Extracting prog: 8m55.301993002s Minimizing prog: 10m21.220499716s Simplifying prog options: 0s Extracting C: 18.378810959s Simplifying C: 4m15.494901496s extracting reproducer from 31 programs testing a last program of every proc single: executing 6 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range-close_range-bpf$MAP_CREATE-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-setsockopt$IP6T_SO_SET_REPLACE-io_uring_setup-bpf$PROG_LOAD-bpf$PROG_LOAD-openat-writev-bpf$BPF_LINK_CREATE_XDP-bpf$BPF_LINK_CREATE_XDP-close_range-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$inet6-socket$inet6-bind$inet6-setsockopt$inet6_udp_encap-setsockopt$inet6_udp_encap-bpf$MAP_CREATE-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-socket$inet6-setsockopt$sock_int-setsockopt$sock_int-bind$inet6-syz_emit_ethernet-socket$nl_route-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-sendmsg$nl_route detailed listing: executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = io_uring_setup(0x623f, &(0x7f0000000880)={0x0, 0x6ca1, 0x400, 0x1, 0x10000347}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c4e82ff00000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c4e82ff00000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @rand_addr, 0x5}, 0x1c) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) (async) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0182c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000008c0)=@setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x10}]}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000008c0)=@setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x10}]}]}, 0x3c}}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-socket$alg-bpf$BPF_BTF_LOAD-bind$alg-socket$nl_generic-socket-syz_genetlink_get_family_id$devlink-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_LEASE-socket$inet6-setsockopt$inet6_int-sendmmsg$inet6-set_tid_address-recvmmsg-ioctl$DRM_IOCTL_MODE_LIST_LESSEES-socket-sendmsg$nl_route_sched-getsockname$packet-sendmsg$nl_route_sched-sendmsg$nl_route_sched-pipe-mremap-ioctl$PIO_FONTRESET-socket$netlink-bpf$BPF_LINK_CREATE_XDP-syz_init_net_socket$bt_hci-bind$bt_hci-setsockopt$sock_int-write$binfmt_misc-sendmmsg detailed listing: executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(tea-generic)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x800, 0x7) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000800)=0x2, 0x4) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) set_tid_address(0x0) recvmmsg(r4, &(0x7f00000036c0), 0x0, 0x10060, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000080)={0x0, 0x0, 0x0}) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x0, 0x8}}}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x38, 0x2c, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffe0}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000002000/0x2000)=nil) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r6, 0x25, 0x1b, @void}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r9, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r9, &(0x7f0000000300), 0x6) sendmmsg(r8, &(0x7f0000000000), 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-connect$unix-bpf$PROG_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$ITER_CREATE-close-bpf$BPF_TASK_FD_QUERY-openat$cgroup_root-openat$cgroup_ro-close-bpf$BPF_GET_PROG_INFO-bpf$LINK_DETACH-sendmmsg$unix-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb-epoll_create1-epoll_ctl$EPOLL_CTL_ADD-io_uring_enter detailed listing: executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) close(r6) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r6, 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r7 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000080)={0x10000000}) io_uring_enter(r7, 0x52c1, 0x3900, 0x1, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getrusage-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES-getsockopt$sock_buf-ioctl$KVM_RUN-sendmsg$key-syz_open_procfs-ioctl$KVM_RUN detailed listing: executing program 0: getrusage(0x1, &(0x7f0000000280)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000540)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_mptcp-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x2400000, 0xff, 0x0, 0x6, 0x7f, 0x1, 0x6, 0x9, 0x7, 0x7, 0x0, 0x2bf2, 0x36e5, 0x7, 0x9, 0xffffffff, 0x3, 0x4, 0x9b, 0x2, 0x2, 0x0, 0x5f, 0xd00, 0x4, 0xcd9, 0x84c7, 0x2, 0x4, 0x1, 0xfff, 0x8, 0x5, 0x2, 0xa, 0x6, 0x9, 0xd6, 0x0, 0x5, 0x8, 0x8, 0x4, 0x1, 0x0, 0x7f, 0x3, 0x7, 0x7, 0xb7, 0x8, 0x8000, 0x800, 0x78, 0x4, 0x4, 0x10000, 0x555, 0x93c, 0x7, 0xffffffff, 0x0, 0xfffffffe, 0x4, 0x3, 0x7b4f, 0x1, 0x200, 0x80, 0x610f, 0x6, 0x7ff, 0x6ce1, 0x98, 0x404000, 0x1, 0x0, 0xaac, 0x53, 0x3, 0x2, 0x7, 0x1, 0x1, 0xdbf4, 0xfffffffe, 0x80000000, 0x1, 0x0, 0x59b55464, 0x2, 0x4, 0xe7f, 0xba5, 0x10000, 0xfffffffb, 0x8, 0x3ff, 0xb85, 0x4, 0x3, 0xdd, 0x800, 0xbac6, 0x4, 0x93, 0x8, 0x3, 0x40, 0xffff, 0x6, 0xfffffffb, 0x5f, 0x0, 0x0, 0x0, 0x6, 0x3ff, 0x7, 0x1ff, 0xc8c, 0x7, 0x5, 0x2, 0x80000001, 0x2, 0x4]}}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_mptcp-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x2400000, 0xff, 0x0, 0x6, 0x7f, 0x1, 0x6, 0x9, 0x7, 0x7, 0x0, 0x2bf2, 0x36e5, 0x7, 0x9, 0xffffffff, 0x3, 0x4, 0x9b, 0x2, 0x2, 0x0, 0x5f, 0xd00, 0x4, 0xcd9, 0x84c7, 0x2, 0x4, 0x1, 0xfff, 0x8, 0x5, 0x2, 0xa, 0x6, 0x9, 0xd6, 0x0, 0x5, 0x8, 0x8, 0x4, 0x1, 0x0, 0x7f, 0x3, 0x7, 0x7, 0xb7, 0x8, 0x8000, 0x800, 0x78, 0x4, 0x4, 0x10000, 0x555, 0x93c, 0x7, 0xffffffff, 0x0, 0xfffffffe, 0x4, 0x3, 0x7b4f, 0x1, 0x200, 0x80, 0x610f, 0x6, 0x7ff, 0x6ce1, 0x98, 0x404000, 0x1, 0x0, 0xaac, 0x53, 0x3, 0x2, 0x7, 0x1, 0x1, 0xdbf4, 0xfffffffe, 0x80000000, 0x1, 0x0, 0x59b55464, 0x2, 0x4, 0xe7f, 0xba5, 0x10000, 0xfffffffb, 0x8, 0x3ff, 0xb85, 0x4, 0x3, 0xdd, 0x800, 0xbac6, 0x4, 0x93, 0x8, 0x3, 0x40, 0xffff, 0x6, 0xfffffffb, 0x5f, 0x0, 0x0, 0x0, 0x6, 0x3ff, 0x7, 0x1ff, 0xc8c, 0x7, 0x5, 0x2, 0x80000001, 0x2, 0x4]}}) program did not crash single: failed to extract reproducer bisect: bisecting 31 programs with base timeout 30s testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 3, 40, 4, 29, 2, 2, 14, 28, 30, 5, 16, 12, 5, 26, 30, 7, 20, 10, 30, 9, 27, 6, 11, 22, 12, 22, 4, 30, 10, 37] detailed listing: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x5, 0xffffffff, 0x1}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000000000000500004000000000"]) executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r0, &(0x7f0000000000)=""/42, 0x2a) getdents64(r0, &(0x7f0000001ec0)=""/142, 0x8e) executing program 1: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="940100047fcef6dbb2760840a468e8f9ad1cadddb8b47c67fa7d4b1138dd76a3930d00000000", @ANYRES32, @ANYBLOB="0e00c7000401168462b495e436d300002800c7008c0700040101040208060106060610020504070009000407040704044e5195c4240982cf2400c7000300050404030906d9027f05100103011a050300c105f807112ead"], 0x94}}, 0x4040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0xc4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x3, 0xff, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_client}, {@uname={'uname', 0x3d, 'rfdno'}}, {@cache_readahead}, {@cachetag={'cachetag', 0x3d, '^'}}]}}) read(r3, &(0x7f0000000040)=""/4078, 0xfffffffffffffef5) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="940100047fcef6dbb2760840a468e8f9ad1cadddb8b47c67fa7d4b1138dd76a3930d00000000", @ANYRES32, @ANYBLOB="0e00c7000401168462b495e436d300002800c7008c0700040101040208060106060610020504070009000407040704044e5195c4240982cf2400c7000300050404030906d9027f05100103011a050300c105f807112ead"], 0x94}}, 0x4040) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x6, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0xc4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x3, 0xff, 0x3}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) dup(r5) (async) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_client}, {@uname={'uname', 0x3d, 'rfdno'}}, {@cache_readahead}, {@cachetag={'cachetag', 0x3d, '^'}}]}}) (async) read(r3, &(0x7f0000000040)=""/4078, 0xfffffffffffffef5) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) (async) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040040) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000240), 0x2980, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000280)={0x4, 0x2}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) chdir(&(0x7f0000000080)='./file0\x00') r4 = syz_clone(0x80002080, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x800, 0x0, {0xa, 0x0, 0x80, 0x0, {0x0, 0x4e22, [], [], 0x0, [0x1]}, 0x0, 0x100000}}, 0x4c}}, 0x0) r7 = accept4(r5, &(0x7f0000000040)=@ethernet={0x0, @random}, &(0x7f0000000100)=0x80, 0x800) r8 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) openat$cgroup_ro(r9, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x18, 0x1407, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r9}]}, 0x18}, 0x1, 0x0, 0x0, 0x4804}, 0x4000040) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11, 0x80, 0xb3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x2400000, 0xff, 0x0, 0x6, 0x7f, 0x1, 0x6, 0x9, 0x7, 0x7, 0x0, 0x2bf2, 0x36e5, 0x7, 0x9, 0xffffffff, 0x3, 0x4, 0x9b, 0x2, 0x2, 0x0, 0x5f, 0xd00, 0x4, 0xcd9, 0x84c7, 0x2, 0x4, 0x1, 0xfff, 0x8, 0x5, 0x2, 0xa, 0x6, 0x9, 0xd6, 0x0, 0x5, 0x8, 0x8, 0x4, 0x1, 0x0, 0x7f, 0x3, 0x7, 0x7, 0xb7, 0x8, 0x8000, 0x800, 0x78, 0x4, 0x4, 0x10000, 0x555, 0x93c, 0x7, 0xffffffff, 0x0, 0xfffffffe, 0x4, 0x3, 0x7b4f, 0x1, 0x200, 0x80, 0x610f, 0x6, 0x7ff, 0x6ce1, 0x98, 0x404000, 0x1, 0x0, 0xaac, 0x53, 0x3, 0x2, 0x7, 0x1, 0x1, 0xdbf4, 0xfffffffe, 0x80000000, 0x1, 0x0, 0x59b55464, 0x2, 0x4, 0xe7f, 0xba5, 0x10000, 0xfffffffb, 0x8, 0x3ff, 0xb85, 0x4, 0x3, 0xdd, 0x800, 0xbac6, 0x4, 0x93, 0x8, 0x3, 0x40, 0xffff, 0x6, 0xfffffffb, 0x5f, 0x0, 0x0, 0x0, 0x6, 0x3ff, 0x7, 0x1ff, 0xc8c, 0x7, 0x5, 0x2, 0x80000001, 0x2, 0x4]}}) executing program 32: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x2400000, 0xff, 0x0, 0x6, 0x7f, 0x1, 0x6, 0x9, 0x7, 0x7, 0x0, 0x2bf2, 0x36e5, 0x7, 0x9, 0xffffffff, 0x3, 0x4, 0x9b, 0x2, 0x2, 0x0, 0x5f, 0xd00, 0x4, 0xcd9, 0x84c7, 0x2, 0x4, 0x1, 0xfff, 0x8, 0x5, 0x2, 0xa, 0x6, 0x9, 0xd6, 0x0, 0x5, 0x8, 0x8, 0x4, 0x1, 0x0, 0x7f, 0x3, 0x7, 0x7, 0xb7, 0x8, 0x8000, 0x800, 0x78, 0x4, 0x4, 0x10000, 0x555, 0x93c, 0x7, 0xffffffff, 0x0, 0xfffffffe, 0x4, 0x3, 0x7b4f, 0x1, 0x200, 0x80, 0x610f, 0x6, 0x7ff, 0x6ce1, 0x98, 0x404000, 0x1, 0x0, 0xaac, 0x53, 0x3, 0x2, 0x7, 0x1, 0x1, 0xdbf4, 0xfffffffe, 0x80000000, 0x1, 0x0, 0x59b55464, 0x2, 0x4, 0xe7f, 0xba5, 0x10000, 0xfffffffb, 0x8, 0x3ff, 0xb85, 0x4, 0x3, 0xdd, 0x800, 0xbac6, 0x4, 0x93, 0x8, 0x3, 0x40, 0xffff, 0x6, 0xfffffffb, 0x5f, 0x0, 0x0, 0x0, 0x6, 0x3ff, 0x7, 0x1ff, 0xc8c, 0x7, 0x5, 0x2, 0x80000001, 0x2, 0x4]}}) executing program 2: getrusage(0x1, &(0x7f0000000280)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000540)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c000a"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) (async) r2 = accept$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/140, 0x8c}, {&(0x7f0000000380)=""/34, 0x22}, {&(0x7f00000003c0)=""/211, 0xd3}, {&(0x7f0000001680)=""/203, 0xcb}], 0x5, &(0x7f0000001780)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000001840)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000540)=""/7, 0x7}, {&(0x7f00000018c0)=""/107, 0x6b}, {&(0x7f0000001940)=""/65, 0x41}, {&(0x7f00000019c0)=""/55, 0x37}, {&(0x7f0000001a00)=""/239, 0xef}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/193, 0xc1}, {&(0x7f0000001c80)=""/99, 0x63}, {&(0x7f0000001d00)=""/90, 0x5a}, {&(0x7f0000001d80)=""/227, 0xe3}], 0xa, &(0x7f0000001f40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}], 0x2, 0x40000000, &(0x7f0000002080)={0x0, 0x3938700}) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x14b101, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_NMI(r5, 0xae9a) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f00007a4000/0x4000)=nil}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r8, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r9, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) r11 = dup(r7) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r11, 0x0, 0x1) ioctl$IOC_PR_CLEAR(r11, 0x401070cd, &(0x7f0000000000)={0x80000002}) (async) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x27) executing program 2: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r2, @ANYBLOB="fdff13000a0001000180c2000000000008000f0001"], 0x30}}, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03220000080086dd480300"/26, 0x1a, 0x24048050, &(0x7f0000000280)={0x11, 0x0, r4}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'pim6reg0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c6761636865040bed45d36782a72d667363616368652c76657273696f6e3d3970323030302e75"]) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x6000) r5 = socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000001880), 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00') read$FUSE(r7, &(0x7f0000006140)={0x2020}, 0x2056) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000040)={0x9, 0x2, 0x6, 0x7}) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020200090100000000000000000200010000000000000000040000050003000500000000000200"/65], 0x50}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1d, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x3c, 0x1d, 0x800, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, r2, 0x10, 0xea}, [@NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_VNI={0x8, 0x7, 0x9}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x4000) add_key(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440), 0x0, 0xfffffffffffffffb) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') preadv(r10, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) executing program 2: mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) open_by_handle_at(r1, &(0x7f0000000380)=@fuse_with_parent={0x18, 0x82, {{0x4, 0x80000001, 0xec}, {0x5, 0x8, 0x1000}}}, 0x280040) linkat(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) (async) open_by_handle_at(r1, &(0x7f0000000380)=@fuse_with_parent={0x18, 0x82, {{0x4, 0x80000001, 0xec}, {0x5, 0x8, 0x1000}}}, 0x280040) (async) linkat(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x0) (async) executing program 2: getrusage(0x1, &(0x7f0000000280)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000540)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x80000, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240c80c0, &(0x7f0000000240)={0xa, 0xe20, 0x0, @mcast2}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x4, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4010, 0x0, 0x0) executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x200) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x30, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x14}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xee}]}, 0x30}, 0x1, 0x0, 0x0, 0x10004c80}, 0x41) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x5, 0x4, 0xfffffffd}]}]}]}}]}, 0x9c}}, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, 0x0) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0xc0049364, &(0x7f0000000180)) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r7) (async) r9 = syz_open_dev$I2C(&(0x7f0000000180), 0x4, 0x80000) ioctl$I2C_SLAVE(r9, 0x703, 0x9) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x60, r11, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5d36616017"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]]}, 0x60}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, r8, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfa0b9000) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) accept(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, &(0x7f0000000580)=0x84) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x1, 0xd000, 0x2000, &(0x7f00002be000/0x2000)=nil}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04004220"], 0x7) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) fsopen(&(0x7f0000000340)='iso9660\x00', 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 2', 0x1b) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000440)='\b2\x7f\x1f\xbf\xa6\xcf0\x9d-J\x19\xba\x82\xe8\xa9\xb4=\xf6C1\xd13FE\xe2}\xc5Y\xe5\xeb\x88\xb4\x88\xbe\xc3\xc3\xcbx\x04\xc5\x8d>\xce\x9b\x86\xe9\x88\x9b\x999\'o\'pm\xeb\xa9\x9b\x1d\x9c\xfa\xa4Q&T\x9c\x98\xfa~\xd0\x93\x00\xc6\xf4\xf9\x17\xa4C \xef\x89\x00\x9f\xfe>\xd6\xb2jM!\xed\x97\x0e\xed\x1b\xc5\x93\xde3/\xbe\xc5\x14\x8e\x00\x00\x00\x00J\xe2\xcc+x\xd0W\xe5\xf7\x1f.ii;\xaf_\xd9H\xc3\xe9\x05\x00\xf8@\xa1\xcd\xbd%\x1b\xff\x1d', 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@mpls_getroute={0x24, 0x1a, 0x1, 0x70bd27, 0x25dfdbfe, {0x1c, 0x10, 0x14, 0x2, 0xff, 0x0, 0xc8, 0x3, 0x1600}, [@RTA_DST={0x8, 0x1, {0x200, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8890}, 0x2) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') setns(r3, 0x20000) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl0\x00', r5, 0x0, 0x4, 0x0, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x10, 0x6, 0x4}}) close(r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x0, 0x1, 0x401, 0x0, 0x4}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000480)={0x1, r8}) connect$netrom(r1, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x1a}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x188, 0x4c, 0x1a, 0x0, 0x73, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x128, 0x188, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3893b573a807d00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x38}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x188, 0x4c, 0x1a, 0x0, 0x73, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x128, 0x188, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3893b573a807d00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x38}}, 0x0) (async) executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4f22, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2005}, 0x1c) socket(0x10, 0x3, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001240)=""/111, 0x6f}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000200)={0x4, 0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x40}}, 0x0) close(r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="40adc400", @ANYRES32=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r7 = syz_open_dev$swradio(&(0x7f00000048c0), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r7, 0xc02c5638, &(0x7f0000000140)={0x5, 0x4, 0x9}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffd6b) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x7b, &(0x7f0000000000), 0x8) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x5c, r4, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c325187ff01bac82a06618999b88b74a6a9657c766a0ba59"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2fb029a9f71c2afd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fa00"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000800)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x34000010) socket$inet(0x2, 0x5, 0x1) executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = dup3(r0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000055090100000000009500000000000000b7020000000000007b9af8ff00000000b5090c00000000007baaf0ff00000000bc8608000000000027080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70c0000080000001600000007000000bf9110000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000020000000c"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r13, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x1, r14, 0x1}) ioctl$KVM_IOEVENTFD(r13, 0x4040ae79, &(0x7f0000000080)={0x1000, 0x0, 0x1, r14}) setresuid(0xffffffffffffffff, r9, 0xee01) read$FUSE(0xffffffffffffffff, &(0x7f00000030c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000010c0)="60c5c96987041415383cdc9c80e3a078949f5db2582dfbfa50f45cff2043de24c08a0e1a7430d8dc9df2279845f0010c815abf9a2a2d7c75b8f27a66e0ad627abb0650c99bd5ae06e7b72986df186b3d90d9a287236eb36414d0ca78166522850d8227edc9c5471cd8cca42eb89c78299d00f10931ec8b4c0a644e6017583d36610a72c4fea6e068efedfb0a4463f2a9e244570d1367b7a2968ea832b300293aa16037957ba7dd2139f4234bfbb14af36c6e40b0cf154e48937059ae1afb87cb548a34681c500cb56eb508a019e03813a7ca429f93b75ee8ce839524f3f00d949edc9aade11af3446f4be721d866c69d254e6c56362af6ba68cd9caf014fe62b551eb226f628b346f2c5f831c8ea08eda607691d3e02008e6adbaee79e053ac71447e963b2c3888ca6465f675143a0126346cd85d15eb7761cb84db53495986fe98a7a24208653f267c8c118e4b2c035c93a22228f33798c0e20b85387d056aa81e4f9e4e8e6b4047ce6bdc460138726426991a5a6893b4aa3c1306bb6419683fe110c6e399856d0d91921ef6e0f149253bd756c4736b74d2601481b1d40f66a7c6ec5b722b6bd824dfa89f7befd23b106c5269bbcbd34b65a3a1d1fe7fc6d8c7f0b3ecead1f20b777c0d2f9fe1527ff46139521048a0eb198f924f42513415e84710f8e54d630dc78998f8525f068815101e2ed3c67472d3ad084a7e8c4371a6451a3d1a0a05110427f724c0e83f3129fa5c5e400ea72d3bae76002bca8e3ae40c6ca741df42a0139fd526121bb4f1991ffafcdc56c7584abfd9807ab7a7132c26a5b931ed44e5dc4a74aad2f6667a79f0f8fa864c5b4ca89046856754cff21fb92a4aa26a449b1c9ebbc38362849ea49de975212e4e004f8d8e6de073f3748b1518406d57f66d83cca5a765bb74d18ddbeac379cb60e0fc3537f029cd08ad098a3871141f63d9e044f872833887d86431ff6e926d51ad1521773a05ce08331342db3ef6103da0d82fe69d5bb60250a8d701570bb396b2a1cc621e9513c4b8809b8d893c8e5f2fe9e9303695718bc24a3db7f22f60c79c76b21cc43864f2a0ae288965e941a8981215e1c805832b8a489a40273e6efe9e4809b2d8d48954f489dd40ee1340da0e188c2887ae3f4bb8a7983655d2b7cdcf884ce2146512f50eef62bad91e8b9b0e4cf931f706e721896802ec091be158fb62b60574cfd1692bdc6523586d1180ca78f813531407e39a52964b0e2ac2732b38d78d25b3d71f05d32324249159a70874b583f3721a8519b8f7ed656648df582918a808f0cf32736a258e2cdbdf0a875d7846c63b45d05540bbac51744ba834cbebca20ff98a33ff6b3d03dfcfdada96b810dbd3b3e407c69bc5d35a799c4e7dcfb3691f1652e3231c9adf4e08120945433db58ff966ce9e467f2420c97f3218ffe7af21aa4d8239926893a2d9b48fc6c2f5188a40aa0130cf0824531cc9d0e3bb3f7d047cc5bf37afc873b09207a760a453942ca26f95955c32f6136c43be38daadb7ae8d255240fc8912ba345c58559214534736bab0a2f0d818eaf92fe6eab5543a0735a68c7ce823ff61320f25d1369dad65d0f02832628b36367044ebc68fef84f1d9242d7a6cf3d9cdd6d7286bb1dfd9f4178d8b815ce10007b58a1e1c85e45febb293da1305ea12f52ab3eab929db37b0f6739bc7463201479272ba317a3fdbe2afb37e00e7af65ecbb8d6c4c377bf4d93742757cdd028f15c3b0dfd26e9eeee313eb2cb8171fcba8d9e0758b48292ac5d7646ac1e1c8d17c041721cc99c33f525f83366641ce906617071e36688710e3aa27d4c6588852b977f386e2de3595756bc4db355e83f88557f7d652e225143964a2cf4da8c5382ee9fe31c327c53ce668edf89f4e34c5bef85e415dccde170ec64949f61c7cac08c7ad24c4765e57da9660c4922b8737ad0482b00849d2d5923aed4a1521ea97e6511bf4a66d642af6fb1f39c607716d6b4311257389176968e695aea7fed251054ab3d0ad39d3252a23677c81ac0973e8c1666feeafa454cd5dca2a5a42c67cd10bb96a151a802834c6893061197bb9d35f9f1949b3af711c61e959a76497921213ed41f9c50ad6324a279fa7af1f4ba5b034382b2baed5108b6486bc37ee763035cf620615c8b936b8fe9b0d1ac4968e6cac8cf9510626f4af64d8412107e5d5219a53dcf30b96096ddd263f035c672294528a3ef2ba094859728b76fa31de7122a575a6064b452b8b48c5ece787134140f2447501dc55364c378b3f1e73558f3e2b7741457b00c15c4982db5eaf1e85bd5674e6b98ee998849791949b4fda5377d4666c47c6d65157fa24fadd949a2aeef87c98f90290cc6691b595f8fd84d9af0249002140c5f78d39d6ab30108c8661a20863c18d1a5be4d4096c5ac4f36c18a8512442e9ac8973e947127e4228aee1318ba0b2c8e6f825eebb93ed50b22a174a66a93938a14a408f64c69b3d6568ea3c59f3d99efeeec0d5a8fc89af270130ce50bd0f8a9a88a365788ca749e4a0e420898ce24d78afa953c6e13f1b0b290026de06392ce8d6a72e65bff186f3a1628de78b58e7e4cd4ce259044193712bd37325f9dde19d1c33862aa296c6dab7519830bdcf30101c90f60aa7b5b804175862bfde38412fb4ba829dcd0eafd96c975c62dfc8555eaae9310fda64b16996794339531b4e04545d60ccef1793d5314a4e2748915cff3bf42747ccbf16c283291fbca35e36e8f9b95f3003c9bebb7d37f15f15df384f8c40d62ff227dc19543386677ec11968b0bca86734f49172f8efc8b19af6177be676beff68fc152979c9d5d8f804ddbee2185eb5c2045abcf53b3dbef0c1a2a088e0ef366298ed43af1cbae992c6fec922553c575506fc98e9679fbd00626358f752cdc0ba53231bf05a4e35a40d0a823e38dab5df5df8ef6bc81a6f92b6aa494ac001d5c9568399078fa487ac952f1a2ff5ec8a09248d38215f0b9e50a7b3f22980ba4362910df71087b49f45858967c91b2b04246c4b4770c4e55c10e45f35df1992c4bed4f384fa06ea3955eb5f5fcc8710701236ccd3fde803812b0d24975dc6e8d7c721f605f8d6bff42d94d7888b83ba132f54d35703766d95bd7fb46c3430459e4f761f4efaa9af32a490dffaacd5c3b28ea14561d6aaa86c200dabb2ec474d3c0284cee4e9cc5535f860cd69d3e09bb9dcfc97401772466ed1fa94a92474cdf4adbf89336bf7843ddf3087992dc1b69a66732473a552251dab20e05aadf75fa9b11afa69b091b9c4ffe90eeccce199e03ffc7cd2fc21e5eee86cf402a72df46da2300f2206b52fc4a8ca58f589d924c77107bbec8343e897604a941dda049de813b94b8f69f0b0c9aeda413b968ef946eaab76aedb3010418193fe38111de10d444078744896a3ec953dcc36dc0d7e51b545c895e788ed75913dcf2dacaee114b2a5a8f8a6710dfc5f0dab40cae4f18b6e8dfbad5790077cc45ea5f318828e62c8e858ebb066354bcefeaf6927b7ce12acff4f8be5560b8ffafaef89e4dde49d173f0bdbdb19e3fb886f11ff0f4d143d549659ff2f37f39dc7555f085dfa286779f2bf1b69372ee9cd08e28e6384a5d0be6c7b066b5c57991d188013da03f0a8c2438c78a72bb9a4dfc4889116565e939d428cf258794253bb1765f5638ae002dc5525f59cd1f9def2c52bd71a06e2b672fcec055d43731f854b6ae0d6780f875f5e4a6a093d2c7a5e5f13b773175bf2ef105134f709aeb02c1132398e634fb49a0ec766082966b44f8b153c71ebd2c16a3c2fe33d620635a3408616f6dde348a739ded0248c0f990bc157ff229839ea393fdeca57b2105da412ffd4c18427531d7b850c350b304d024dc56e0f4486b2ce132fc8b095c2462f2e348e82b97b8de7a0834a92d090607a5a5abb11f44ef6d4e31309c4de9b0f08ad066fc6f824db5f4a9b52d6ee2b21329eddeb8b180e58bc4c4ac292d6ccec69817416bea822f546ddba75b01b8ffc2afc132de89db67e4a07a563234f98dab18a7675d9649361186c2675beadae3bb3888138d6fe44bdfe74953d68e240cbd8876f504be7fa9076fb3058fde28153500ce597a18c1376fb84d1f0bc2e5bd79b3eb9c1aed2c10d0de97902c6b0ceae9a3afeff1a28438fb116e0c388ee184f21438ebd6a655975f17a5f36986c27ae00fc3510f01ba45450632561130c2370e49fde3204c0814ca385ce48bb087bbe38e54e9663bbcb11ff9329603c454db1e00186d68bf051caf34687775f53825784fc64119b010b31d2b0366ad38046219d4a87066af209009c7ddbba7ad1dafa1db4eed053b88393695bf8f2e3dd6bef7fd791f66d197ad6401437fa29c8229beb18ea9bce8cbacff49669a0ccbbaa8af71986f70bcd3bcdbd55e3807c074a2049c38a86c2eda2e7f7716b55adb24b75901391df33fe66bdb0bd90fe7496cc0dd3ba15d2d4f0b8b8fcf2029cb5557b9e6cd11fbf9b9235d5ba87fd791b76d23b9c23d0d0170c665f4f99dbd17b080389c500306189fb2a20e4d70b7d9582cc0a144d1aa9c34c1ccb71de7fbd7a0c8bacfa6bdd0c88ffa204b29bce2e9f408781cff757524a60b3705cf5b9c55169b9a8d06b1fdcf9b36f651fc6fa328aa3fa9c3df53df7c25eb2bc072329c4da658925970a135aef7f49b26ab1805af7e21a51e3f549a99ea3dc42407b47336c8b2f7e0d1d88b0557b0ca00eee672dfe132a6e3d4545a13af4cc48ea6fdde790eb0e52c91fa76d554919a27077e1fc715c1b25e451d497ec59c40fb1d05fa75f181753ce4f32517ee7c9023292c34144d9d37d146efe1cf741572209fb8022d54083358f48d1d47bf7e5fe96b767b2b74451a69b7ffe085d521080dd5feb20c8b35084c51398a935aa6d7ecb760f9a7f2a43b61247380660ceb828957a14745fd54ea492849d6691bedc92c7a2367d9ffc60dcb9df027f989c769d88848b8b5dfb1822c088b805240b6dc059d6f780751f1754e2ce6a39043d42217b008a8320a2f21cdfcbb2a85d1bd3a437675ac23101148a22cd1b037593d399168f1394671a53fef1c2284e6920f080c70fc3033ce84967645bb3ec6b218d0b34384ea4734bc40a6fc31cd1918cbfc08f71e73d3b1343934e2e30436e607aec52a6e2b47cb77eb96f6b573e8af55a608d8c8ad97939133407bc208609027a325d2a84a61fafc95355a5646c367117973641f5a9eaf8dc6e4e79e49f6135c6da95ff58336d62ce48bf227609d5981fced5c0e0682813d4994750995b97d79265f036ccbc4ccb9fd4caa3266c05c68b69e62578880b2be3225fa75772574977d984ca3eecd21b9accadd99f9e11ce71302585fda6012f36b4469059d0128b6abc5935a8738878a9dd541330f4352e5e26f8877d1f05edac0769fa7576f479e74582b725d4cfbdae0ef5ffd9a40318988635e4beb3d4ee9c22f6481472ae1d904c7681d5156df59019d28337ad9fdb86add22f6ad8476ee70100acbbde304449c6e4b836c1a2c539db9d62881fc2b813e49ed201d997970961afb915f6e267389adcd5c0f764a8b82052906d760215a38921c55883ba4a1e06999a479f6003b9010614298695f94aa58df5e739e97bd8375276fbc9908987b29994ba62639aa8d09f35683f804066a2e97aa1184260d9c4f7b47811952049b343c9c01dad5ce8956466484ec98e61726a317cd2693d480e90ec7cf63024c1364cace1fcf0224e4f9011a6c65a52b4fcc8de3a8e7a7f09353368cf279dcc2fbc248c1990c2ed57f4a10cfbddf553923f8b07610635d10cafe7b934c4d02f9967edf77e724079b6200bc0701caeed115daaaf4d397e1bddea236e024a35844a73e83cbd3cebe1fc01ad5db28b7b398bc7cdb35518fa03e8802e3e7a68c3b64f5ba9b965feb395522974b16768f4ea96fa23d7087e16d2e800aaa0d8fde0ae0f1d7c057dd8978f21d7c17069ccce7e558dc9b56cd82c20c44873ee516499d88c99d3be38559963682add352b78800e43f71df1d34458bdfa355d2a0ee17994756e5f0900ab1bbd9337ef7c5b98c05e749e59a735f78ec5f31fd65a103246a5fcafeb4fd1dd083017de0de920ea58fe6c8159c3b5b79410f0240f7079ceda2eebfb4c613ad1660de5fa6cff251cf33da1fa5f4af91f574d573d1a1a950608d875f2e7e279b850adaa917926a506e06bfc47408d968f41b2a9dba60966714ce4a257ee048060c4e9d8361fcbe28ac3de629e861830f26b4a08f4892a7cb7792841f4c2432a4991e1486a3753124a2571c5445a825d69164b1b870e33643c56910c8c43384ab69ba71f5e817fb545f370c7e2a0b4b21cb41d3cf4072c49b13bb680553a84949c1d75e6a801aaaff429d2b32afb5cddfa0ead4806fdde0fc20f8a6ff2b132e7b5ab9058d70a1e21738a31b4c7ffcc8003c0be47b4fc48ff15e2de640d39a14796fa48c7fa3300e0a62b914b8aa4d288ba58e067695409b2b074dfb10615132518513de18f5978b0f90f41d0d576ed7a7d3240d1dcaee510ba3c3df1e4c32068a67b40e3bba462685e946a4ae02363b5e3f599bb3b7df61cd52ba2a248f3228987b18f013aec4ccfc1c300e06a362892fbe0ce1f0c9feff37f57f39a872ba0a9f2e0c23ea9018408720b0b67ccfc234a5f1b9e9030246c18e379bed9b33cd8f59de2cc6c26477e4f132967eeb73c9171c9d2799142cd83c9eaca3de4af1e5ef09efeb11fea51b9b7c4ebc67d4e088f9d8ea005f614e67c1273ab792d5ce3615a919060d7bdb7644703aca58493cab9b1fd8894910277e31b0221994e31cc7ca51792e29609246615ce93376c2ec3a67973b6be903ae885647a7eb72a1f48dd28221ec00a459e7f8133bfb8d6cff7e9587ed64c733eba685a298d84af30de7799953bc577c158097dd119b1dc4b8cf817f66b6f5fb915b594af049119362ff441bd130c77c9259ee075d49724fb0ba8da1e98a2b411ab661ba9efaffc2dcc70faf808c5c88c0cc50be6bdf9edfad224bf014037ff59c3968b104b81fd4eaf75db9b0dc62f0a57ca73f84f75051a40d268364f8ca81230aef09bf8ccbfddbbbcf136b3abb0b10daf0e8dc92ddb6ac84f505be807a6a815ce7131ec2cbb3f9133d82f70e9702d67f9c637e470bd88df40ca71ddace7e5f01ca09d95b932c8cb156f4da4a7f212812d290e72e97cefe57f995a35cfd69d356d175084148ca6b3574296e99d6692e598798e4d32e1267c26d736cf66c70724ad4190bd2fab8802de9e040f2e247e5ddbdbe45b424baffc5e7a5a5482797409581e5fb07ebf15ecd38f123e326993b9f65bc0404f1bbe09b8ae9a9d7b76ccd2d74f5555859e3a0f31c12c5b79320d895b5f2aeac084721b46ed2c38daa176711d804824aeddb01a3aca3a4123f2a3bb2cf51f7a966221b26458d034c802ad00749f9e9bf1bdf93cc95a1ac651c6955eff6fb49bd836f5064db7d104d3b74fa1002f668163b4060a7142301d26b1a72d1d407c3c53f8b762dc92f4cd001a949a7fdd3ff6be23f961d5ddad3d49d32f644030ca0584706f593ddf42c736eabf964b18f44b57999a4dd61d980b54b92856ed3102170262953550e6e39cdfb24d0ef70b24077b8fc488d7b86797a6247f6c6bb1ee3642c27641b3dc2798a0319b6178ddfd7eaa74182ca2760c3cea8b9eda1f26b2971cad82bb664746d1cf6d52191e70da776b6f649b32dacd5ba8c0144b530b0e0d2b54952367af9879ceb7ec75e385edae9af063e9b4dc28f2b09bfa7fefee99f900fa69a9323036a9a0dd085950dbf9b194cc9115f3226cddab91274ce1e97435bfedc9a217e8f2bc7b6272fb7aa95f64980602660046c096cc5fc315ace7ec5f6e5d872bca7283681d7f753eb82e8cfe3aa2a82d3e779fbafd0b715e0d782cb5fcd863ccc90c2d39e65c03de54db2896c4612c2b4b7393ed77e8f76fa5d9e12127c161ea9e32059fb1fdcef6c71e1e2ed341f4c90e7f56cc0c0d1a46d52ff094c4036f04534895137e8c149c0d0946a7680a8e8bb00181ce8ab3b3c98b8750e6fa995998c5fcabdc1388c10bf16fabc623c360dafefd30e4386153ea92adbd0c5991eb8a7268aa3322b0e5c28de4c83db8b45674c26bbec79d4d15c851c7e030fa4aedc2630e30ab6c24a5539e4e9f17b816e63d39446f69133497feb4101c48cc52d64ac48dbfe7547763ff9b363efad4f9fcfa6343446bee88eccd5ba4941fe90a2149532d7f9a3843d1e095f50b9b3d1f78c1f504b4a75bc13ba133d8a922615c540d860fab68bcab0be6feab131e73f5142d26e3d37e007bbb024e097701ccba6779e31c7766a4c789f89e0c5a45d62dccd32ccf502c51592bec37445b71278ba4d05b024d57e6a0a79a231525aeb8be6444e20086dfe6aef054ccd70eca18d764cb6bf2c8b8b94a49fee17fd2a78095e730b55d07ff953bdfae3df487ad29b9f8b1c0e199109685704bf5b7b5389c1e19c243daff5158a11c50737c1a0b002ef50a51e9035ef839ae8da64e468ba412769039704a1b360afec47a50e5bcc53bd14d847f153ed7654db66f8e8887b830ee092591e868a868c3b70aaa446a4e691d64a9fcbd1323dafecf5349532e0f4df4d5267c1f2f3532c2c0cf2eee0c95a6c9aaf22cae5584631a8b7d2c893deff272472ff3ed57f9e4f7ecd073e1d30b3c972c1619a04ee1727635acad6d0f07cf2068c0a3b344c668dc36e08a6bc9a35d599646af376dacc697e41ac3439614d0b8e247fbbd4a6258ffb41250ca22861c8a2e50103a6c3be98c4530f46dd32c4403b03efee040a0b0b9efd8c2a0fa69e17f8562bbfdb9fd6432a7cd5c225aef1d82073116aea51db0cc457ae54c793c0b236d0bd8ee7ede6d3d2959ba2383158ebaa60cd3b88e12ab023914f7354024feaa3b8ce44c5ea4f816f0342516097f2616d04ab5634da02a50e0632d9be218a3bb6172d0c50b188e2b519cd3e8fd1ea5dedfcf68c35a6038a3509734794d78fd0f58e357288b53db85610f6f46a7227ce402ee6195c1891c62cf9c99755690c53d36d5efdb41cf5de393230e6db5cd0836fb6f5a858ed7cd40d1da40cc561a281974963f3eeb879749712bec26a9e91b1e4e9bfa56922fe768cbbdc3e5a4f268dd3ff2f36379f56d3efd5f266e3d179a4ab111248f3ae7f7ecda4ea7f53a8e94bee7ccb56585072aa957fb3307762836b5ac54b2e84e12285169ec28cd4ae594eede097f6e9546c54bef5aa0930438a14f056d91b8d42dcfc1090168843c5b7a5a2698d58b71d95caae4b8e79eb5d50c2e609994e4e29a83a654e4bbd33fc378d7d6b2e4c5fad311754598186637003266fe3b72211dac35de9ecdb6dee82b14b030c8d3c7bc940ec6499fdebf1e60ee8d48c82e735f96529fffb1f52b0be3f4c9688204a06d27d7d2d15e24212e877ece62c8be5883aa9214ed3d6879bb1fea6ce0f72d6da969d59d941a2e6fdca30efd3ff1b66e731e4a5819a019f8bb4fb2c6107b494fdbf54973e6f84701d59765b00d32df4a5d5ded5a0e7041fa7a7aafc760cbb17270ad5e2d9887bcb7fc0aaefc7e8a80fa2bede3608ae267fcaad381ccfb5c8c209415aa0d6b2d2fbfe21a9e7735dac6c9d0ed457a5d3f25c21921c2cfa015a7fdf4beb914f2fe6e3cb1805f2a982579152c22934b82a759e108975591901c974ee147cc2a73b00716c25d467f09ed618ae3ab9f56f02be492a243239f71d729f0008aea5e3858f13af477e6babc038062d9679748db40d41ee41d0b2a1a2d158c1757ac42d325c7ffab32f9c5141de651409777b835fef9073ad142e040328dc97011d5e3b0c025659861fdc93c49bb87cee10c2635c8947ce8d9b366e1971941c24ea4ab6788e6c11b3834b5b472110bd9f757180f806d9d929bd49b85fd0d2019ba41807e1dddf6c782b1aa36bb5040493eee2f07d85413d224232393bec86b81c336558b760811e6c6f2d068f6b31e4f7c7d75ca2f13d4b24af8dd69283e40bf3e2c43da84ae63dab46b74e0c4a5e2e5ebaa94639af3a9ca453f46f74e8afe1d56cbeb47b5aecf0a3e4c01e64305e5600a9836169c7e51fc564b2588885bf6d0a9f68fb191bfe9ca4392290d0390fe1ecf4cf45fa1dd2d966ed10d53918ef23c36127b01c3df8af4f04b6cc4af11f7279bfd00278ff807c32309d078f8e3e024510dbd504e6431076d38411bb254ab76a5f074b0679e0d91ac112e921011771bdda856c51387b3ddd667fc2f0f0a78d814eea45c5db4f2a40f029c37b9127e33b1ca297734a19b24116a3663445591caaccf2ebde6979915b1ef92a26428f9a91fdc824a364830b6e0226314492c3c8acc1b4ff5a56fc460988c034bb1468e1499ef646d1130e86b17fa051048739b9eac993bb41b7f28dd8a7bcc3f9237168f4419431c2052f0b37942bdd17748b6ec01b756ceafb259a38b0b485d72639afb0b180463465b606c9ace81004f522ce4162354cfd754d90a8d12333fb40184bdd7e43ff2cede8fadf5996932cca7bb14d08195225aa5e7214981dc895bfdf33ff3c571b02ea5bb640aa313bdd982c68bc4a8fee935e006742a0daa1945a35436610429cda1a292857767cd311273ebdfb32583979a316bd0e8018129449c21cf8457c2c9245c60249dd517ba1e0b5316ab6a0027703bdb6d67f1ab69f10dc6a39f9080efe34c30fb137b2bdb5debf6dbb645114adfb2300a6a4703fa2d8bee8b2e7783d8dc668afc954e41755cbd20866cb2ffe4dbafc38340b280021d698d56df2c1758921146ab8f34b28790d280547d73211c70332415d79cd57b9ae3ca79235642ccd6c09820965b733f1090b3167880e233771b0daa647837a93e90126a1059fdd87d3a2e8e7601f3f8e496e670686c48d9e678a8d4ec3b91b8bdcac412e0bbc94bd12aaf266e4b681f8e415efed729dc0d2e80a111b0302c9c19cf537081535a8fa81eab4a07531aada944c124835564caaacf38015684ba5fc004af21f12e27467624265c1c55c5313b3cc3bccd857e51c22b20832e6d4d0f9efe30a42469ba4e8ba24348a6a90d5ebd9d846b941341e88df1dddd0c410d3cedd507d4830d0a24d2928f077266771304a663037ad2d4e08ccf0a9aff3185fa87dbf0d1519529348577d3d4ed7716c458af3339260eeafef02c26f89a21d716b0897c9f30ffbe5764a1e905383ab11fa8d66e9694734ce73c9b2131ac99a625859fa44c06dceef4645f8724a56988801dd92ebe034b0d1858a618b8094241852ffa262a89ab89682bd72c2217aa0c090074b6c5c9368979fd2bce3a31b6a9da83283c6916db8d23698fec3ce031307bee45b36993d62231e38129395d3b92cfae2e029909c24833a83a7d2d9bc0b786067c197fa3865082eb5e4670ddf8de212e2f7cb7823e35adf77d902a27422b2692658af44d2252f02f92176e5550c2520112d3e570bde1e38a20765544da7320afd8b4baf906a4a5563e637808f490bbb02676e75a3c9cf83decf4a87016eca305daf29c3b51bc9a6f60e53bc598e008d21e52d3c9a6fdcd4a21273a73c6fd3502a76433e5424a9d", 0x2000, &(0x7f0000000c00)={&(0x7f0000000100)={0x50, 0xccd8a4544961ca9c, 0x3, {0x7, 0x29, 0xffffffff, 0x804008, 0x1, 0xbc, 0x80000001, 0xad, 0x0, 0x0, 0x100, 0x7fff}}, &(0x7f0000000000)={0x18, 0x0, 0x100000000, {0xffffffffffffffff}}, &(0x7f0000000080)={0x18, 0x0, 0x3, {0x4}}, &(0x7f0000000180)={0x18, 0x0, 0x42f, {0x6d745bc4}}, &(0x7f00000001c0)={0x18, 0xfffffffffffffffe, 0x0, {0x1}}, &(0x7f0000000240)={0x28, 0xfffffffffffffff5, 0x3, {{0x5, 0x7, 0x1, r3}}}, &(0x7f0000000280)={0x60, 0xfffffffffffffff5, 0x10, {{0x227ee677, 0xfffffffffffffffc, 0x6, 0x4, 0xf2, 0x0, 0x1000, 0xf}}}, &(0x7f0000000300)={0x18, 0x0, 0x3ff, {0xf6}}, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0x8, {'/dev/nbd'}}, &(0x7f0000000380)={0x20, 0x0, 0x0, {0x0, 0x5}}, &(0x7f0000000480)={0x78, 0x0, 0x8, {0x3, 0x3, 0x0, {0x5, 0xfc08, 0xf305, 0x10000, 0x7fffffffffffffff, 0x3, 0xe6ac, 0x5a34, 0x9, 0x2000, 0x7fff, r4, r5, 0x7fff, 0x6}}}, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x2, 0x1, 0x6ac98154, 0x407cdc4, 0x7f, 0x6f, {0x4, 0x3, 0x800, 0x0, 0x3ff, 0x8001, 0x4, 0x4, 0x101, 0xc000, 0x100, 0x0, 0x0, 0x3, 0x8}}}, &(0x7f00000005c0)={0xd0, 0xffffffffffffffda, 0x8, [{0x1, 0x8, 0x7, 0x3, '(%]\xb2\xd6\b.'}, {0x2, 0x400, 0x8, 0xffffffff, '/dev/nbd'}, {0x4, 0x7, 0x8, 0x8, '/dev/nbd'}, {0x2, 0x400000, 0x2, 0x9d, '#\xf3'}, {0x6, 0x3, 0x3, 0xa, 'v7\x00'}, {0x2, 0x9, 0x3, 0x7, 'v7\x00'}]}, &(0x7f0000000780)={0xb0, 0x0, 0x1000, [{{0x1, 0x1, 0x0, 0x7, 0x5, 0x6, {0x1, 0xfffffffffffffffd, 0x0, 0xfffffffffffffff9, 0x304, 0xac17, 0x334, 0x1, 0x1, 0x1000, 0xa, r7, r8, 0x2}}, {0x3, 0x5, 0x2, 0x4, '-!'}}]}, &(0x7f0000000840)={0xa0, 0x0, 0x8, {{0x5, 0x3, 0x0, 0xe000000000000, 0x1ff, 0x2, {0x2, 0xfffffffffffffeff, 0x5, 0x9, 0x3, 0x3, 0x332, 0x9ca, 0x3dfe56f1, 0x2000, 0x4, r9, r15, 0x8, 0x8c5b}}, {0x0, 0x5}}}, &(0x7f0000000900)={0x20, 0xfffffffffffffff5, 0x8000000000000000, {0x6, 0x43c96c9d3cf69c7d, 0x101, 0xb}}, &(0x7f0000000ac0)={0x130, 0x0, 0x2, {0x697d, 0x6, 0x0, '\x00', {0x40, 0x6, 0x3, 0xfff, r16, r17, 0x2000, '\x00', 0x80000000, 0x6, 0xc, 0x40, {0x100000000, 0x7}, {0x1, 0x1}, {0x2, 0x8000}, {0xffffffffffffffff, 0x2}, 0x4, 0x8, 0x7fffffff, 0x50}}}}) mount(&(0x7f0000000040)=@md0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001080)='v7\x00', 0x2021, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000000ffdbdf25010000000800070031000000080003"], 0x30}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="0000000000000000050021"], 0x30}}, 0x0) executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x5, 0xea800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x1a74c1, 0x408) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='-(/\\#-:{,\x00', 0x0, r1) fstat(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r1, &(0x7f0000000200)='./file0\x00', 0x6000, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000440)={0x5, 0x7fffffff, {0xffffffffffffffff}, {0xee00}, 0xba727cb, 0xde}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x20, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB="2c616c6c6f770000746865722c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030303030302c616c6c6f775f6f746865722c616c6c6f775f6f746865722c046c6c6f775f6f746865722c6d61785f726561643d307830df5423475363dbdc3fa6b6385e30303030300000000000000bf630342c626c6b73697a653d3078303030303030303030303030303830302c64656661756c745f7065726d697373696f6e732c666f776e65723e", @ANYRESDEC=r5, @ANYBLOB="2c6673757569643d34333639306166312d3635a4632d023939642d323265352d65303032653535622c00"]) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000005000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000001180), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0x2, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='\"', 0x1}], 0x1, 0x0) (async) write$binfmt_elf64(r5, &(0x7f00000011c0)=ANY=[@ANYRES16=r0, @ANYRES16=r5, @ANYRES32=r5, @ANYRES64=r4, @ANYRES8=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x18c6) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc0000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000893000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="0f20c06635000001000f22c00f01c36565d86b6766660f388129a5660fd9430d0f3a0fcc35f20f38f14029f20fc24686490ebc", 0x33}], 0x1, 0x8, 0x0, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r10 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r10, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xc}, 0x1c) (async) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010425bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000001f00001c0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x52, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r2], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10000, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x100000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x1ff, 0x401}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000003c0)={r6, 0x14c}, &(0x7f0000000400)=0x8) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0xffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000804) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0xe) executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) close(r6) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r6, 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r7 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000080)={0x10000000}) io_uring_enter(r7, 0x52c1, 0x3900, 0x1, 0x0, 0x0) executing program 3: syz_clone(0x20940200, 0x0, 0x9, 0x0, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x80000000, 0x3}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000040)={0x980914, 0x3, @value=0x140000000000}) executing program 3: openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(tea-generic)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x800, 0x7) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000800)=0x2, 0x4) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) set_tid_address(0x0) recvmmsg(r4, &(0x7f00000036c0), 0x0, 0x10060, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000080)={0x0, 0x0, 0x0}) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x0, 0x8}}}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x38, 0x2c, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffe0}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000002000/0x2000)=nil) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r6, 0x25, 0x1b, @void}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r9, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r9, &(0x7f0000000300), 0x6) sendmmsg(r8, &(0x7f0000000000), 0x0, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x1e2) mmap(&(0x7f000038e000/0x4000)=nil, 0x4000, 0x1, 0x110, 0xffffffffffffffff, 0xddcab000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000001100)) executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = io_uring_setup(0x623f, &(0x7f0000000880)={0x0, 0x6ca1, 0x400, 0x1, 0x10000347}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c4e82ff00000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c4e82ff00000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @rand_addr, 0x5}, 0x1c) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) (async) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0182c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000008c0)=@setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x10}]}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000008c0)=@setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x10}]}]}, 0x3c}}, 0x0) program crashed: general protection fault in afs_atcell_get_link bisect: bisecting 31 programs bisect: split chunks (needed=false): <31> bisect: split chunk #0 of len 31 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 12, 5, 26, 30, 7, 20, 10, 30, 9, 27, 6, 11, 22, 12, 22, 4, 30, 10, 37] detailed listing: executing program 2: mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) open_by_handle_at(r1, &(0x7f0000000380)=@fuse_with_parent={0x18, 0x82, {{0x4, 0x80000001, 0xec}, {0x5, 0x8, 0x1000}}}, 0x280040) linkat(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) (async) open_by_handle_at(r1, &(0x7f0000000380)=@fuse_with_parent={0x18, 0x82, {{0x4, 0x80000001, 0xec}, {0x5, 0x8, 0x1000}}}, 0x280040) (async) linkat(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x0) (async) executing program 2: getrusage(0x1, &(0x7f0000000280)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000540)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 4: r0 = socket$inet6(0xa, 0x80000, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240c80c0, &(0x7f0000000240)={0xa, 0xe20, 0x0, @mcast2}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x4, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4010, 0x0, 0x0) executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x200) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x30, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x14}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xee}]}, 0x30}, 0x1, 0x0, 0x0, 0x10004c80}, 0x41) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x5, 0x4, 0xfffffffd}]}]}]}}]}, 0x9c}}, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, 0x0) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0xc0049364, &(0x7f0000000180)) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r7) (async) r9 = syz_open_dev$I2C(&(0x7f0000000180), 0x4, 0x80000) ioctl$I2C_SLAVE(r9, 0x703, 0x9) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x60, r11, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5d36616017"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]]}, 0x60}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, r8, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfa0b9000) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) accept(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, &(0x7f0000000580)=0x84) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x1, 0xd000, 0x2000, &(0x7f00002be000/0x2000)=nil}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04004220"], 0x7) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) fsopen(&(0x7f0000000340)='iso9660\x00', 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 2', 0x1b) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000440)='\b2\x7f\x1f\xbf\xa6\xcf0\x9d-J\x19\xba\x82\xe8\xa9\xb4=\xf6C1\xd13FE\xe2}\xc5Y\xe5\xeb\x88\xb4\x88\xbe\xc3\xc3\xcbx\x04\xc5\x8d>\xce\x9b\x86\xe9\x88\x9b\x999\'o\'pm\xeb\xa9\x9b\x1d\x9c\xfa\xa4Q&T\x9c\x98\xfa~\xd0\x93\x00\xc6\xf4\xf9\x17\xa4C \xef\x89\x00\x9f\xfe>\xd6\xb2jM!\xed\x97\x0e\xed\x1b\xc5\x93\xde3/\xbe\xc5\x14\x8e\x00\x00\x00\x00J\xe2\xcc+x\xd0W\xe5\xf7\x1f.ii;\xaf_\xd9H\xc3\xe9\x05\x00\xf8@\xa1\xcd\xbd%\x1b\xff\x1d', 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@mpls_getroute={0x24, 0x1a, 0x1, 0x70bd27, 0x25dfdbfe, {0x1c, 0x10, 0x14, 0x2, 0xff, 0x0, 0xc8, 0x3, 0x1600}, [@RTA_DST={0x8, 0x1, {0x200, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8890}, 0x2) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') setns(r3, 0x20000) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl0\x00', r5, 0x0, 0x4, 0x0, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x10, 0x6, 0x4}}) close(r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x0, 0x1, 0x401, 0x0, 0x4}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000480)={0x1, r8}) connect$netrom(r1, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x1a}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x188, 0x4c, 0x1a, 0x0, 0x73, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x128, 0x188, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3893b573a807d00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x38}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x188, 0x4c, 0x1a, 0x0, 0x73, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x128, 0x188, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3893b573a807d00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x38}}, 0x0) (async) executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4f22, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2005}, 0x1c) socket(0x10, 0x3, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001240)=""/111, 0x6f}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000200)={0x4, 0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x40}}, 0x0) close(r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="40adc400", @ANYRES32=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r7 = syz_open_dev$swradio(&(0x7f00000048c0), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r7, 0xc02c5638, &(0x7f0000000140)={0x5, 0x4, 0x9}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffd6b) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x7b, &(0x7f0000000000), 0x8) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x5c, r4, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c325187ff01bac82a06618999b88b74a6a9657c766a0ba59"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2fb029a9f71c2afd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fa00"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000800)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x34000010) socket$inet(0x2, 0x5, 0x1) executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = dup3(r0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000055090100000000009500000000000000b7020000000000007b9af8ff00000000b5090c00000000007baaf0ff00000000bc8608000000000027080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70c0000080000001600000007000000bf9110000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000020000000c"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r13, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x1, r14, 0x1}) ioctl$KVM_IOEVENTFD(r13, 0x4040ae79, &(0x7f0000000080)={0x1000, 0x0, 0x1, r14}) setresuid(0xffffffffffffffff, r9, 0xee01) read$FUSE(0xffffffffffffffff, &(0x7f00000030c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000010c0)="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", 0x2000, &(0x7f0000000c00)={&(0x7f0000000100)={0x50, 0xccd8a4544961ca9c, 0x3, {0x7, 0x29, 0xffffffff, 0x804008, 0x1, 0xbc, 0x80000001, 0xad, 0x0, 0x0, 0x100, 0x7fff}}, &(0x7f0000000000)={0x18, 0x0, 0x100000000, {0xffffffffffffffff}}, &(0x7f0000000080)={0x18, 0x0, 0x3, {0x4}}, &(0x7f0000000180)={0x18, 0x0, 0x42f, {0x6d745bc4}}, &(0x7f00000001c0)={0x18, 0xfffffffffffffffe, 0x0, {0x1}}, &(0x7f0000000240)={0x28, 0xfffffffffffffff5, 0x3, {{0x5, 0x7, 0x1, r3}}}, &(0x7f0000000280)={0x60, 0xfffffffffffffff5, 0x10, {{0x227ee677, 0xfffffffffffffffc, 0x6, 0x4, 0xf2, 0x0, 0x1000, 0xf}}}, &(0x7f0000000300)={0x18, 0x0, 0x3ff, {0xf6}}, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0x8, {'/dev/nbd'}}, &(0x7f0000000380)={0x20, 0x0, 0x0, {0x0, 0x5}}, &(0x7f0000000480)={0x78, 0x0, 0x8, {0x3, 0x3, 0x0, {0x5, 0xfc08, 0xf305, 0x10000, 0x7fffffffffffffff, 0x3, 0xe6ac, 0x5a34, 0x9, 0x2000, 0x7fff, r4, r5, 0x7fff, 0x6}}}, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x2, 0x1, 0x6ac98154, 0x407cdc4, 0x7f, 0x6f, {0x4, 0x3, 0x800, 0x0, 0x3ff, 0x8001, 0x4, 0x4, 0x101, 0xc000, 0x100, 0x0, 0x0, 0x3, 0x8}}}, &(0x7f00000005c0)={0xd0, 0xffffffffffffffda, 0x8, [{0x1, 0x8, 0x7, 0x3, '(%]\xb2\xd6\b.'}, {0x2, 0x400, 0x8, 0xffffffff, '/dev/nbd'}, {0x4, 0x7, 0x8, 0x8, '/dev/nbd'}, {0x2, 0x400000, 0x2, 0x9d, '#\xf3'}, {0x6, 0x3, 0x3, 0xa, 'v7\x00'}, {0x2, 0x9, 0x3, 0x7, 'v7\x00'}]}, &(0x7f0000000780)={0xb0, 0x0, 0x1000, [{{0x1, 0x1, 0x0, 0x7, 0x5, 0x6, {0x1, 0xfffffffffffffffd, 0x0, 0xfffffffffffffff9, 0x304, 0xac17, 0x334, 0x1, 0x1, 0x1000, 0xa, r7, r8, 0x2}}, {0x3, 0x5, 0x2, 0x4, '-!'}}]}, &(0x7f0000000840)={0xa0, 0x0, 0x8, {{0x5, 0x3, 0x0, 0xe000000000000, 0x1ff, 0x2, {0x2, 0xfffffffffffffeff, 0x5, 0x9, 0x3, 0x3, 0x332, 0x9ca, 0x3dfe56f1, 0x2000, 0x4, r9, r15, 0x8, 0x8c5b}}, {0x0, 0x5}}}, &(0x7f0000000900)={0x20, 0xfffffffffffffff5, 0x8000000000000000, {0x6, 0x43c96c9d3cf69c7d, 0x101, 0xb}}, &(0x7f0000000ac0)={0x130, 0x0, 0x2, {0x697d, 0x6, 0x0, '\x00', {0x40, 0x6, 0x3, 0xfff, r16, r17, 0x2000, '\x00', 0x80000000, 0x6, 0xc, 0x40, {0x100000000, 0x7}, {0x1, 0x1}, {0x2, 0x8000}, {0xffffffffffffffff, 0x2}, 0x4, 0x8, 0x7fffffff, 0x50}}}}) mount(&(0x7f0000000040)=@md0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001080)='v7\x00', 0x2021, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000000ffdbdf25010000000800070031000000080003"], 0x30}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="0000000000000000050021"], 0x30}}, 0x0) executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x5, 0xea800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x1a74c1, 0x408) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='-(/\\#-:{,\x00', 0x0, r1) fstat(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r1, &(0x7f0000000200)='./file0\x00', 0x6000, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000440)={0x5, 0x7fffffff, {0xffffffffffffffff}, {0xee00}, 0xba727cb, 0xde}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x20, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB="2c616c6c6f770000746865722c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030303030302c616c6c6f775f6f746865722c616c6c6f775f6f746865722c046c6c6f775f6f746865722c6d61785f726561643d307830df5423475363dbdc3fa6b6385e30303030300000000000000bf630342c626c6b73697a653d3078303030303030303030303030303830302c64656661756c745f7065726d697373696f6e732c666f776e65723e", @ANYRESDEC=r5, @ANYBLOB="2c6673757569643d34333639306166312d3635a4632d023939642d323265352d65303032653535622c00"]) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000005000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000001180), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0x2, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='\"', 0x1}], 0x1, 0x0) (async) write$binfmt_elf64(r5, &(0x7f00000011c0)=ANY=[@ANYRES16=r0, @ANYRES16=r5, @ANYRES32=r5, @ANYRES64=r4, @ANYRES8=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x18c6) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc0000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000893000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="0f20c06635000001000f22c00f01c36565d86b6766660f388129a5660fd9430d0f3a0fcc35f20f38f14029f20fc24686490ebc", 0x33}], 0x1, 0x8, 0x0, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r10 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r10, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xc}, 0x1c) (async) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010425bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000001f00001c0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x52, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r2], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10000, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x100000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x1ff, 0x401}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000003c0)={r6, 0x14c}, &(0x7f0000000400)=0x8) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0xffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000804) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0xe) executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) close(r6) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r6, 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r7 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000080)={0x10000000}) io_uring_enter(r7, 0x52c1, 0x3900, 0x1, 0x0, 0x0) executing program 3: syz_clone(0x20940200, 0x0, 0x9, 0x0, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x80000000, 0x3}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000040)={0x980914, 0x3, @value=0x140000000000}) executing program 3: openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(tea-generic)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x800, 0x7) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000800)=0x2, 0x4) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) set_tid_address(0x0) recvmmsg(r4, &(0x7f00000036c0), 0x0, 0x10060, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000080)={0x0, 0x0, 0x0}) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x0, 0x8}}}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x38, 0x2c, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffe0}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000002000/0x2000)=nil) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r6, 0x25, 0x1b, @void}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r9, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r9, &(0x7f0000000300), 0x6) sendmmsg(r8, &(0x7f0000000000), 0x0, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x1e2) mmap(&(0x7f000038e000/0x4000)=nil, 0x4000, 0x1, 0x110, 0xffffffffffffffff, 0xddcab000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000001100)) executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = io_uring_setup(0x623f, &(0x7f0000000880)={0x0, 0x6ca1, 0x400, 0x1, 0x10000347}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c4e82ff00000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c4e82ff00000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @rand_addr, 0x5}, 0x1c) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) (async) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0182c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000008c0)=@setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x10}]}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000008c0)=@setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x10}]}]}, 0x3c}}, 0x0) program crashed: general protection fault in afs_atcell_get_link bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 11, 22, 12, 22, 4, 30, 10, 37] detailed listing: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000000ffdbdf25010000000800070031000000080003"], 0x30}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="0000000000000000050021"], 0x30}}, 0x0) executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x5, 0xea800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x1a74c1, 0x408) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='-(/\\#-:{,\x00', 0x0, r1) fstat(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r1, &(0x7f0000000200)='./file0\x00', 0x6000, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000440)={0x5, 0x7fffffff, {0xffffffffffffffff}, {0xee00}, 0xba727cb, 0xde}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x20, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB="2c616c6c6f770000746865722c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030303030302c616c6c6f775f6f746865722c616c6c6f775f6f746865722c046c6c6f775f6f746865722c6d61785f726561643d307830df5423475363dbdc3fa6b6385e30303030300000000000000bf630342c626c6b73697a653d3078303030303030303030303030303830302c64656661756c745f7065726d697373696f6e732c666f776e65723e", @ANYRESDEC=r5, @ANYBLOB="2c6673757569643d34333639306166312d3635a4632d023939642d323265352d65303032653535622c00"]) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000005000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000001180), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0x2, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='\"', 0x1}], 0x1, 0x0) (async) write$binfmt_elf64(r5, &(0x7f00000011c0)=ANY=[@ANYRES16=r0, @ANYRES16=r5, @ANYRES32=r5, @ANYRES64=r4, @ANYRES8=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x18c6) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc0000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000893000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="0f20c06635000001000f22c00f01c36565d86b6766660f388129a5660fd9430d0f3a0fcc35f20f38f14029f20fc24686490ebc", 0x33}], 0x1, 0x8, 0x0, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r10 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r10, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xc}, 0x1c) (async) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010425bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000001f00001c0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x52, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r2], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10000, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x100000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x1ff, 0x401}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000003c0)={r6, 0x14c}, &(0x7f0000000400)=0x8) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0xffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000804) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0xe) executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) close(r6) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r6, 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r7 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000080)={0x10000000}) io_uring_enter(r7, 0x52c1, 0x3900, 0x1, 0x0, 0x0) executing program 3: syz_clone(0x20940200, 0x0, 0x9, 0x0, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x80000000, 0x3}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000040)={0x980914, 0x3, @value=0x140000000000}) executing program 3: openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(tea-generic)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x800, 0x7) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000800)=0x2, 0x4) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) set_tid_address(0x0) recvmmsg(r4, &(0x7f00000036c0), 0x0, 0x10060, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000080)={0x0, 0x0, 0x0}) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x0, 0x8}}}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x38, 0x2c, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffe0}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000002000/0x2000)=nil) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r6, 0x25, 0x1b, @void}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r9, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r9, &(0x7f0000000300), 0x6) sendmmsg(r8, &(0x7f0000000000), 0x0, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x1e2) mmap(&(0x7f000038e000/0x4000)=nil, 0x4000, 0x1, 0x110, 0xffffffffffffffff, 0xddcab000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000001100)) executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = io_uring_setup(0x623f, &(0x7f0000000880)={0x0, 0x6ca1, 0x400, 0x1, 0x10000347}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c4e82ff00000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c4e82ff00000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @rand_addr, 0x5}, 0x1c) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) (async) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0182c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000008c0)=@setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x10}]}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000008c0)=@setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x10}]}]}, 0x3c}}, 0x0) program crashed: general protection fault in afs_atcell_get_link bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 bisect: split chunks (needed=true): <9> bisect: split chunk #0 of len 9 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 30, 10, 37] detailed listing: executing program 3: syz_clone(0x20940200, 0x0, 0x9, 0x0, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x80000000, 0x3}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000040)={0x980914, 0x3, @value=0x140000000000}) executing program 3: openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(tea-generic)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x800, 0x7) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000800)=0x2, 0x4) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) set_tid_address(0x0) recvmmsg(r4, &(0x7f00000036c0), 0x0, 0x10060, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000080)={0x0, 0x0, 0x0}) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x0, 0x8}}}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x38, 0x2c, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffe0}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000002000/0x2000)=nil) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r6, 0x25, 0x1b, @void}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r9, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r9, &(0x7f0000000300), 0x6) sendmmsg(r8, &(0x7f0000000000), 0x0, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x1e2) mmap(&(0x7f000038e000/0x4000)=nil, 0x4000, 0x1, 0x110, 0xffffffffffffffff, 0xddcab000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000001100)) executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = io_uring_setup(0x623f, &(0x7f0000000880)={0x0, 0x6ca1, 0x400, 0x1, 0x10000347}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c4e82ff00000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c4e82ff00000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @rand_addr, 0x5}, 0x1c) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) (async) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0182c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000008c0)=@setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x10}]}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000008c0)=@setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x10}]}]}, 0x3c}}, 0x0) program crashed: general protection fault in afs_atcell_get_link bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <4> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 37] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x1e2) mmap(&(0x7f000038e000/0x4000)=nil, 0x4000, 0x1, 0x110, 0xffffffffffffffff, 0xddcab000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000001100)) executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = io_uring_setup(0x623f, &(0x7f0000000880)={0x0, 0x6ca1, 0x400, 0x1, 0x10000347}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c4e82ff00000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c4e82ff00000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @rand_addr, 0x5}, 0x1c) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) (async) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0182c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000008c0)=@setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x10}]}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000008c0)=@setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x10}]}]}, 0x3c}}, 0x0) program crashed: general protection fault in afs_atcell_get_link bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range-close_range-bpf$MAP_CREATE-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-setsockopt$IP6T_SO_SET_REPLACE-io_uring_setup-bpf$PROG_LOAD-bpf$PROG_LOAD-openat-writev-bpf$BPF_LINK_CREATE_XDP-bpf$BPF_LINK_CREATE_XDP-close_range-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$inet6-socket$inet6-bind$inet6-setsockopt$inet6_udp_encap-setsockopt$inet6_udp_encap-bpf$MAP_CREATE-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-socket$inet6-setsockopt$sock_int-setsockopt$sock_int-bind$inet6-syz_emit_ethernet-socket$nl_route-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-sendmsg$nl_route detailed listing: executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = io_uring_setup(0x623f, &(0x7f0000000880)={0x0, 0x6ca1, 0x400, 0x1, 0x10000347}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c4e82ff00000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c4e82ff00000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @rand_addr, 0x5}, 0x1c) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) (async) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0182c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000008c0)=@setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x10}]}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000008c0)=@setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x10}]}]}, 0x3c}}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-mkdir-mmap-madvise-madvise-syz_clone-syz_clone-socketpair$tipc detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x1e2) mmap(&(0x7f000038e000/0x4000)=nil, 0x4000, 0x1, 0x110, 0xffffffffffffffff, 0xddcab000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000001100)) program crashed: general protection fault in afs_atcell_get_link bisect: the chunk can be dropped bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x1e2) mmap(&(0x7f000038e000/0x4000)=nil, 0x4000, 0x1, 0x110, 0xffffffffffffffff, 0xddcab000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000001100)) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-mkdir-mmap-madvise-madvise-syz_clone-syz_clone-socketpair$tipc detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x1e2) mmap(&(0x7f000038e000/0x4000)=nil, 0x4000, 0x1, 0x110, 0xffffffffffffffff, 0xddcab000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000001100)) program crashed: general protection fault in afs_atcell_get_link bisect: concatenation succeeded found reproducer with 10 syscalls minimizing guilty program testing program (duration=38.374636786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-mkdir-mmap-madvise-madvise-syz_clone-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x1e2) mmap(&(0x7f000038e000/0x4000)=nil, 0x4000, 0x1, 0x110, 0xffffffffffffffff, 0xddcab000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: general protection fault in afs_atcell_get_link testing program (duration=38.374636786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-mkdir-mmap-madvise-madvise-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x1e2) mmap(&(0x7f000038e000/0x4000)=nil, 0x4000, 0x1, 0x110, 0xffffffffffffffff, 0xddcab000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) program crashed: general protection fault in afs_atcell_get_link testing program (duration=38.374636786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-mkdir-mmap-madvise-madvise detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x1e2) mmap(&(0x7f000038e000/0x4000)=nil, 0x4000, 0x1, 0x110, 0xffffffffffffffff, 0xddcab000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) program did not crash testing program (duration=38.374636786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-mkdir-mmap-madvise-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x1e2) mmap(&(0x7f000038e000/0x4000)=nil, 0x4000, 0x1, 0x110, 0xffffffffffffffff, 0xddcab000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) program crashed: general protection fault in afs_atcell_get_link testing program (duration=38.374636786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-mkdir-mmap-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x1e2) mmap(&(0x7f000038e000/0x4000)=nil, 0x4000, 0x1, 0x110, 0xffffffffffffffff, 0xddcab000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) program crashed: general protection fault in afs_atcell_get_link testing program (duration=38.374636786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-mkdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x1e2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) program crashed: general protection fault in afs_atcell_get_link testing program (duration=38.374636786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) program crashed: general protection fault in afs_atcell_get_link testing program (duration=38.374636786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) program did not crash testing program (duration=38.374636786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f00000000c0)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) program did not crash testing program (duration=38.374636786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$afs-chdir-syz_clone detailed listing: executing program 0: mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) program did not crash testing program (duration=38.374636786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: general protection fault in afs_atcell_get_link testing program (duration=38.374636786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=38.374636786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=38.374636786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=38.374636786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=38.374636786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=38.374636786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-syz_clone program crashed: general protection fault in afs_atcell_get_link simplifying C reproducer testing compiled C program (duration=38.374636786s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-syz_clone program crashed: general protection fault in afs_atcell_get_link testing compiled C program (duration=38.374636786s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-syz_clone program did not crash testing compiled C program (duration=38.374636786s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-syz_clone program crashed: general protection fault in afs_atcell_get_link testing compiled C program (duration=38.374636786s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-syz_clone program crashed: general protection fault in afs_atcell_get_link testing compiled C program (duration=38.374636786s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-syz_clone program crashed: general protection fault in afs_atcell_get_link testing compiled C program (duration=38.374636786s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-syz_clone program did not crash testing compiled C program (duration=38.374636786s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-syz_clone program crashed: general protection fault in afs_atcell_get_link testing compiled C program (duration=38.374636786s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-syz_clone program crashed: general protection fault in afs_atcell_get_link reproducing took 23m50.396229371s repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000056: 0000 [#1] PREEMPT SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x00000000000002b0-0x00000000000002b7] CPU: 2 UID: 0 PID: 5932 Comm: syz-executor998 Not tainted 6.14.0-rc6-syzkaller-00189-gb35233e7bfa0 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:afs_atcell_get_link+0x33e/0x480 fs/afs/dynroot.c:321 Code: 89 c3 89 c6 e8 53 af 3b fe 85 db 75 64 e8 4a b4 3b fe 48 8d bd b0 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1f 01 00 00 4c 89 f6 bf 03 00 00 00 4c 8b a5 b0 RSP: 0018:ffffc90004c3f988 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff837e3e8a RDX: 0000000000000056 RSI: ffffffff837e3e16 RDI: 00000000000002b0 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 R13: ffff8881082b6000 R14: 0000000000000003 R15: ffff8880345a1480 FS: 000055559399f380(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005555939b0738 CR3: 000000002712e000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: pick_link fs/namei.c:1914 [inline] step_into+0x1982/0x2220 fs/namei.c:1984 open_last_lookups fs/namei.c:3777 [inline] path_openat+0x74c/0x2d80 fs/namei.c:3986 do_filp_open+0x20c/0x470 fs/namei.c:4016 do_sys_openat2+0x17a/0x1e0 fs/open.c:1428 do_sys_open fs/open.c:1443 [inline] __do_sys_openat fs/open.c:1459 [inline] __se_sys_openat fs/open.c:1454 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1454 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2317244161 Code: 75 57 89 f0 25 00 00 41 00 3d 00 00 41 00 74 49 80 3d 0a 8f 07 00 00 74 6d 89 da 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 93 00 00 00 48 8b 54 24 28 64 48 2b 14 25 RSP: 002b:00007ffd89f6cc50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2317244161 RDX: 0000000000000000 RSI: 00007ffd89f6cd80 RDI: 00000000ffffff9c RBP: 00007ffd89f6cd80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd89f6de70 R13: 00005555939a8700 R14: 000055559399f338 R15: 0000000000000001 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:afs_atcell_get_link+0x33e/0x480 fs/afs/dynroot.c:321 Code: 89 c3 89 c6 e8 53 af 3b fe 85 db 75 64 e8 4a b4 3b fe 48 8d bd b0 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1f 01 00 00 4c 89 f6 bf 03 00 00 00 4c 8b a5 b0 RSP: 0018:ffffc90004c3f988 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff837e3e8a RDX: 0000000000000056 RSI: ffffffff837e3e16 RDI: 00000000000002b0 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 R13: ffff8881082b6000 R14: 0000000000000003 R15: ffff8880345a1480 FS: 000055559399f380(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005555939b0738 CR3: 000000002712e000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 89 c3 mov %eax,%ebx 2: 89 c6 mov %eax,%esi 4: e8 53 af 3b fe call 0xfe3baf5c 9: 85 db test %ebx,%ebx b: 75 64 jne 0x71 d: e8 4a b4 3b fe call 0xfe3bb45c 12: 48 8d bd b0 02 00 00 lea 0x2b0(%rbp),%rdi 19: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 20: fc ff df 23: 48 89 fa mov %rdi,%rdx 26: 48 c1 ea 03 shr $0x3,%rdx * 2a: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 1f 01 00 00 jne 0x153 34: 4c 89 f6 mov %r14,%rsi 37: bf 03 00 00 00 mov $0x3,%edi 3c: 4c rex.WR 3d: 8b .byte 0x8b 3e: a5 movsl %ds:(%rsi),%es:(%rdi) 3f: b0 .byte 0xb0 final repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000056: 0000 [#1] PREEMPT SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x00000000000002b0-0x00000000000002b7] CPU: 2 UID: 0 PID: 5932 Comm: syz-executor998 Not tainted 6.14.0-rc6-syzkaller-00189-gb35233e7bfa0 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:afs_atcell_get_link+0x33e/0x480 fs/afs/dynroot.c:321 Code: 89 c3 89 c6 e8 53 af 3b fe 85 db 75 64 e8 4a b4 3b fe 48 8d bd b0 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1f 01 00 00 4c 89 f6 bf 03 00 00 00 4c 8b a5 b0 RSP: 0018:ffffc90004c3f988 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff837e3e8a RDX: 0000000000000056 RSI: ffffffff837e3e16 RDI: 00000000000002b0 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 R13: ffff8881082b6000 R14: 0000000000000003 R15: ffff8880345a1480 FS: 000055559399f380(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005555939b0738 CR3: 000000002712e000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: pick_link fs/namei.c:1914 [inline] step_into+0x1982/0x2220 fs/namei.c:1984 open_last_lookups fs/namei.c:3777 [inline] path_openat+0x74c/0x2d80 fs/namei.c:3986 do_filp_open+0x20c/0x470 fs/namei.c:4016 do_sys_openat2+0x17a/0x1e0 fs/open.c:1428 do_sys_open fs/open.c:1443 [inline] __do_sys_openat fs/open.c:1459 [inline] __se_sys_openat fs/open.c:1454 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1454 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2317244161 Code: 75 57 89 f0 25 00 00 41 00 3d 00 00 41 00 74 49 80 3d 0a 8f 07 00 00 74 6d 89 da 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 93 00 00 00 48 8b 54 24 28 64 48 2b 14 25 RSP: 002b:00007ffd89f6cc50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2317244161 RDX: 0000000000000000 RSI: 00007ffd89f6cd80 RDI: 00000000ffffff9c RBP: 00007ffd89f6cd80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd89f6de70 R13: 00005555939a8700 R14: 000055559399f338 R15: 0000000000000001 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:afs_atcell_get_link+0x33e/0x480 fs/afs/dynroot.c:321 Code: 89 c3 89 c6 e8 53 af 3b fe 85 db 75 64 e8 4a b4 3b fe 48 8d bd b0 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1f 01 00 00 4c 89 f6 bf 03 00 00 00 4c 8b a5 b0 RSP: 0018:ffffc90004c3f988 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff837e3e8a RDX: 0000000000000056 RSI: ffffffff837e3e16 RDI: 00000000000002b0 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 R13: ffff8881082b6000 R14: 0000000000000003 R15: ffff8880345a1480 FS: 000055559399f380(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005555939b0738 CR3: 000000002712e000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 89 c3 mov %eax,%ebx 2: 89 c6 mov %eax,%esi 4: e8 53 af 3b fe call 0xfe3baf5c 9: 85 db test %ebx,%ebx b: 75 64 jne 0x71 d: e8 4a b4 3b fe call 0xfe3bb45c 12: 48 8d bd b0 02 00 00 lea 0x2b0(%rbp),%rdi 19: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 20: fc ff df 23: 48 89 fa mov %rdi,%rdx 26: 48 c1 ea 03 shr $0x3,%rdx * 2a: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 1f 01 00 00 jne 0x153 34: 4c 89 f6 mov %r14,%rsi 37: bf 03 00 00 00 mov $0x3,%edi 3c: 4c rex.WR 3d: 8b .byte 0x8b 3e: a5 movsl %ds:(%rsi),%es:(%rdi) 3f: b0 .byte 0xb0