Extracting prog: 4m51.732175783s Minimizing prog: 57m8.606121051s Simplifying prog options: 0s Extracting C: 33.222868234s Simplifying C: 22m17.011321582s extracting reproducer from 24 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-close-sendmsg$NFT_BATCH-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-openat$kvm-syz_init_net_socket$nfc_llcp-ioctl$KVM_CREATE_VM-openat$cgroup_ro-ioctl$IOMMU_DESTROY$stdev-write$binfmt_script-preadv-socket-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST-setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO-getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN-close_range detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_DESTROY$stdev(r7, 0x3b80, &(0x7f0000000340)={0x8}) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x4, 0xfffffffe) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000100)={0xc, 0x200, 0x5, 0x1, r9}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000240)={r9, 0x1}, &(0x7f0000000280)=0x8) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 24 programs with base timeout 30s testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8, 9, 30, 5, 2, 6, 18, 30, 13, 5, 22, 4, 13, 28, 21, 26, 5, 24, 30, 4, 4, 1, 9] detailed listing: executing program 1: syz_open_dev$I2C(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) fallocate(r0, 0x8, 0x4000, 0x6) r1 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000880)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x9, 0x70, 0x9, [{{0x9, 0x4, 0x0, 0xd, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x6, 0x7}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x0, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x1ff, 0x11, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0xf7, 0x5}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x85, 0xcf, 0x4d, 0x10, 0x6}, 0x3a, &(0x7f0000000400)={0x5, 0xf, 0x3a, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0x1, 0x401}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x6, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xda, "312e09731dd254aa83e2cf481e42e13a"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x10, 0xf8, 0xb822}]}, 0x3, [{0x4, &(0x7f0000000440)=@string={0x4, 0x3, 'D&'}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40e}}, {0x6b, &(0x7f00000004c0)=@string={0x6b, 0x3, "8def7955318c40d94cf2f1f51a159d37350c4e54422da9c25cc211dfb1c65f626b7addea23d80d132985fff46e548512ce3cfb915132a014eda5f87a494c9c2eb08968933133c51ac586162d4022e8185b82fcd10c634445ffe63add189fe3746e770145857520f9da"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x20, 0x6, 0x97, {0x97, 0x22, "5ee8730bf71a45a025556e0fd49900e651cf5580dc77c0d8c9a261b3088c519ea8b411318311b32a7883d791e6cdb86486248252d647af24eb87ca48a7ff6862c1072e734846a2d59cabd2f377c30cce03ad7c212692affd3b8085740172d967221ad9382ee5af986c00ed7a254c61b2f44fb2af672aa1f95a1e68c8da83e8f1e32003b0389bc8a6813c5435bc2d8e6f850627d739"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x1c, &(0x7f00000006c0)={0x40, 0xe, 0x4b, "c57dd82bc2e1b5dcef5194425d7376df3e3474ebff2565a9b9a58102c97382a0c31763ce2964a949b054292edbb24dfe28f8274d9cb661cc4b30c8d20886651c96f42d10e341ee7551c7dc"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x1}}) executing program 1: r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000100)=0x6, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000100)=0x6, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}, {&(0x7f0000000440)=ANY=[@ANYBLOB="00010600cf"], 0x100}], 0x2}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}, {&(0x7f0000000440)=ANY=[@ANYBLOB="00010600cf"], 0x100}], 0x2}, 0x0) executing program 1: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xd}}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000009c0), 0x38000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000a00)={0x2, "e0648b935fa1c78f359c9258d05b791cb43bdd67753af9724bd2649b1e5d231f"}) r2 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x30, 0x8, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xb, 0x10, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x9, 0x74}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x37, 0x4, 0x80, 0x20, 0xbe}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "bc4011efac99569e21b87e92115bdec6"}]}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xf4ff}}, {0xa6, &(0x7f0000000140)=ANY=[@ANYBLOB="a60392700a9f1d3728fda241c45a5adb08fc6288bb47fb41128436016a7d1d66ad55171ba2b9723cc9bd3d3e010fa178b4407a1060237956864603c9a1c0faaeeb107c455db1ac350f34288f29b7f8b0e442d2984258db5098d4d4b6c08386ab27ffaa2548854359d82a7d038b74a0872d6ab2ee8dd756378ef47abf6f866943ff10b2825dd4fe4046948dd1d7150ae239e343cfbf2b02818290c055684477ba6c5000000000"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0xaa, &(0x7f0000000240)=@string={0xaa, 0x3, "5e04c160a6bdf7b6fd30aaf519ab1ba90084cce3f769be7b6a5f626319b80e4c7f6862316b64f4600146e1e310e01f609c2a68d4a9b2010aa44b27a0ef36d7a139e2ed114fb4c39d29a220a6e4dada4ca55093ab8b2dd5ba987e85c082ed1e8d827e7845ad951b4d0bc662618adb78f626465f4c6815e85932fab0c66a0d0d70d1ae52325584e5a9f799e372180b41fa9524e52c859ab35cca340b97bbad1bf9de3c9e892db66ca5"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x449}}, {0xa5, &(0x7f0000000380)=@string={0xa5, 0x3, "166255c626a68dd0d68b5d820ac28b90096ec6541aff6c27e0fd8e852226479e16a877cc036dcb5bed0d79e9d14ab2f2543d80f37d9375b12da7d17cbd58883594e78cebe6904bb95c668701b7a43e29e531e0497f24abb13174ce911c1d7824412a16346a7b504b7b226a4964e59d8c4a0758c28d06720fc93573a4e990a364c8f018dee38064afb0434489d46e1e733f9be0fd30222862305b7b9670d75030d2d81e"}}, {0x69, &(0x7f0000000440)=@string={0x69, 0x3, "e8cdda1121f173d347d129ae0a7bef6d220cd2d0511065858387fddb181a1045a599346a8e80da4e54eafcf1d737f2596e27868ac6d4edd12a7d027aa056248308b8db5133459daa18ab0e3a911f7f0d6d64f4697cbc6d1b9dc00cc2acf7e730358a405843ee01"}}]}) syz_usb_control_io$printer(r2, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x40, 0x2, 0x6f, {0x6f, 0x9, "32c3e1031dd83cab28f09f063963a157fe3921cd534a7194fcae0827d4e2c7f74f05e9b602b1bb05dae49f8160ff2a2077ecc3dc84bb65017adfec3328b64f64716b753a22a9a2ae3da61556bf87cf66b219814ec35ff50fba028bad49749820ea1e069908229344e6ef191d1e"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, &(0x7f0000000980)={0x34, &(0x7f0000000680)={0x20, 0x1, 0x84, "4673fa7931438f5f3cf7169448e7cf08c86a1918a392cd5edd04e8dc92c33b89116e95a87c6f8c3b32827bca7ae48943bcfc2af06405365ed3622a8c4f5e8e4719772629300f606877d824a195c7a6a59a473afe5d555e2be5ded1cb7fd2448cc052a26d2cfae672e1c2690236eacbd2250d82c2a82cb187b7905717df4f37580e5d43b7"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x5f}, &(0x7f00000007c0)={0x20, 0x0, 0x102, {0x100, "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"}}, &(0x7f0000000900)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000940)={0x20, 0x0, 0x1, 0xb3}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x110, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000002a00)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000200)={0x2, 0x0, 0x0, 0xb7d375beb1f4ba0d}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2201) ioctl$DRM_IOCTL_AUTH_MAGIC(r7, 0x40046411, &(0x7f00000002c0)=0x7c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="c026000041000701000000000700000003", @ANYRESHEX=r7], 0x26c0}, 0x1, 0x0, 0x0, 0x8000}, 0x24004010) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000002a00)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000200)={0x2, 0x0, 0x0, 0xb7d375beb1f4ba0d}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2201) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r7, 0x40046411, &(0x7f00000002c0)=0x7c) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="c026000041000701000000000700000003", @ANYRESHEX=r7], 0x26c0}, 0x1, 0x0, 0x0, 0x8000}, 0x24004010) (async) executing program 2: syz_open_dev$I2C(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) fallocate(r0, 0x8, 0x4000, 0x6) r1 = syz_usb_connect$cdc_ecm(0x2, 0x17c, &(0x7f0000000880)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x16a, 0x1, 0x1, 0x9, 0x70, 0x9, [{{0x9, 0x4, 0x0, 0xd, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x6, 0x7}, [@mdlm_detail={0x103, 0x24, 0x13, 0x1f, "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"}, @mdlm={0x15, 0x24, 0x12, 0x1}, @dmm={0x7, 0x24, 0x14, 0x3, 0x9}, @dmm={0x7, 0x24, 0x14, 0xc, 0x7fff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x0, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x1ff, 0x11, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0xf7, 0x5}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x85, 0xcf, 0x4d, 0x10, 0x6}, 0x3a, &(0x7f0000000400)={0x5, 0xf, 0x3a, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0x1, 0x401}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x6, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xda, "312e09731dd254aa83e2cf481e42e13a"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x10, 0xf8, 0xb822}]}, 0x3, [{0x4, &(0x7f0000000440)=@string={0x4, 0x3, 'D&'}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40e}}, {0x6b, &(0x7f00000004c0)=@string={0x6b, 0x3, "8def7955318c40d94cf2f1f51a159d37350c4e54422da9c25cc211dfb1c65f626b7addea23d80d132985fff46e548512ce3cfb915132a014eda5f87a494c9c2eb08968933133c51ac586162d4022e8185b82fcd10c634445ffe63add189fe3746e770145857520f9da"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x20, 0x6, 0x97, {0x97, 0x22, "5ee8730bf71a45a025556e0fd49900e651cf5580dc77c0d8c9a261b3088c519ea8b411318311b32a7883d791e6cdb86486248252d647af24eb87ca48a7ff6862c1072e734846a2d59cabd2f377c30cce03ad7c212692affd3b8085740172d967221ad9382ee5af986c00ed7a254c61b2f44fb2af672aa1f95a1e68c8da83e8f1e32003b0389bc8a6813c5435bc2d8e6f850627d739"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x1c, &(0x7f00000006c0)={0x40, 0xe, 0x4b, "c57dd82bc2e1b5dcef5194425d7376df3e3474ebff2565a9b9a58102c97382a0c31763ce2964a949b054292edbb24dfe28f8274d9cb661cc4b30c8d20886651c96f42d10e341ee7551c7dc"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x1}}) executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e21000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'pimreg0\x00', @local}) syz_usb_connect(0x0, 0x24, &(0x7f0000002300)={{0x12, 0x1, 0x310, 0x1a, 0x11, 0x81, 0x8, 0x16c0, 0x5df, 0xc5a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x0, 0x10, 0x7, [{{0x9, 0x4, 0x21, 0x6, 0x0, 0x3, 0x0, 0x0, 0x7}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000400)="83", 0x1, 0x4000, 0x0, 0x0) recvmmsg(r3, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/22, 0x16}], 0x1}, 0xfffffffb}], 0x1, 0x40000142, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)='id:\x00\x00\x00\x00') ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344", 0x4f}, {0x0}, {&(0x7f00000005c0)}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x40204706, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x0, 0xfffffff9, 0xd, 0x3, 0x0, [{0x0, 0x2, 0x2f, '\x00', 0x3}, {0xf8, 0xe7, 0xb, '\x00', 0x5}, {0x7, 0x3, 0x2, '\x00', 0x6}, {0xff, 0x9, 0x1, '\x00', 0xa}, {0x3, 0x79, 0x8, '\x00', 0x16}, {0x2, 0x82, 0x3, '\x00', 0x8}, {0x3, 0x4, 0x9}, {0x6, 0xf7, 0x1, '\x00', 0x40}, {0x5, 0x3a, 0x10, '\x00', 0x6}, {0x93, 0x8, 0x4, '\x00', 0x5}, {0x7f, 0x9}, {0x7, 0x1, 0xf, '\x00', 0x2}, {0xe, 0xc, 0x1, '\x00', 0xa}, {0x9, 0x5a, 0x2, '\x00', 0x14}, {0x9, 0x4, 0x5, '\x00', 0x3}, {0x34, 0xda, 0x4, '\x00', 0x8}, {0x0, 0x4a, 0x7, '\x00', 0x1}, {0xc, 0x6, 0xe, '\x00', 0x5}, {0x9, 0x2, 0xb4, '\x00', 0x7}, {0x5, 0x8, 0x0, '\x00', 0x80}, {0x5, 0x7, 0x1, '\x00', 0x5b}, {0xf5, 0x2, 0x2, '\x00', 0x1}, {0xe, 0x1, 0x1, '\x00', 0x33}, {0x6, 0x6, 0x1a, '\x00', 0x7}]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf464", 0xd}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"/896], 0x140}}], 0x1, 0x810) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000007600"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x400002d) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0xfffffffffffffc60) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000000), 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0xffffffffffffffae}], 0x1, 0x40800) socket$inet_sctp(0x2, 0x1, 0x84) executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000005f00)={0x44, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x4004) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2c, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x2c}}, 0x0) executing program 2: r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x40804, 0x0, 0x0) r2 = gettid() r3 = gettid() tkill(r2, 0x12) tkill(r3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x35}, {0x6, 0x0, 0x0, 0x7fff0000}]}) setuid(0xee01) ioprio_set$pid(0x2, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f00000000c0)=""/72, &(0x7f0000000140)=0x48) prctl$PR_SET_IO_FLUSHER(0x39, 0x5) open_by_handle_at(r0, &(0x7f0000000040)=@fuse={0xc, 0x81, {0xffffff51, 0x7ff, 0x5}}, 0x242880) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x201, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x4, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x5, 0x2}}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e20, 0x3, 0x4e24, 0x0, 0x2, 0xa0, 0x0, 0x29, r5}, {0x0, 0x80000000, 0x8, 0x18, 0x0, 0x1002, 0x0, 0x3}, {0x2000000000005, 0x0, 0x9, 0xb}, 0x80000000, 0x6e6bba, 0x3, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x4d4, 0x6c}, 0xa, @in=@multicast2, 0xb505, 0x4, 0x3, 0x7, 0xa6508de, 0x2bd, 0x7}}, 0xe8) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406d049cc200000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000000)="2d74115fd9", 0x2}], 0x1, 0x4, 0xa) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="2022ca000000ca10330d44d8f7a9f677339d1fe8e07956cd56546f08f610897d70ac7ad189b8fba9161ca86d0cc55b994ff382ff0d324378f949982aeb917ad168424c668c72ce011fea5e12a49e4bdee85530c9c6922cd0ec97e31b62ee2c448da06dd6a86c73052bef7b9c96a07d280904882540dcdbf58e9ecd47e832d4ade6e8e72d7d1daa7098201b9c28f628145ba56d7e3032ec7aedd1dd842052a891da779f210e63dfef27d62f5ab7409706e9d32e83f7a185a629f79adaab4eb4b14a178e3ac28d57000000000000000000"], 0x0, 0x0, 0x0}, 0x0) executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x1, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x100000001, 0x4) semget$private(0x0, 0x0, 0x113) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0100001000130427bd7000fbdbdf25fe800000000000000000000000000000ac1414bb000088000000000000000000000000000000000000000000005a3e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="0258a7b81bfd"], 0x15c}}, 0x4000080) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, &(0x7f00000000c0)) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x7, 0x600000) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000100)=0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000280001"], 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, 0x0, 0x2) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000000)=0x4) ioctl$KVM_GET_MP_STATE(r7, 0x8004ae98, &(0x7f0000000080)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40400, 0x0) ioctl$FBIOPUTCMAP(r8, 0x4605, &(0x7f0000000380)={0x4674, 0x1, &(0x7f0000000280)=[0x7], &(0x7f00000002c0)=[0x2, 0x0, 0x80, 0x3ff], &(0x7f0000000300)=[0x7, 0x8001, 0x2, 0x2, 0x101, 0x82e, 0xfffb], &(0x7f0000000340)=[0x0, 0x4, 0x7ff, 0x0]}) executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="0082921f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000064d564b"]) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000b00)={0x40, 0x8, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=prefer=rela|ive: ']) sendmsg$key(r2, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001c40)={0x2, 0x4, 0x3, 0x2, 0xc, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x4e24, @local}}, @sadb_address={0x5, 0x6, 0x9d, 0x60, 0x0, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0x4, 0x2d, 0x1, 0x40000000}]}, 0x60}}, 0x8040) r3 = syz_usb_connect(0x3, 0x42, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x98, 0x5c, 0x47, 0x40, 0x12d1, 0x6708, 0xb0f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x30, 0x1, 0xa0, 0x1, 0x80, 0xf, [{{0x9, 0x4, 0x4c, 0x4, 0x0, 0xff, 0x3, 0xf, 0x0, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xc, 0x4, 0x9, 0x7, "", "83c1"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x18, 0x3, 0xc, 0x37, "a75710dee6"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xe, 0x4}]}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x30, &(0x7f0000000000)=@string={0x30, 0x3, "e1d185c8c82005d3dd091dea387d80b92f220c011625c503d2840a7b9e033dec4e86858596521ab606441c98090b"}}]}) syz_usb_connect$cdc_ecm(0x5, 0x8e, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x1, 0x1, 0x2, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "f0052c"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xe182, 0xec0, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x40, 0x8, 0x12}, @country_functional={0xc, 0x24, 0x7, 0xbf, 0x0, [0x0, 0x2, 0x7f]}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x2, 0x200}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x9, 0x200}, @mdlm={0x15, 0x24, 0x12, 0x1}, @country_functional={0x6, 0x24, 0x7, 0x1a, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xc5, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x9, 0x95}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x3, 0x2, 0x2, 0x10, 0x85}, 0x16, &(0x7f0000000200)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x7, 0x0, 0x60}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x0, 0x9}]}, 0x2, [{0x5f, &(0x7f0000000240)=@string={0x5f, 0x3, "d21195bda7d58381bab00cdaa0b3e7f6d702158e603f1f41e3ac0252976099f50c0bde5ec1f75ead9e96330738e9663fd794808910e42ac1dd07a9348d9e0131327845a27d3dd2ef31d8a71f8624c46b676966f29d3e287ddde66e29df"}}, {0x2e, &(0x7f00000002c0)=@string={0x2e, 0x3, "c5bae2f22b767e17685602a3791addab3b94096bfec347e8bc847be38edc1f2f07e1aae83c12092304ad91c1"}}]}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1477, 0x1006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x0, 0xda, {0x9, 0x21, 0x3b, 0x9, 0x1, {0x22, 0xe95}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfb, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x9, 0x6, 0x4, 0x10, 0x9}, 0x85, &(0x7f00000003c0)={0x5, 0xf, 0x85, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0x87, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x4, 0xf00, 0x5c5, [0xf, 0x3f00, 0xffc0, 0xc00f, 0xc0, 0xc030]}, @generic={0x47, 0x10, 0x2, "9d6362cc6e7620c430071542b2932db22fcf438961e89d5ff53560117ee0ca90803230e4501091bca23f2882bb8db30a2e893b1ef62db7652fdb71a6836130f499fa4221"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x88, 0x4, 0xfe00, 0x80}]}, 0x6, [{0x5d, &(0x7f0000000480)=@string={0x5d, 0x3, "ff01f4e696e59e42ccd77d9812be21228d6cd7d2ba9625720809b079a6f40699083de993839431b3031374f998d32e7581438630b5d539177becf1298bd50a80f650ff6881fc4411a362dba78fcf1cc6a80bd52c07028075389401"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4}}, {0x95, &(0x7f0000000540)=@string={0x95, 0x3, "ad547b4bec86a190272856a37f8dec101f532493d937925532d1f66d0e7085e6a2344fd557279e19d734d007f6d08b381ce679bb43050d78e068ee56b09c56a1818e23aa761f5451cf0947742ad8cf306ca133ba3a90bde61afacc79e746bd2ebf5aadc1377fbb9b7f71adaf73526eed21b4b19c0d960d67d3548b842f9dc4fd04f80569bac4c1352ec299825229271d2763b6"}}, {0x9b, &(0x7f0000000600)=@string={0x9b, 0x3, "253602f7cd14e8dfd0e401678a98686f88b042a675bed685275dea6cf2fea7581c3e2c6ac27be1b3e378ebd02f20035eda63390d92e41a3d1430adf759ce7b9536fa0366975c0da66d191a9792d1d3a8040621f2888acd57f5b458c95403081b311ed19c39e08bb7792a3537d0625c970d178e58b84eb28a09482d8ea6f5684c852fbf792d9867c64ffde2316683906a6e7a3b801e3357912b"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1812}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x411}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000000900)={0x14, &(0x7f00000007c0)={0x0, 0xf, 0xe9, {0xe9, 0x9, "5e73ee0ea7e6b10627706ea9d13db105d20eb9f557767a5ba0dcea77f6b83e6184a34d8d0f16526fa751c03a285fd1677b8a7ef5c84a70742caf0558f661b0c59ff2a74c21d937b4e2c25e951a0fb43512f9463aa8980a6bcf597fed5fc145541724572e82cac2c28d9ab715dcf5044af40de96b371b3c875b54042242e1605300344032eb8c6f04883b61d9907cdbef11b92753043b237620f37d70633d93f724a1d29c1ada52415f0911b3454e9e9d3d4180db038b14b19696a2e2361f3bfc31a21aef0020b3a440bdb4c81d9b89155d1d57ac1b4079fb32d11d9bd88d6fb6fb40d2e47e5cd7"}}, &(0x7f00000008c0)={0x0, 0x3, 0x28, @string={0x28, 0x3, "f6dc02665dfc336cce10b10e4d8faeeffb2bc3a8abd5c927fd61f643f7cb8ea442f1f7d9a396"}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000940)={0x40, 0xd, 0x4e, "875df9acd2cc8b47825271682293dc32f9a589b0c56d7705a91f43a862bbb6837cdd9bded0c4d291e59f057f36c598946b0030b08d671ba5b19c297f8c5475bd766d91b4e2ba1946b9df22c76d0f"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a40)={0x20, 0x81, 0x3, "b419d4"}, &(0x7f0000000a80)={0x20, 0x82, 0x2, "ce1f"}, &(0x7f0000000c00)=ANY=[@ANYBLOB="ca5ada030000001300006d0000002000000000000000a53e0000"], &(0x7f0000000b00)={0x20, 0x84, 0x3, "98b59b"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "218e67"}}) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) socket$key(0xf, 0x3, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=prefer=rela|ive: ']) (async) sendmsg$key(r2, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001c40)={0x2, 0x4, 0x3, 0x2, 0xc, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x4e24, @local}}, @sadb_address={0x5, 0x6, 0x9d, 0x60, 0x0, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0x4, 0x2d, 0x1, 0x40000000}]}, 0x60}}, 0x8040) (async) syz_usb_connect(0x3, 0x42, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x98, 0x5c, 0x47, 0x40, 0x12d1, 0x6708, 0xb0f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x30, 0x1, 0xa0, 0x1, 0x80, 0xf, [{{0x9, 0x4, 0x4c, 0x4, 0x0, 0xff, 0x3, 0xf, 0x0, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xc, 0x4, 0x9, 0x7, "", "83c1"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x18, 0x3, 0xc, 0x37, "a75710dee6"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xe, 0x4}]}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x30, &(0x7f0000000000)=@string={0x30, 0x3, "e1d185c8c82005d3dd091dea387d80b92f220c011625c503d2840a7b9e033dec4e86858596521ab606441c98090b"}}]}) (async) syz_usb_connect$cdc_ecm(0x5, 0x8e, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x1, 0x1, 0x2, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "f0052c"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xe182, 0xec0, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x40, 0x8, 0x12}, @country_functional={0xc, 0x24, 0x7, 0xbf, 0x0, [0x0, 0x2, 0x7f]}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x2, 0x200}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x9, 0x200}, @mdlm={0x15, 0x24, 0x12, 0x1}, @country_functional={0x6, 0x24, 0x7, 0x1a, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xc5, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x9, 0x95}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x3, 0x2, 0x2, 0x10, 0x85}, 0x16, &(0x7f0000000200)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x7, 0x0, 0x60}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x0, 0x9}]}, 0x2, [{0x5f, &(0x7f0000000240)=@string={0x5f, 0x3, "d21195bda7d58381bab00cdaa0b3e7f6d702158e603f1f41e3ac0252976099f50c0bde5ec1f75ead9e96330738e9663fd794808910e42ac1dd07a9348d9e0131327845a27d3dd2ef31d8a71f8624c46b676966f29d3e287ddde66e29df"}}, {0x2e, &(0x7f00000002c0)=@string={0x2e, 0x3, "c5bae2f22b767e17685602a3791addab3b94096bfec347e8bc847be38edc1f2f07e1aae83c12092304ad91c1"}}]}) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1477, 0x1006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x0, 0xda, {0x9, 0x21, 0x3b, 0x9, 0x1, {0x22, 0xe95}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfb, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x9, 0x6, 0x4, 0x10, 0x9}, 0x85, &(0x7f00000003c0)={0x5, 0xf, 0x85, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0x87, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x4, 0xf00, 0x5c5, [0xf, 0x3f00, 0xffc0, 0xc00f, 0xc0, 0xc030]}, @generic={0x47, 0x10, 0x2, "9d6362cc6e7620c430071542b2932db22fcf438961e89d5ff53560117ee0ca90803230e4501091bca23f2882bb8db30a2e893b1ef62db7652fdb71a6836130f499fa4221"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x88, 0x4, 0xfe00, 0x80}]}, 0x6, [{0x5d, &(0x7f0000000480)=@string={0x5d, 0x3, "ff01f4e696e59e42ccd77d9812be21228d6cd7d2ba9625720809b079a6f40699083de993839431b3031374f998d32e7581438630b5d539177becf1298bd50a80f650ff6881fc4411a362dba78fcf1cc6a80bd52c07028075389401"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4}}, {0x95, &(0x7f0000000540)=@string={0x95, 0x3, "ad547b4bec86a190272856a37f8dec101f532493d937925532d1f66d0e7085e6a2344fd557279e19d734d007f6d08b381ce679bb43050d78e068ee56b09c56a1818e23aa761f5451cf0947742ad8cf306ca133ba3a90bde61afacc79e746bd2ebf5aadc1377fbb9b7f71adaf73526eed21b4b19c0d960d67d3548b842f9dc4fd04f80569bac4c1352ec299825229271d2763b6"}}, {0x9b, &(0x7f0000000600)=@string={0x9b, 0x3, "253602f7cd14e8dfd0e401678a98686f88b042a675bed685275dea6cf2fea7581c3e2c6ac27be1b3e378ebd02f20035eda63390d92e41a3d1430adf759ce7b9536fa0366975c0da66d191a9792d1d3a8040621f2888acd57f5b458c95403081b311ed19c39e08bb7792a3537d0625c970d178e58b84eb28a09482d8ea6f5684c852fbf792d9867c64ffde2316683906a6e7a3b801e3357912b"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1812}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x411}}]}) (async) syz_usb_control_io$uac1(r3, &(0x7f0000000900)={0x14, &(0x7f00000007c0)={0x0, 0xf, 0xe9, {0xe9, 0x9, "5e73ee0ea7e6b10627706ea9d13db105d20eb9f557767a5ba0dcea77f6b83e6184a34d8d0f16526fa751c03a285fd1677b8a7ef5c84a70742caf0558f661b0c59ff2a74c21d937b4e2c25e951a0fb43512f9463aa8980a6bcf597fed5fc145541724572e82cac2c28d9ab715dcf5044af40de96b371b3c875b54042242e1605300344032eb8c6f04883b61d9907cdbef11b92753043b237620f37d70633d93f724a1d29c1ada52415f0911b3454e9e9d3d4180db038b14b19696a2e2361f3bfc31a21aef0020b3a440bdb4c81d9b89155d1d57ac1b4079fb32d11d9bd88d6fb6fb40d2e47e5cd7"}}, &(0x7f00000008c0)={0x0, 0x3, 0x28, @string={0x28, 0x3, "f6dc02665dfc336cce10b10e4d8faeeffb2bc3a8abd5c927fd61f643f7cb8ea442f1f7d9a396"}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000940)={0x40, 0xd, 0x4e, "875df9acd2cc8b47825271682293dc32f9a589b0c56d7705a91f43a862bbb6837cdd9bded0c4d291e59f057f36c598946b0030b08d671ba5b19c297f8c5475bd766d91b4e2ba1946b9df22c76d0f"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a40)={0x20, 0x81, 0x3, "b419d4"}, &(0x7f0000000a80)={0x20, 0x82, 0x2, "ce1f"}, &(0x7f0000000c00)=ANY=[@ANYBLOB="ca5ada030000001300006d0000002000000000000000a53e0000"], &(0x7f0000000b00)={0x20, 0x84, 0x3, "98b59b"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "218e67"}}) (async) executing program 3: syz_open_dev$I2C(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) fallocate(r0, 0x8, 0x4000, 0x6) r1 = syz_usb_connect$cdc_ecm(0x2, 0x175, &(0x7f0000000880)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x163, 0x1, 0x1, 0x9, 0x70, 0x9, [{{0x9, 0x4, 0x0, 0xd, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x6, 0x7}, [@mdlm_detail={0x103, 0x24, 0x13, 0x1f, "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"}, @mdlm={0x15, 0x24, 0x12, 0x1}, @dmm={0x7, 0x24, 0x14, 0x3, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x0, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x1ff, 0x11, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0xf7, 0x5}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x85, 0xcf, 0x4d, 0x10, 0x6}, 0x3a, &(0x7f0000000400)={0x5, 0xf, 0x3a, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0x1, 0x401}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x6, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xda, "312e09731dd254aa83e2cf481e42e13a"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x10, 0xf8, 0xb822}]}, 0x3, [{0x4, &(0x7f0000000440)=@string={0x4, 0x3, 'D&'}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40e}}, {0x6b, &(0x7f00000004c0)=@string={0x6b, 0x3, "8def7955318c40d94cf2f1f51a159d37350c4e54422da9c25cc211dfb1c65f626b7addea23d80d132985fff46e548512ce3cfb915132a014eda5f87a494c9c2eb08968933133c51ac586162d4022e8185b82fcd10c634445ffe63add189fe3746e770145857520f9da"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x20, 0x6, 0x97, {0x97, 0x22, "5ee8730bf71a45a025556e0fd49900e651cf5580dc77c0d8c9a261b3088c519ea8b411318311b32a7883d791e6cdb86486248252d647af24eb87ca48a7ff6862c1072e734846a2d59cabd2f377c30cce03ad7c212692affd3b8085740172d967221ad9382ee5af986c00ed7a254c61b2f44fb2af672aa1f95a1e68c8da83e8f1e32003b0389bc8a6813c5435bc2d8e6f850627d739"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x1c, &(0x7f00000006c0)={0x40, 0xe, 0x4b, "c57dd82bc2e1b5dcef5194425d7376df3e3474ebff2565a9b9a58102c97382a0c31763ce2964a949b054292edbb24dfe28f8274d9cb661cc4b30c8d20886651c96f42d10e341ee7551c7dc"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x1}}) executing program 3: syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000440)='usrquota') sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb9040220081c0bc14b0a26f7aad3724745f5267cfd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000040012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f90000", 0xd8}], 0x1}, 0x884) mount$tmpfs(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6d706f6c3d62690bbe60"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x9c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "c673affa"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f36993faf4cf6c32da"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4737687c8e87580d6dce9560ba"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000b00), 0x4000000024882, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) kexec_load(0xff0f, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) io_submit(r7, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r6, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_DESTROY$stdev(r7, 0x3b80, &(0x7f0000000340)={0x8}) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x4, 0xfffffffe) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000100)={0xc, 0x200, 0x5, 0x1, r9}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000240)={r9, 0x1}, &(0x7f0000000280)=0x8) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) executing program 3: arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) mount(0x0, 0x0, &(0x7f0000000580)='tracefs\x00', 0x800000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) executing program 3: alarm(0x16e6) executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', @ifru_data=&(0x7f0000000580)="77629e9ffe408b0e43366c56b77e81b935d7e1584378dc9ed7c6ed9be933cd1f"}) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_vhci(&(0x7f0000000880)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x2, @none, 0x3}}}, 0xb) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-close-sendmsg$NFT_BATCH-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-openat$kvm-syz_init_net_socket$nfc_llcp-ioctl$KVM_CREATE_VM-openat$cgroup_ro-ioctl$IOMMU_DESTROY$stdev-write$binfmt_script-preadv-socket-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST-setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO-getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN-close_range detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_DESTROY$stdev(r7, 0x3b80, &(0x7f0000000340)={0x8}) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x4, 0xfffffffe) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000100)={0xc, 0x200, 0x5, 0x1, r9}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000240)={r9, 0x1}, &(0x7f0000000280)=0x8) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) program crashed: WARNING in put_pid_ns single: successfully extracted reproducer found reproducer with 30 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-close-sendmsg$NFT_BATCH-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-openat$kvm-syz_init_net_socket$nfc_llcp-ioctl$KVM_CREATE_VM-openat$cgroup_ro-ioctl$IOMMU_DESTROY$stdev-write$binfmt_script-preadv-socket-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST-setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO-getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_DESTROY$stdev(r6, 0x3b80, &(0x7f0000000340)={0x8}) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x4, 0xfffffffe) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0xc, 0x200, 0x5, 0x1, r8}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000240)={r8, 0x1}, &(0x7f0000000280)=0x8) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) program crashed: WARNING in put_pid_ns testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-close-sendmsg$NFT_BATCH-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-openat$kvm-syz_init_net_socket$nfc_llcp-ioctl$KVM_CREATE_VM-openat$cgroup_ro-ioctl$IOMMU_DESTROY$stdev-write$binfmt_script-preadv-socket-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST-setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO-getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF-ioctl$KVM_CREATE_VCPU detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_DESTROY$stdev(r6, 0x3b80, &(0x7f0000000340)={0x8}) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x4, 0xfffffffe) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0xc, 0x200, 0x5, 0x1, r8}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000240)={r8, 0x1}, &(0x7f0000000280)=0x8) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) program crashed: WARNING in put_pid_ns testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-close-sendmsg$NFT_BATCH-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-openat$kvm-syz_init_net_socket$nfc_llcp-ioctl$KVM_CREATE_VM-openat$cgroup_ro-ioctl$IOMMU_DESTROY$stdev-write$binfmt_script-preadv-socket-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST-setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO-getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, &(0x7f0000000340)={0x8}) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x4, 0xfffffffe) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0xc, 0x200, 0x5, 0x1, r7}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000240)={r7, 0x1}, &(0x7f0000000280)=0x8) program crashed: WARNING in put_pid_ns testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-close-sendmsg$NFT_BATCH-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-openat$kvm-syz_init_net_socket$nfc_llcp-ioctl$KVM_CREATE_VM-openat$cgroup_ro-ioctl$IOMMU_DESTROY$stdev-write$binfmt_script-preadv-socket-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST-setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, &(0x7f0000000340)={0x8}) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x4, 0xfffffffe) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0xc, 0x200, 0x5, 0x1, r7}, 0x10) program crashed: WARNING in put_pid_ns testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-close-sendmsg$NFT_BATCH-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-openat$kvm-syz_init_net_socket$nfc_llcp-ioctl$KVM_CREATE_VM-openat$cgroup_ro-ioctl$IOMMU_DESTROY$stdev-write$binfmt_script-preadv-socket-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, &(0x7f0000000340)={0x8}) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x4, 0xfffffffe) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) program crashed: WARNING in put_pid_ns testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-close-sendmsg$NFT_BATCH-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-openat$kvm-syz_init_net_socket$nfc_llcp-ioctl$KVM_CREATE_VM-openat$cgroup_ro-ioctl$IOMMU_DESTROY$stdev-write$binfmt_script-preadv-socket-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3 detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, &(0x7f0000000340)={0x8}) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x4, 0xfffffffe) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) program crashed: WARNING in put_pid_ns testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-close-sendmsg$NFT_BATCH-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-openat$kvm-syz_init_net_socket$nfc_llcp-ioctl$KVM_CREATE_VM-openat$cgroup_ro-ioctl$IOMMU_DESTROY$stdev-write$binfmt_script-preadv-socket detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, &(0x7f0000000340)={0x8}) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x4, 0xfffffffe) socket(0x2, 0x80805, 0x0) program crashed: WARNING in put_pid_ns testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-close-sendmsg$NFT_BATCH-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-openat$kvm-syz_init_net_socket$nfc_llcp-ioctl$KVM_CREATE_VM-openat$cgroup_ro-ioctl$IOMMU_DESTROY$stdev-write$binfmt_script-preadv detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, &(0x7f0000000340)={0x8}) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x4, 0xfffffffe) program crashed: WARNING in put_pid_ns testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-close-sendmsg$NFT_BATCH-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-openat$kvm-syz_init_net_socket$nfc_llcp-ioctl$KVM_CREATE_VM-openat$cgroup_ro-ioctl$IOMMU_DESTROY$stdev-write$binfmt_script detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, &(0x7f0000000340)={0x8}) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) program crashed: WARNING in put_pid_ns testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-close-sendmsg$NFT_BATCH-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-openat$kvm-syz_init_net_socket$nfc_llcp-ioctl$KVM_CREATE_VM-openat$cgroup_ro-ioctl$IOMMU_DESTROY$stdev detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, &(0x7f0000000340)={0x8}) program crashed: WARNING in put_pid_ns testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-close-sendmsg$NFT_BATCH-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-openat$kvm-syz_init_net_socket$nfc_llcp-ioctl$KVM_CREATE_VM-openat$cgroup_ro detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) program crashed: WARNING in nsproxy_ns_active_get testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-close-sendmsg$NFT_BATCH-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-openat$kvm-syz_init_net_socket$nfc_llcp-ioctl$KVM_CREATE_VM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) program crashed: WARNING in nsproxy_ns_active_get testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-close-sendmsg$NFT_BATCH-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-openat$kvm-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program crashed: WARNING in nsproxy_ns_active_get testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-close-sendmsg$NFT_BATCH-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-openat$kvm detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-close-sendmsg$NFT_BATCH-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program crashed: WARNING in nsproxy_ns_active_get testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-close-sendmsg$NFT_BATCH-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program crashed: WARNING in nsproxy_ns_active_get testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-close-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program crashed: WARNING in put_pid_ns testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-ioctl$TUNSETQUEUE-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program crashed: WARNING in put_pid_ns testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-sendmsg-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program crashed: WARNING in nsproxy_ns_active_get testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-sendmsg$inet6-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program crashed: WARNING in put_pid_ns testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-socket$inet6-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program crashed: WARNING in put_pid_ns testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-capset-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program crashed: WARNING in put_pid_ns testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-socket$inet6-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-socket$nl_netfilter-capset-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program crashed: WARNING in put_pid_ns testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-mmap-capset-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program crashed: WARNING in nsproxy_ns_active_get testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-unshare-capset-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program crashed: WARNING in nsproxy_ns_active_get testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-ioctl$TUNSETIFF-capset-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program crashed: WARNING in alloc_pid testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-openat$tun-capset-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program crashed: WARNING in alloc_pid testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-capset-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program crashed: WARNING in alloc_pid testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program crashed: WARNING in alloc_pid testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: capset(0x0, &(0x7f0000000080)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: capset(&(0x7f0000000040)={0x20080522}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program did not crash extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp program crashed: WARNING in alloc_pid simplifying C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp program crashed: WARNING in alloc_pid testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp program crashed: WARNING in nsproxy_ns_active_put a never seen crash title: WARNING in nsproxy_ns_active_put, ignore testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp program did not crash testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp program crashed: WARNING in alloc_pid testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp program crashed: WARNING in alloc_pid testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp program crashed: WARNING in alloc_pid testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp program crashed: WARNING in nsproxy_ns_active_put a never seen crash title: WARNING in nsproxy_ns_active_put, ignore testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp program crashed: WARNING in alloc_pid testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp program crashed: WARNING in alloc_pid testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp program crashed: WARNING in alloc_pid testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp program crashed: WARNING in nsproxy_ns_active_put a never seen crash title: WARNING in nsproxy_ns_active_put, ignore testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp program crashed: WARNING in alloc_pid testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp program crashed: WARNING in nsproxy_ns_active_put a never seen crash title: WARNING in nsproxy_ns_active_put, ignore testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp program crashed: WARNING in nsproxy_ns_active_put a never seen crash title: WARNING in nsproxy_ns_active_put, ignore testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp program crashed: WARNING in nsproxy_ns_active_put a never seen crash title: WARNING in nsproxy_ns_active_put, ignore testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program crashed: WARNING in alloc_pid validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program crashed: WARNING in alloc_pid validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-syz_init_net_socket$nfc_llcp detailed listing: executing program 0: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) program crashed: WARNING in nsproxy_ns_active_put validation run: crashed=true reproducing took 1h29m25.245773459s repro crashed as (corrupted=false): ------------[ cut here ]------------ WARNING: ./include/linux/ns_common.h:311 at __ns_ref_active_put include/linux/ns_common.h:311 [inline], CPU#0: syz.2.29/6060 WARNING: ./include/linux/ns_common.h:311 at nsproxy_ns_active_put+0xa19/0xd30 fs/nsfs.c:707, CPU#0: syz.2.29/6060 Modules linked in: CPU: 0 UID: 0 PID: 6060 Comm: syz.2.29 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 RIP: 0010:__ns_ref_active_put include/linux/ns_common.h:311 [inline] RIP: 0010:nsproxy_ns_active_put+0xa19/0xd30 fs/nsfs.c:707 Code: 0f 0b 90 e9 71 fc ff ff e8 54 52 77 ff 90 0f 0b 90 e9 ab fc ff ff e8 46 52 77 ff 90 0f 0b 90 e9 41 fd ff ff e8 38 52 77 ff 90 <0f> 0b 90 e9 64 fd ff ff e8 2a 52 77 ff 90 0f 0b 90 e9 98 fd ff ff RSP: 0018:ffffc900033f7d38 EFLAGS: 00010293 RAX: ffffffff824a1b88 RBX: ffff88805876a750 RCX: ffff88807e148000 RDX: 0000000000000000 RSI: 00000000effffff8 RDI: 00000000effffff8 RBP: 00000000effffff8 R08: ffffffff8e36cb4b R09: 1ffffffff1c6d969 R10: dffffc0000000000 R11: fffffbfff1c6d96a R12: dffffc0000000000 R13: 1ffffffff1c6d955 R14: ffffffff8e36ca80 R15: ffffffff8e36caa8 FS: 00005555653d3500(0000) GS:ffff888125a8b000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b30163fff CR3: 0000000076924000 CR4: 00000000003526f0 Call Trace: free_nsproxy+0x26/0x560 kernel/nsproxy.c:190 put_nsset kernel/nsproxy.c:341 [inline] __do_sys_setns kernel/nsproxy.c:594 [inline] __se_sys_setns+0x1268/0x17d0 kernel/nsproxy.c:559 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f final repro crashed as (corrupted=false): ------------[ cut here ]------------ WARNING: ./include/linux/ns_common.h:311 at __ns_ref_active_put include/linux/ns_common.h:311 [inline], CPU#0: syz.2.29/6060 WARNING: ./include/linux/ns_common.h:311 at nsproxy_ns_active_put+0xa19/0xd30 fs/nsfs.c:707, CPU#0: syz.2.29/6060 Modules linked in: CPU: 0 UID: 0 PID: 6060 Comm: syz.2.29 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 RIP: 0010:__ns_ref_active_put include/linux/ns_common.h:311 [inline] RIP: 0010:nsproxy_ns_active_put+0xa19/0xd30 fs/nsfs.c:707 Code: 0f 0b 90 e9 71 fc ff ff e8 54 52 77 ff 90 0f 0b 90 e9 ab fc ff ff e8 46 52 77 ff 90 0f 0b 90 e9 41 fd ff ff e8 38 52 77 ff 90 <0f> 0b 90 e9 64 fd ff ff e8 2a 52 77 ff 90 0f 0b 90 e9 98 fd ff ff RSP: 0018:ffffc900033f7d38 EFLAGS: 00010293 RAX: ffffffff824a1b88 RBX: ffff88805876a750 RCX: ffff88807e148000 RDX: 0000000000000000 RSI: 00000000effffff8 RDI: 00000000effffff8 RBP: 00000000effffff8 R08: ffffffff8e36cb4b R09: 1ffffffff1c6d969 R10: dffffc0000000000 R11: fffffbfff1c6d96a R12: dffffc0000000000 R13: 1ffffffff1c6d955 R14: ffffffff8e36ca80 R15: ffffffff8e36caa8 FS: 00005555653d3500(0000) GS:ffff888125a8b000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b30163fff CR3: 0000000076924000 CR4: 00000000003526f0 Call Trace: free_nsproxy+0x26/0x560 kernel/nsproxy.c:190 put_nsset kernel/nsproxy.c:341 [inline] __do_sys_setns kernel/nsproxy.c:594 [inline] __se_sys_setns+0x1268/0x17d0 kernel/nsproxy.c:559 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f