692dd6a46f92edb89e91ac7198ef91f60703a3ac5f922180ea856bdd13f4571aadcac3e4ed44bc040023dc8bdd7e9d1b6da9ade41be391c46c9dc6b9743a4844d81bfb69c5ef8e8f0e2a6c1789bc8ffe7195075496668c80da27133f6d9be2f939a3be0d11b758b5ee858296c35a63e2984050ecbbbfb47c6ec8e81a27600b88deff190d4726b7fc8bc57797c2d88e25d861b898497c8eed5249c4204c1e6a2040f2df039c55572e26c560522aadfc917ac51611aab57702f9f62ccb992a35a9b8f0d0f049386771f13b1b902a0e3892a32e33d590a348e4e6a0a593c7371a1dea62854e6c4167bb1613e931e369c6980861e02fbc843025c750d65dc969ec8aa53988f244794e4da4586bd6dea75253bf54c75663204408f920a018f13a2dd866419901364312117bdbdc359941b974692ef275787a8f5a735b8f199c9412013ea189a619c5e594323feb3c41ca582ab2080c9fed0e355dfd64a7e880930f2485cc47ccf597063bd638b3c43d750fac4cadbb0f91db98f778eaf366c0885d66b4d8c6af3a95e7a1f6c1740a6d48118b9067eb29680cfbe9ccc92fa7d723c6ba9615f01a47c372df662c8c22fd22d13101c05495a42c30fb23d122a13c3efa62e0b67049ee14a244888d5217ad9e2fb3e386d0c03eb432400cc445ca0d9c6823f2d8e4488b0875f7f72f6ac1ad8fb6d5f51002280bd377cdf99248fb35aa2682cbda32076c809118175313557dfadf9a44ddb6efb3dd16043d1150504c21c063abac503ac0bfcfd3e8923d82f8d6b2cbea3f1e4d1fbcd9a9e251a3704af0a24246ac9e2c7b9c9ad4972813d08177480871836bc2bbb058b54806bae6a73688c25789ad7c31dbc6d4efaad540d7128a17272978a65e1617f0c14216c6b99590bc770f92a9544de0981a5575d0e55ea4cb0f61bce292cb59543fbd7ae945b68ceaa78bd0b019f69c0a1338e1b9636621384f9e6a8681d3444d067a6bf9bee01c0ad4bfcd664dfde11e80a567e6fb9f2092a230a32b08a290110d70a87977b8260eb2fd9418e6f5b0be06845b08a29cc24185aa702dc51af6c840bb4fb6df18aff7c8d5149e7d62019d925ae572a8323ca047e1ebddbde3838b0e441eac80b3a3988b14cdff281a4f073f59a17b5f84b46392df82e1de09a4b5748d2605ba12f49d2e6f8d8a8e8677f0bdcc8386d91089aba426dc5bb0abc261246e86dc3a6e01ee42fa76b03c09fdfd0eb3dd988efa8a47161fe0109d76e4c0f48fc2c67b05eaf158c02aafea712893cb9d77af087309f9eb69850b23e4a854f3aa6f1265f85fe26c9907d5a778608b932afabcb39ee03ff3b32abebe4e54996ebb20614c738aa704976a5f1d880f1a86b93ea96fcd8c69b890cf5f42e5f45a09730c286e5906d46a69dfddc1f04487d2827b15c28944b6759d26fc24e2df7c87362b332b6957595675c5b7f137f95cf4ccde4dd9b149b0b71c6bb8caae5d256eb5fb22b0a3941c57b82bd9f160280c18615bcb4ab066871e5bd40bb35a5b5bcc8523af17c8a8a63c76270eea53009be5de4fd49470e7eaae3198995e0653708305c7b931ff935485d72e48db42c3dab538c303d61a0846cbf8e9298d520e3a0f5e0429ba4e5d35f46659a0d06c49cc533211bb9c2ed0d430760e496bc41a0ae46f0ec1a0aab54fa68a9600a8beb8407c067bf08aae01d166d85cc385ff2da8924e11a1f33c6038c8a0305b998522434343fcf874d78bb1d17c3ec9753578d05c9c7ff83eff8a04794a3923ad237e0eb07f44f18613251636264b71a81a4583454c6bc0cb4f73eb41464e40f2c0ecf2b569ef8f994da1a7f7c1fc478b", 0x1000}, {&(0x7f0000001700)}, {&(0x7f0000001740)="9c2df6bb1d708482b8b5accddecad69bf6c1d136374dfae3347c8271357cc0dbd38371be1985b373bb01641862df278ec64cda0a2e51aca4ec29e01b415734952fec4467afbfc2cf15fc5fa3e6cb687870eb6ea0da3671b4eb2b5fcdd21ed3e544b77ab3935a98f81244dc5a4e93b0d964ae6eb2f015774838a97422be5a7a37cccd90cbff44be019dd0e2b5d7d667f6e7d22a55597682e546ac6b20ddae02e3b55e8c9c43cbdc8898cc82fd3c5c6fe79f9c7d837658a8b0cdd17d4616d2060977fd5ec8e372", 0xc6}], 0x8, 0x0, 0x0, 0x20004801}}], 0x2, 0x4008000)
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x80000007)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
syz_open_dev$video4linux(&(0x7f00000001c0), 0xff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x3c}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r5 = socket(0x1e, 0x1, 0x0)
connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r7=>r1, {0x1}}, './file0/../file0\x00'})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1)
sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x80, r8, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9c62937138262f83213927e4c3"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "89b3727b62141b5965da5fd5389fa1"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "15e013409ca2e9818f396634d0"}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r9, 0x1}, 0x1c}}, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x89901)
move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x300)
executing program 0:
r0 = socket$pptp(0x18, 0x1, 0x2)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000))
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800008, 0x13, 0xffffffffffffffff, 0x8000000)
r2 = syz_io_uring_setup(0x3cab, &(0x7f0000000040)={0x0, 0xf55a, 0x8000, 0x0, 0x1bb}, &(0x7f00000000c0), &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE={0x7, 0x13, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r4, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e5e172bb0129f777"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xf9473aa5d3e09426}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r7, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2c}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000480)=@req={0x28, &(0x7f0000000440)={'batadv_slave_0\x00', @ifru_map={0x3ff, 0x8, 0x3, 0x2, 0x3, 0x1}}})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r4, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r6)
sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r9, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r6)
sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r10, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r6)
sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000bc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000940)={0x208, r11, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x219}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_NODE_ID={0xa6, 0x3, "a970e9bef893048b66eb4fdb2c5d51aecf8052489be70e0bc73c82617f16e251ddf8d29bff1ff17823b3d104abe7bf9d29de3ec2bdefebbd2916789c132dbd9cc0547a9787fcc654df649ba3985bb61ccedb8a9bcfafd4ddb6a77dde1434f1f70717952f492f50ad259bef93ef1680cb01356e5cfb969b4d9c0cb321218313956b686084a50a19e1722e310495ec7733f39474b89b5a78945fbcc2aa9b08f8a1be9c"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x4d, 0x3, "ce9567e186a520cd85872dc32cbba13e9d1dac7261002e37d12aa922c9b1e67101a3259380a1552840b5e29f0e7b0ebc798301781d5d7983520aa6421b35b533520ab79a1f30f3d2fe"}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40800}, 0x200480c1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c40)=0x14)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r6)
sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r12, 0x900, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x61}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4004800)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000dc0)={0x80000001, 0x7, 0x1, "9fd14b0d978a793a6c7ef66a133df1f5f36d0bfed9e8e8649b1a3fc38e14d41e", 0x2036315a})
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000001100)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e40)={0x250, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2b969c8c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x25a1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd0f4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x89}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc00}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x180}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x5d, 0x3, "42387a5d86934b00af8ca24414f6fa0540dfe589c69b148f19c58dad200a04dcbdde28df100de22ac4b83879de5843e043d4b1da51042a9c6a22dad5d9c637f0492a300ba0ff72ba3dde0cbbe1e6908c3ed704101dc3b12fa6"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffa}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xdda}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x16b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x4080}, 0x400c811)
executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x2, "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"})
r1 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x30, 0x1, 0x0, "000000000034b52ba75066c27891ca55e21f0000000000b2b60ec400", 0x30323953})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, r5, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000040), 0x0}, 0x20)
setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000001080)=@assoc_value={r4, 0x3e}, 0x8)
r7 = fsopen(&(0x7f0000000500)='bfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f0000000240)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000007c0)='\xdd_\x98E\xcb\x84\n\xb7Qg^\x01D]\xa9\xd7\n\x93M\x00\x00\xd1v\tk4B\xf8\xe3b\xf1~z\xa3\xb98P\xd1K\xc8M\xc40~\xa6\xf9\x0e/\x9cj\xb0\xa90y\x91=e\xce\xcaO\xf5\xbf>W-)\xd8\t\xc8\x14y6\xf2\xa3\xdbO]\xc8\xed&\xa2`_\xd1QG\x01\xba\'+c\xb8\v}\x17\x84]jT\xfa\xbe\x96\x0f\x9b\xd6\xc82\xfd\x14\xaf\ta\x02\xab\xe31\xc9\xfe^\x00'/132, &(0x7f0000000600)='9\xc9', 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)
executing program 32:
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x2, "5a77bd038786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500031681905db88235f8a5447dd2a2fd6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82cc71eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd50080000000000200008962fb73c33424b437bb192c9b06ea6ed04983fe5c5ca033dfce0a8257030000000000000058e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b394de72300d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca147df97db"})
r1 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x30, 0x1, 0x0, "000000000034b52ba75066c27891ca55e21f0000000000b2b60ec400", 0x30323953})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, r5, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000040), 0x0}, 0x20)
setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000001080)=@assoc_value={r4, 0x3e}, 0x8)
r7 = fsopen(&(0x7f0000000500)='bfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f0000000240)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000007c0)='\xdd_\x98E\xcb\x84\n\xb7Qg^\x01D]\xa9\xd7\n\x93M\x00\x00\xd1v\tk4B\xf8\xe3b\xf1~z\xa3\xb98P\xd1K\xc8M\xc40~\xa6\xf9\x0e/\x9cj\xb0\xa90y\x91=e\xce\xcaO\xf5\xbf>W-)\xd8\t\xc8\x14y6\xf2\xa3\xdbO]\xc8\xed&\xa2`_\xd1QG\x01\xba\'+c\xb8\v}\x17\x84]jT\xfa\xbe\x96\x0f\x9b\xd6\xc82\xfd\x14\xaf\ta\x02\xab\xe31\xc9\xfe^\x00'/132, &(0x7f0000000600)='9\xc9', 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)
executing program 2:
r0 = timerfd_create(0x8, 0x80000)
timerfd_gettime(r0, &(0x7f0000005d00)) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000000002000009, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r7 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, &(0x7f00000004c0)={{r7}, "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"}) (async)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async)
r8 = fsmount(r7, 0x0, 0x0)
symlinkat(&(0x7f0000000140)='.\x00', r8, &(0x7f00000000c0)='./file0\x00') (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000421d4031409716553cb170bd5f0ab6b086a857", @ANYRES16=r6, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000200003801c0003801800018008000100060000000a0002007b2a232d2e000000"], 0x4c}}, 0x0)
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'veth0_virt_wifi\x00'}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)={[0x8, 0x6, 0x9, 0x8, 0xf, 0x10001, 0x8000000000000001, 0x3, 0x1ff, 0xa, 0xffffffff, 0x10000, 0xf6a, 0xffffffff, 0x3, 0xab], 0x0, 0x20000}) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x6, 0x1, 0x2, "1c13ebdaf2f20d55806b26b1d750185fd75a206da058e85b2197edb1439b1cc2", 0x32314d48})
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r1, 0x0)
r2 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}, 0x3}}, 0x10, 0x0}, 0x4045094)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c)
accept4$inet6(r1, 0x0, 0x0, 0x0)
sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
mkdir(&(0x7f0000000840)='./file0\x00', 0x0)
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e)
r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r6, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r7, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r10, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x3, r11, 0x0, 0x0})
r12 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
r14 = dup(r13)
ioctl$KVM_SET_MSRS(r14, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000410101c000000000fefffffffffff4ff"])
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x20, r3, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xa8, 0x60}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10004000)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="04005b00060065003f"], 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x0)
executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x98}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400000000000000000000000000000000010c0002800500010000000020440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000000000080007400000000018000680140004"], 0xb4}}, 0x0)
executing program 2:
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = fcntl$getown(r0, 0x9)
kcmp(0xffffffffffffffff, r1, 0x6, r0, r0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010003b15000000000000000000000000d2c3ac98d24630ab9f9e73f88b78e5c62ad72c51dff6fceefdd838362c5b1b136414ff38f6588ab5f29f62760e296cb46ed5ee24f636e81f930ec19e9dc232b7c733465873114a4d5bb32d356946a7a85d513cd49a61acd92097ce0b12ea41f38c33ab88d589550ab2ce55df120ff7961424", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128008000100677470002000028005000500010000001400080000000000000000000000ffffac1414bb"], 0x4c}}, 0x0)
executing program 2:
syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x8000001}, [@default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00') (async)
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0)
executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x400, 0x4f424752, 0x1, 0x8, 0x6, 0xb, 0xa, 0x0, 0x8, 0x0, 0x7}})
writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="8466879d520d5346f39317470bf20e1bf513dcd41379e234be3f5a869f2aee7032dd18e573dfd0a86cd4f327bdf53193635b59bf0404dc304c07cb7c7d94a14c005967877c999dcfba20e1963f7e5646e6cb419bc8f4914a2a02fdbec483bd391a5edb641bd896838a836bf3a305090eb5186d8f4d31b408c00cdcd37871cfd4afd2f02ecf71fbb57916d49dce43ef5620612253ece8e285c35b68b3f880787cbf8f67f31205274db53bf4aa199ca1d2c85b44b04a5b4f70f4a792e83d56a5504ad00a", 0xc3}], 0x1)
executing program 33:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x400, 0x4f424752, 0x1, 0x8, 0x6, 0xb, 0xa, 0x0, 0x8, 0x0, 0x7}})
writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="8466879d520d5346f39317470bf20e1bf513dcd41379e234be3f5a869f2aee7032dd18e573dfd0a86cd4f327bdf53193635b59bf0404dc304c07cb7c7d94a14c005967877c999dcfba20e1963f7e5646e6cb419bc8f4914a2a02fdbec483bd391a5edb641bd896838a836bf3a305090eb5186d8f4d31b408c00cdcd37871cfd4afd2f02ecf71fbb57916d49dce43ef5620612253ece8e285c35b68b3f880787cbf8f67f31205274db53bf4aa199ca1d2c85b44b04a5b4f70f4a792e83d56a5504ad00a", 0xc3}], 0x1)
executing program 3:
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_usb_connect$cdc_ncm(0x6, 0x8c, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x8, 0x50, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "d3d8"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0xcf, 0xe, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x0, 0x19}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1000, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x7, 0x2, 0x0, 0x4, 0x6}, @country_functional={0x8, 0x24, 0x7, 0x99, 0x2, [0x3]}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x5, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x65, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1, 0x8, 0x9}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x210, 0x5, 0x5, 0xf5, 0x40, 0x10}, 0x3c, &(0x7f0000000040)={0x5, 0xf, 0x3c, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "d11a9be9eb2e89757787fb695b6923d2"}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf, 0x7, [0xff3f00, 0x0, 0xc0, 0xffc00f, 0x3fc0]}]}, 0x5, [{0x58, &(0x7f0000000280)=@string={0x58, 0x3, "f129064008f031fc1042df9fd39a0e746328f60b0a049d116a624fb173d7196adb7e7d5faa8253f0e32786c11351e56413c6e3b2cff4cc2e989e55c568ea056ce5fc12d4424c9b27bc6ee86c8a61c0f002be31bcc13d"}}, {0x53, &(0x7f0000000380)=@string={0x53, 0x3, "96aeb4a0e8659e1cf6ba1b9d0371eae70cd36d9358834fe7fd21a27ca7b27e7cad2eb13704d081f538f0e4f09aa22e1394b843bca8b486a64332a45824b9fa850b54202626a27b18e74b966bb6ec86d280"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x410}}, {0x42, &(0x7f0000000440)=@string={0x42, 0x3, "bc796510e8f43dad7eb733e9962f897e0dbb0f47b1db3b3c4d6336ac4ade76763f57f538343806207784e2fed06384b68709a081a0ada09687475cc718c5d583"}}]})
syz_usb_ep_read(r2, 0xa, 0xde, &(0x7f0000000540)=""/222)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400a788", @ANYRES16=r0, @ANYBLOB="17090100000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb0500210000000000"], 0x64}}, 0x0)
executing program 4:
syz_emit_ethernet(0x31, &(0x7f0000000180)={@random="c1114edeb2f2", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xf, 0x0, @opaque="d73f3ea74f34ea"}}}}}, 0x0)
executing program 1:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8)
close(r3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r3)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003b40)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000040)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x732}]}, 0x24}, 0x1, 0x0, 0x0, 0x40448d4}, 0x20008000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe00000100000000040012"], 0x30}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', <r9=>0x0})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a090581", @ANYRES64], 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x101)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x100, 0xf4, 0xe3}}}}]}, 0x48}}, 0x0)
r10 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
prctl$PR_MCE_KILL(0x41, 0x0, 0x0)
ioctl$CDROMREADRAW(r10, 0x5314, &(0x7f0000002f00)={0x0, 0x2, 0x9, 0x8, 0x2, 0x8})
executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x10, @private=0xa0100fd}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x2}, &(0x7f00000002c0)=0xfffffffffffffffd, 0x0, 0x4, 0x7fff, 0x3, 0xf, 0x31, 0x2}}], 0x58}, 0x0) (async)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af24, &(0x7f00000001c0)) (async, rerun: 64)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000ec23000040"]) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
recvfrom(r5, 0x0, 0x0, 0x2000, 0x0, 0x0) (async, rerun: 64)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
setsockopt$inet6_int(r6, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) (async)
getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, &(0x7f0000000240)) (async)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000000)={0x0, 0xcba0, 0x100b, 0x1})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async)
rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0)
sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000000c0)='>', 0x1}], 0x1}, 0x3)
executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000c57000), 0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000181000/0x1000)=nil, 0x1000})
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0)
executing program 4:
sched_getattr(0x0, &(0x7f0000000080)={0x38}, 0x38, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SIOCGSTAMP(r2, 0x8906, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r3, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x3, 0x0, 0x3, 0x0, 0x2, 0x6, 0x10, 0x301, 0x38, 0xffffffff, 0xf, 0x0, 0x20, 0x3f, 0x4, 0x0, 0x4}}, 0x58)
close(r3)
execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="05a3a6a7104eadd3a8750b"], 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
executing program 3:
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
read$FUSE(r2, &(0x7f0000000680)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x29, 0x5c682b2b, 0x803020, 0x81, 0x3, 0x8, 0x9, 0x0, 0x0, 0x10, 0x6}}, 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r5, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0xffffff77, 0x6, '9P2000'}, 0x13)
write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50)
executing program 1:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x65}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "134fa38a4a15df8975d90dcf8dd03820"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x31}, @NL80211_ATTR_SSID={0x23, 0x34, @random="462e7e6bd77aa009b1436bda194a0286f059df064fd0663e16d7c933cb697f"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xfff8}]}, 0x68}, 0x1, 0x0, 0x0, 0xa0004}, 0x20004001)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000015c0)={'ip6_vti0\x00', &(0x7f0000001540)={'ip6gre0\x00', 0x0, 0x2f, 0xb7, 0x8, 0x15c3, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x10, 0x80, 0x4, 0x4}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000015c0)={'ip6_vti0\x00', &(0x7f0000001540)={'ip6gre0\x00', <r4=>0x0, 0x2f, 0xb7, 0x8, 0x15c3, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x10, 0x80, 0x4, 0x4}})
sendmsg$inet(r0, &(0x7f0000001700)={&(0x7f00000002c0)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000300)="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", 0xff}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="6c5b66a816c33d300cb1729bdeeab3834386710a01afb3de5ffff232e7814810b2c8496c1494990990e9c620aaea900c6779c4d5828f6d3d8ea66e36fac2609d300ac286218c706e68a83de2dfd836ab6a0d463f603ebc59e806fa6fe3a3be74b024287f2da9438b5c0b82c69cc461953b4eb9bef63131619a8c6c7cdaa60f87076c551fbc2bbe729f09327f529946008ce4fd3d57f3bebd5adba40895d85fa6da5c1660b4", 0xa5}, {&(0x7f00000014c0)}], 0x4, &(0x7f0000001600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x43}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x33, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10}, {@broadcast, 0x1ff}, {@loopback, 0x6}, {@remote, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x200}, {@rand_addr=0x64010102, 0x5ba}]}, @cipso={0x86, 0x6, 0x3}, @timestamp_addr={0x44, 0x1c, 0xdb, 0x1, 0x3, [{@local, 0x49e}, {@loopback, 0x7}, {@loopback, 0x2}]}, @lsrr={0x83, 0x1b, 0xc1, [@broadcast, @rand_addr=0x64010100, @loopback, @empty, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @local}}}], 0xf0}, 0x44111) (async)
sendmsg$inet(r0, &(0x7f0000001700)={&(0x7f00000002c0)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000300)="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", 0xff}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="6c5b66a816c33d300cb1729bdeeab3834386710a01afb3de5ffff232e7814810b2c8496c1494990990e9c620aaea900c6779c4d5828f6d3d8ea66e36fac2609d300ac286218c706e68a83de2dfd836ab6a0d463f603ebc59e806fa6fe3a3be74b024287f2da9438b5c0b82c69cc461953b4eb9bef63131619a8c6c7cdaa60f87076c551fbc2bbe729f09327f529946008ce4fd3d57f3bebd5adba40895d85fa6da5c1660b4", 0xa5}, {&(0x7f00000014c0)}], 0x4, &(0x7f0000001600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x43}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x33, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10}, {@broadcast, 0x1ff}, {@loopback, 0x6}, {@remote, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x200}, {@rand_addr=0x64010102, 0x5ba}]}, @cipso={0x86, 0x6, 0x3}, @timestamp_addr={0x44, 0x1c, 0xdb, 0x1, 0x3, [{@local, 0x49e}, {@loopback, 0x7}, {@loopback, 0x2}]}, @lsrr={0x83, 0x1b, 0xc1, [@broadcast, @rand_addr=0x64010100, @loopback, @empty, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @local}}}], 0xf0}, 0x44111)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
recvmsg$qrtr(r5, &(0x7f0000002a00)={&(0x7f0000001740), 0xc, &(0x7f0000002800)=[{&(0x7f0000001780)=""/118, 0x76}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x2, &(0x7f0000002840)=[{0x40, 0x0, 0x0, ""/42}, {0x30, 0x0, 0x0, ""/32}, {0x38, 0x0, 0x0, ""/35}, {0x38, 0x0, 0x0, ""/33}, {0x48, 0x0, 0x0, ""/50}, {0x70, 0x0, 0x0, ""/94}], 0x198}, 0x38, 0x40000020)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002a40), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002ac0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002ac0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000002bc0)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)={0x5c, r3, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fdad8845e2162c679bdcd71e010248ccc5fd866d077668b5"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008880}, 0x20004010)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002cc0)={&(0x7f0000002c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0x2, 0x3}, {0xd, 0x1}]}, @enum64={0x10, 0x1, 0x0, 0x13, 0x0, 0x9, [{0x10, 0xfe7b, 0xfffffffa}]}]}, {0x0, [0x30, 0x61, 0x51, 0x0]}}, &(0x7f0000002c80)=""/46, 0x5a, 0x2e, 0x0, 0x0, 0x10000, @value}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r4, r7, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r4, r7, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002e00)={'ip6tnl0\x00', &(0x7f0000002d80)={'syztnl0\x00', r4, 0x2f, 0x0, 0x80, 0x7, 0x41, @dev={0xfe, 0x80, '\x00', 0x24}, @loopback, 0x40, 0x7, 0x200, 0xfffffffd}})
r8 = syz_open_dev$sndpcmc(&(0x7f0000002e40), 0x4d19, 0x40200)
ioctl$SNDRV_PCM_IOCTL_INFO(r8, 0x81204101, &(0x7f0000002e80))
ioctl$SNDRV_PCM_IOCTL_STATUS32(r8, 0x806c4120, &(0x7f0000002fc0))
r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000003040), 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000003200)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000031c0)={&(0x7f00000030c0)={0xe4, r3, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x36}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9e329dbbec34fe51228961652fe9defdcb8ed31edadf602c"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x5}, 0x8000)
socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000003240)) (async)
socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000003240))
getresuid(&(0x7f0000003280), &(0x7f00000032c0), &(0x7f0000003300)) (async)
getresuid(&(0x7f0000003280), &(0x7f00000032c0), &(0x7f0000003300)=<r10=>0x0)
stat(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
fstat(r0, &(0x7f0000003400)) (async)
fstat(r0, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
setresuid(r10, r11, r12)
getpid()
syz_genetlink_get_family_id$tipc(&(0x7f00000034c0), r9) (async)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000034c0), r9)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000003580)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x38, r13, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x1c, 0x17, {0x2, 0xfffffff7, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}}}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10)
getpid()
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="000008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40000009078001c0a0300050200000300000000000002d575ec96facbd3f58838068b91000000"], 0x4e)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0)
sendfile(r2, r3, &(0x7f0000000300)=0xfffffffffffffffc, 0x3)
fchmodat(r2, &(0x7f0000000000)='./bus\x00', 0x20)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
chown(&(0x7f0000000280)='./file0\x00', 0x0, 0xffffffffffffffff)
executing program 4:
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x80000000})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb8, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd050}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "aabe8e3217e2290b7f434ba2bf0186990f61e43b55edea76fedfcf5ce82818503309"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x786}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20040040}, 0x80)
lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000240)='system_u:object_r:ssh_agent_exec_t:s0\x00', 0x26, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x0, 0xffffffffffffffff}})
executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xfff}, {}, {0x8f}, 0x70bd2d, 0x0, 0xa, 0x2}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24004010}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000a000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}}, 0x0)
executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x12023)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00eaffffff0000000000000000fd000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20)
r4 = fsopen(&(0x7f00000001c0)='udf\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e1109560c0d02bc04f8a939bcfb4a5544ece593b794e66a46a3007db7e6a87c1d201889f13cc37c017196ebeff16461bc99656c8443d66ebcd2d80967b8847acfa0725e498fde36bd08e951706e049feab756"], 0x7)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xa, &(0x7f00000002c0)=@raw=[@generic={0x9f, 0x3, 0x8, 0x0, 0x1860}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendfile(r6, r5, &(0x7f0000000180)=0x3ff, 0x8)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x100000}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x240440a6}, 0xc094)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5)
ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000080))
syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
executing program 3:
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
r0 = shmget(0x0, 0x1000, 0x10, &(0x7f0000ffc000/0x1000)=nil)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x2000)
msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4)
executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async)
bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x20) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r4=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000004c0)={{r0}, r4, 0x10, @unused=[0x1, 0x1, 0x100000001, 0x80000000800000], @subvolid=0x3})
executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x400, @loopback, 0x8e}]}, &(0x7f0000000100)=0x10)
setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)
executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_tables_names\x00')
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
accept4$alg(r2, 0x0, 0x0, 0x800)
preadv(r0, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0)
poll(&(0x7f0000000580)=[{r3, 0x2}], 0x1, 0x3)
executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x30, r2, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x2000c810)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0)
executing program 3:
r0 = socket$kcm(0xa, 0x2, 0x73)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x2, "5d4ac54a002011000000008000000000000002400e00311000"})
socket(0x3, 0x800, 0x4421)
sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000840)=@in6={0xa, 0x4e20, 0xffff, @mcast1}, 0x80, 0x0}, 0x20000910)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000000b9618706b3cda4ebaae31db2d51a883b8efc2ea2b56f0660bd6cb687b2ccda616fc138390d3a5b29d916aa449040a8c9c98d414158da33c8cc8c7ab6cfafbd81f2ddd4d175fa2452a371b4a23aba8ea35a1c2b40e092a4cab04c56dd7a4d1e250b555788ca4c46eeb9dd467c70c32488761a7ad01277b419743e5a4e485228bd7570dcee93d10c1a1630986026ffe670a4f904147809ab47f5f445a83771688683cf6c05bfc08", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x0, 0xa}, {0xfffa, 0x1, 0x6, 0x6e, 0x2}}}}, 0x17)
socket(0x10, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000200)=0x1, 0x4)
recvmmsg$unix(r3, &(0x7f00000001c0), 0x4000000000000bd, 0x2, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xe9)
executing program 5:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0x5539, 0x4)
executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x58}}, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x30, 0x3, "b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360e7749fe5bee390"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0x4, 0x2}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', <r8=>r6, 0x2f, 0x0, 0x3, 0x48507b3b, 0x4, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x7800, 0x1, 0x6}})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01032757c38d085641a7260000000c00018008000100", @ANYRES32=r12], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@RTM_NEWMDB={0xb8, 0x54, 0x200, 0x70bd2d, 0x25dfdbfd, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x0, 0x2, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x2, 0x2, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x1, 0x2, {@in6_addr=@private0, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x1, 0x2, {@in6_addr=@private2, 0x9dce094d2306ff73}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x2, 0x3, {@ip4=@multicast2, 0x86dd}}}]}, 0xb8}}, 0x0)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)={0x28c, r13, 0x0, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x174, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8512}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a0a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c45}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x10}, 0x8001)
sendmsg$tipc(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10)
executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) (async)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async)
syz_io_uring_setup(0x7762, &(0x7f00000002c0)={0x0, 0x5c22, 0x40, 0x1, 0x2ac}, 0x0, 0x0) (async)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f00000001c0)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "455a936e29dce970f9495ce7c5993abb4736e49865037714c0dde0c23a7f5e32", 0x6, 0x24, 0xffffffff}, 0x3c) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001800110117000000000000000a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)
executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000004c0)={0x2, 0x1, 0x0, 0x0, 0x0, 0x0})
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x80, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '$.\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffffd}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}]}]}, 0x80}}, 0x40800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004"], 0x528}}, 0x4800)
syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES64=r0], 0x0)
executing program 5:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0)
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000) (async)
syz_usb_disconnect(r1) (async)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') (async)
io_uring_setup(0x2e34, &(0x7f0000000180)) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0) (async)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0)
readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/193, 0xc1}], 0x1)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/186, 0xba}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/181, 0xb5}], 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0)
ioctl$BLKIOMIN(r3, 0x1278, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRESOCT=r0, @ANYRES32=r3], 0x6c}}, 0x20000014)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 8 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_open_dev$admmidi-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-readv-readv-mmap-syz_open_dev$loop-ioctl$LOOP_SET_STATUS-ioctl$BLKIOMIN-madvise-madvise-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0)
readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/193, 0xc1}], 0x1)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/186, 0xba}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/181, 0xb5}], 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0)
ioctl$BLKIOMIN(r3, 0x1278, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRESOCT=r0, @ANYRES32=r3], 0x6c}}, 0x20000014)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-socket$nl_xfrm-sendmsg$nl_xfrm-unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-socket$nl_xfrm-sendmsg$nl_xfrm
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0)
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000) (async)
syz_usb_disconnect(r1) (async)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') (async)
io_uring_setup(0x2e34, &(0x7f0000000180)) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
single: successfully extracted reproducer
found reproducer with 26 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-socket$nl_xfrm-sendmsg$nl_xfrm-unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-socket$nl_xfrm
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0)
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000) (async)
syz_usb_disconnect(r1) (async)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') (async)
io_uring_setup(0x2e34, &(0x7f0000000180)) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-socket$nl_xfrm-sendmsg$nl_xfrm-unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0)
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000) (async)
syz_usb_disconnect(r1) (async)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') (async)
io_uring_setup(0x2e34, &(0x7f0000000180)) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-socket$nl_xfrm-sendmsg$nl_xfrm-unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0)
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000) (async)
syz_usb_disconnect(r1) (async)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') (async)
io_uring_setup(0x2e34, &(0x7f0000000180)) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-socket$nl_xfrm-sendmsg$nl_xfrm-unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0)
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000) (async)
syz_usb_disconnect(r1) (async)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') (async)
io_uring_setup(0x2e34, &(0x7f0000000180)) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-socket$nl_xfrm-sendmsg$nl_xfrm-unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0)
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000) (async)
syz_usb_disconnect(r1) (async)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-socket$nl_xfrm-sendmsg$nl_xfrm-unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0)
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000) (async)
syz_usb_disconnect(r1) (async)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-socket$nl_xfrm-sendmsg$nl_xfrm-unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0)
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000) (async)
syz_usb_disconnect(r1) (async)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-socket$nl_xfrm-sendmsg$nl_xfrm-unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0)
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000) (async)
syz_usb_disconnect(r1) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-socket$nl_xfrm-sendmsg$nl_xfrm-unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0)
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-socket$nl_xfrm-sendmsg$nl_xfrm-unshare-socket$nl_route-sendmsg$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0)
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-socket$nl_xfrm-sendmsg$nl_xfrm-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0)
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-socket$nl_xfrm-sendmsg$nl_xfrm-unshare-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0)
unshare(0x6060400) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-socket$nl_xfrm-sendmsg$nl_xfrm-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x148}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-socket$nl_xfrm-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$EVIOCGBITSW-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0)
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-ioctl$KVM_SET_USER_MEMORY_REGION-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-syz_open_procfs-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-mmap-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
io_uring_setup(0x2e34, &(0x7f0000000180))
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_usb_connect-syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_usb_disconnect-syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
syz_usb_disconnect(r1)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_dev$evdev-syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-sendmsg$nl_route-syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-socket$nl_route-syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
unshare(0x6060400)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
unshare(0x6060400)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
r0 = syz_open_procfs(0x0, 0x0)
io_uring_setup(0x2e34, &(0x7f0000000180))
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, 0x0)
unshare(0x6060400) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
unshare(0x6060400)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
unshare(0x6060400)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
unshare(0x6060400)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
unshare(0x6060400)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
io_uring_setup(0x2e34, &(0x7f0000000180))
unshare(0x6060400)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program did not crash
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program did not crash
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program did not crash
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program did not crash
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program did not crash
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program did not crash
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-io_uring_setup-unshare-socket$nl_route-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
reproducing took 1h5m52.868057828s
repro crashed as (corrupted=false):
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor instruction fetch in kernel mode
#PF: error_code(0x0010) - not-present page
PGD 0 P4D 0 
Oops: Oops: 0010 [#1] PREEMPT SMP KASAN NOPTI
CPU: 3 UID: 0 PID: 8034 Comm: syz-executor419 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffffc900073ef9c8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81eff0bf
RDX: ffff8880257f0000 RSI: ffffea0000eacb40 RDI: ffff88803055bdc0
RBP: ffffea0000eacb40 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: ffffffff962646d0 R12: 1ffff92000e7df3a
R13: ffff88803055bdc0 R14: 0000000000000000 R15: dffffc0000000000
FS:  00007f26bc8176c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 00000000318be000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 filemap_read_folio+0xc6/0x2a0 mm/filemap.c:2390
 do_read_cache_folio+0x263/0x5c0 mm/filemap.c:3960
 freader_get_folio+0x337/0x8e0 lib/buildid.c:77
 freader_fetch+0xc2/0x5e0 lib/buildid.c:120
 __build_id_parse.isra.0+0xed/0x7a0 lib/buildid.c:305
 do_procmap_query+0xd62/0x1030 fs/proc/task_mmu.c:534
 procfs_procmap_ioctl+0x7d/0xb0 fs/proc/task_mmu.c:613
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:906 [inline]
 __se_sys_ioctl fs/ioctl.c:892 [inline]
 __x64_sys_ioctl+0x190/0x200 fs/ioctl.c:892
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f26bd087d89
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1c 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f26bc817198 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f26bd10c3f8 RCX: 00007f26bd087d89
RDX: 0000400000000180 RSI: 00000000c0686611 RDI: 0000000000000003
RBP: 00007f26bd10c3f0 R08: 00007ffc3d3d5f97 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f26bd0d8500
R13: 0000000000000016 R14: 0000400000000180 R15: 0000400000000198
 </TASK>
Modules linked in:
CR2: 0000000000000000
---[ end trace 0000000000000000 ]---
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffffc900073ef9c8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81eff0bf
RDX: ffff8880257f0000 RSI: ffffea0000eacb40 RDI: ffff88803055bdc0
RBP: ffffea0000eacb40 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: ffffffff962646d0 R12: 1ffff92000e7df3a
R13: ffff88803055bdc0 R14: 0000000000000000 R15: dffffc0000000000
FS:  00007f26bc8176c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 00000000318be000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

final repro crashed as (corrupted=false):
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor instruction fetch in kernel mode
#PF: error_code(0x0010) - not-present page
PGD 0 P4D 0 
Oops: Oops: 0010 [#1] PREEMPT SMP KASAN NOPTI
CPU: 3 UID: 0 PID: 8034 Comm: syz-executor419 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffffc900073ef9c8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81eff0bf
RDX: ffff8880257f0000 RSI: ffffea0000eacb40 RDI: ffff88803055bdc0
RBP: ffffea0000eacb40 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: ffffffff962646d0 R12: 1ffff92000e7df3a
R13: ffff88803055bdc0 R14: 0000000000000000 R15: dffffc0000000000
FS:  00007f26bc8176c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 00000000318be000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 filemap_read_folio+0xc6/0x2a0 mm/filemap.c:2390
 do_read_cache_folio+0x263/0x5c0 mm/filemap.c:3960
 freader_get_folio+0x337/0x8e0 lib/buildid.c:77
 freader_fetch+0xc2/0x5e0 lib/buildid.c:120
 __build_id_parse.isra.0+0xed/0x7a0 lib/buildid.c:305
 do_procmap_query+0xd62/0x1030 fs/proc/task_mmu.c:534
 procfs_procmap_ioctl+0x7d/0xb0 fs/proc/task_mmu.c:613
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:906 [inline]
 __se_sys_ioctl fs/ioctl.c:892 [inline]
 __x64_sys_ioctl+0x190/0x200 fs/ioctl.c:892
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f26bd087d89
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1c 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f26bc817198 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f26bd10c3f8 RCX: 00007f26bd087d89
RDX: 0000400000000180 RSI: 00000000c0686611 RDI: 0000000000000003
RBP: 00007f26bd10c3f0 R08: 00007ffc3d3d5f97 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f26bd0d8500
R13: 0000000000000016 R14: 0000400000000180 R15: 0000400000000198
 </TASK>
Modules linked in:
CR2: 0000000000000000
---[ end trace 0000000000000000 ]---
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffffc900073ef9c8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81eff0bf
RDX: ffff8880257f0000 RSI: ffffea0000eacb40 RDI: ffff88803055bdc0
RBP: ffffea0000eacb40 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: ffffffff962646d0 R12: 1ffff92000e7df3a
R13: ffff88803055bdc0 R14: 0000000000000000 R15: dffffc0000000000
FS:  00007f26bc8176c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 00000000318be000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400