Extracting prog: 24m6.149462378s Minimizing prog: 1h12m22.636878257s Simplifying prog options: 14m57.628421185s Extracting C: 5m5.457167938s Simplifying C: 0s extracting reproducer from 38 programs testing a last program of every proc single: executing 8 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-connect$inet6-sendmmsg$inet6-setsockopt$WPAN_SECURITY detailed listing: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x11}], 0x400000000000172, 0x4000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-bind$alg-setsockopt$ALG_SET_KEY-socket$kcm-sendmsg$kcm detailed listing: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x6, 0x0, 0x0) (async) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-mmap-mprotect-socket$packet-setsockopt$packet_int-socket$nl_xfrm-ioctl$sock_SIOCGIFINDEX-sendto$packet-openat$cdrom-ioctl$CDROMSTOP-ioctl$USBDEVFS_SETINTERFACE detailed listing: executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x71, 0x121381) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000008000/0x11000)=nil, 0x11000, 0x100000c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03f6ff78ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r3}, 0x14) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) ioctl$CDROMSTOP(r4, 0x5307) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000140)={0x0, 0x6}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-syz_open_dev$tty1-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-bpf$PROG_LOAD-bpf$PROG_LOAD-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-sendmsg$nl_xfrm-socket$inet6_tcp-setsockopt$inet6_tcp_int-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-sendto$inet6-write$binfmt_aout-mprotect-ioctl$HIDIOCGREPORTINFO-ioctl$TIOCL_GETKMSGREDIRECT-mmap-madvise-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-ioctl$UFFDIO_WRITEPROTECT-openat$cgroup_ro detailed listing: executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0xfffffffffffffffd, 0x311802) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000006c0)=':\x00', &(0x7f0000000700)='ext4_mark_inode_dirty\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='\xc8/A\xe3\xfe[\x16@:\xe5\xfc\xb7\xff\x02\xb0Z!\xa6\xcc+\xed\t\x10\x11\xe8\xcb4\x06\xfa@\x11l\xbd-Rw\xf4}\x11\xc0\xb3:!\x19\x9cq\xe6\x1f8cE\xe7\x05\x97.\xb6YJ\x89\x930\x01\xd0\xfd\xfd\xf7L\xff\xc7$J\xb5H+e\x9e\x99&\xb5\x0e\xab\a.\xde\xb9\x7f\xb7\x9a\xf0\x0e\xe0Xb\x8f\x99\xe7\xa2Vs\n\xea\xaf\x04=\xb5t\xb6\'9T\x84\xe0\xc4\xbfMHo$\xca)\x1a\t\xa6\xb2\x9c\x80\x1fBz\xa4\xf7./O\x87,V\x16\\O\x90\xac\xc9\xc9k~\x99\xd1\x84Y\"$L\xbe\x83\xcf\xd3!\xa0,|b\xf5.\x06\x9d\x97\x1d\x91\xf6P\xfaNp\x1b8\xc3\x1e6\xe9\xb5\xc2\xe8\xa4#\x10\xc22t>\xf2\x909\f\xe2-[\xaf~B=\x94s\x93\xee\xce\x06\xb9\x89\xfc\xb3`P\xeao\x03\a\x9f\xc9]\x13\x99\xa1\x1b\xc7\xa0\xa8\x1eD`G\x897\x16\xbb\x1e\xf2r\xad\x16?$a\x96\x9aH\xd9\xdc\x1a\xbf<\x05\x87\x06\xa1\x98\x1e', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x200c0000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000400), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x303}, "c8e0292cb7697fe2", "3092c0272f43fe598175368ffca23f3d", "7ecee3c0", "244e081424ae6f89"}, 0x28) sendto$inet6(r4, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0xfffffffffffffed5) write$binfmt_aout(r4, 0x0, 0xfdef) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000000)={0x1, 0xfffffffa, 0x15}) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x560f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000f, 0x2010, 0xffffffffffffffff, 0xe91ca000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-sendmsg$BATADV_CMD_SET_MESH-socket$nl_xfrm-syz_clone-prctl$PR_SET_PTRACER-openat$cgroup_ro-write$UHID_CREATE2-mmap-socket$l2tp-getsockopt$ARPT_SO_GET_INFO-prctl$PR_SET_PTRACER-sendmsg$nl_xfrm-socket$nl_route-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000feffffff0f00000008000300", @ANYRES32=r2, @ANYBLOB="08009dec349029d87e01dccbccd818d1455977080000"], 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x40080) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x12, r5, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000001000), &(0x7f0000000f40)=0x44) prctl$PR_SET_PTRACER(0x59616d61, r4) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa00000000000000000000000003000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000cd000000000000003400170015000000000000000000000000000000000000000000000004000000050000000100000008000000f7ffffff008000004c00140063"], 0x170}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9, 0x2, 0x2}}]}]}]}, 0x4c}}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-sendmsg$BATADV_CMD_SET_MESH-socket$nl_xfrm-syz_clone-prctl$PR_SET_PTRACER-openat$cgroup_ro-write$UHID_CREATE2-mmap-socket$l2tp-getsockopt$ARPT_SO_GET_INFO-prctl$PR_SET_PTRACER-sendmsg$nl_xfrm-socket$nl_route-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000feffffff0f00000008000300", @ANYRES32=r2, @ANYBLOB="08009dec349029d87e01dccbccd818d1455977080000"], 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x40080) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x12, r5, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000001000), &(0x7f0000000f40)=0x44) prctl$PR_SET_PTRACER(0x59616d61, r4) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa00000000000000000000000003000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000cd000000000000003400170015000000000000000000000000000000000000000000000004000000050000000100000008000000f7ffffff008000004c00140063"], 0x170}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9, 0x2, 0x2}}]}]}]}, 0x4c}}, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 38 programs with base timeout 30s testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 27, 8, 11, 2, 16, 16, 10, 7, 12, 8, 30, 1, 1, 8, 8, 30, 8, 13, 26, 8, 19, 18, 14, 4, 6, 7, 7, 22, 25, 8, 30, 25, 37, 11, 2, 5, 8] detailed listing: executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]}) unlink(&(0x7f0000000300)='./file0/file0\x00') executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x2}}, 0x26) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x1a8000, 0xa, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x3000}, {0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x0, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x10000, 0x1, 0x9, 0x0, 0xfd}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x2, 0x3}, {0x0, 0xeeee8000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030, 0x80000a, 0x0, 0x3000, [0x800000000, 0x0, 0x1a7ff4f4]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000002c0)={0x4, 0x4000, 0x7, 0x40, 0x63}) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x2, 0x0, 0x20001f00) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f0000019080)={0xbe, 0x0, 0x1}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x2b0, 0x268, 0x300, 0x2b0, 0x268, 0x3e8, 0x460, 0x460, 0x3e8, 0x460, 0x9, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @loopback, [], [], 'veth0_to_hsr\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x9401}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "1852aa405753905554ed000600ebaf5ffbbbcc15d0abddcb5ae29b3b8f45"}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefer=statiF:0']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r7, 0x0, 0x8}, 0x18) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000019140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10}}, 0x5c}}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003700)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000940)={0x1148, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x28, 0xa9, @random="9870d337511b43025e82f4bf3c9c429f3d31b8d6e9e495af98b51fa5c8186789afeb00a5"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xd}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1000}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xc3, 0xa8, @random="ff2e3d2feaaaf878bd848211ed311a3ebf41845942cafceb0b5b36ee0f1ba118e17ec4fb77a514dc225fafa239b0f9dcaf103213f8a81f4c40e905763acef48e79692a3c1db020aa69813b3c0cb7a9c1aa78ecfc254c4d8d331b2a1f345f38ba9e717a96c76ff3f67e39409b92aa63df46a8926d318f3b280b0c7effa911380a8b57494fde0f0de17539d1d0c30341235c97881488144b6203ded3f4e94024e65454dd4e34a07a98145ddc5c297c3f5a5e20a96763544d2252d71da1e69577"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}]}, 0x1148}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000500)=@newchain={0x43c, 0x64, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {0x0, 0xd}, {0xf, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3f, 0x9, 0x9, 0x0, 0xd153, 0x1, 0x0, 0x200, 0xea90, 0x861, 0x1000, 0x5, 0x9, 0xb, 0x1, 0x7, 0x1, 0x0, 0x6090, 0x2000000, 0x6, 0x9, 0x4, 0x7fff, 0x7, 0x7, 0x6a, 0x8, 0xb, 0xa962, 0x932, 0x8, 0x6bf1, 0x480a, 0x6, 0x9da, 0x5, 0x100, 0x9, 0xec6, 0x100, 0xfff, 0x81, 0x7, 0x6, 0xd, 0x6, 0x682, 0x9b2, 0x6, 0x957, 0xfffffbdd, 0x1, 0x7, 0x7, 0x1, 0x3, 0x252b0000, 0x100, 0xfffffffd, 0x401, 0x0, 0x5, 0x401, 0x3, 0x1, 0x5, 0x1, 0x80008, 0x7, 0xffffffff, 0xe, 0x10000000, 0x1, 0x2, 0xd, 0x0, 0x80000001, 0xcb3, 0x7f, 0x1, 0x81, 0x4, 0x0, 0xffffffff, 0x1, 0x27180000, 0x8, 0x7fff, 0xbcf9, 0xf, 0x0, 0x2, 0x4, 0xb5c, 0x6, 0x4ec, 0x3, 0x3, 0x6, 0x9, 0x8, 0x7fffffff, 0x81, 0xabc0, 0x7e, 0x6, 0x2, 0x0, 0x0, 0x5, 0x2, 0x9, 0xff, 0x7631, 0x2, 0x37, 0x81, 0x101, 0x6, 0x3, 0x5, 0xfffffffe, 0x6, 0x5, 0x8, 0x5, 0x6, 0xe8f, 0x4d9a, 0x0, 0x800, 0x7, 0x7f, 0x9, 0x0, 0x6, 0x80, 0xd, 0x4, 0x0, 0xe9e, 0x2, 0x1000, 0x9, 0x4, 0x9, 0x100, 0x3, 0x6, 0x0, 0x6, 0x1ff, 0x7ff, 0xfffff9db, 0x0, 0x8bf, 0x80, 0x4, 0x200, 0x3, 0x5, 0x3302, 0x7, 0x1, 0x8, 0x9, 0xe, 0x7ac2, 0x6, 0x6, 0x81, 0xfffffffb, 0x2407, 0x2, 0x80000001, 0x8, 0xfffff0d1, 0x3, 0x401, 0x9, 0x5, 0x9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x6, 0x81, 0x1, 0x8, 0x0, 0x8, 0xe, 0x0, 0x100, 0x0, 0x1000, 0x3, 0x0, 0x4, 0x7, 0xff, 0x2, 0x4, 0xe, 0x2e, 0x90, 0x2, 0x0, 0x7fffffff, 0x8, 0x6, 0x4, 0x7, 0x7fffffff, 0x9e, 0x3993, 0x9, 0x6f, 0x2, 0x4, 0x934c, 0x5, 0xfff, 0x4, 0x3, 0xfffffff9, 0x1, 0x1, 0x1, 0x1, 0x5, 0x3, 0x0, 0x1, 0x101, 0x0, 0x4, 0x8, 0x1, 0x8, 0xfffff001, 0x7a, 0x2, 0x6, 0x2, 0x1, 0x1, 0x4, 0x80000001, 0xb, 0xfc, 0x4, 0x7]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000002a80)=ANY=[@ANYBLOB="18000000030000000000641a6e7fb36946c9000000002abf18680000030000000000000006000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000240)='./file0/file0\x00', 0x9) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000e40000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000ffffffffffffffff00000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060f5d9"], 0xb8}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 0: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1ab083, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000200)=ANY=[@ANYBLOB="a5050f0000b55e04b45adbde080045000074000000000078e00000e0460000000000000000110000ac1414aaac1414aa830300070300443c0003ac1e000000ac1414bb00000000ac1e000100000000ac141400"/127], 0x0) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000feffffff0f00000008000300", @ANYRES32=r2, @ANYBLOB="08009dec349029d87e01dccbccd818d1455977080000"], 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x40080) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x12, r5, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000001000), &(0x7f0000000f40)=0x44) prctl$PR_SET_PTRACER(0x59616d61, r4) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa00000000000000000000000003000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000cd000000000000003400170015000000000000000000000000000000000000000000000004000000050000000100000008000000f7ffffff008000004c00140063"], 0x170}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9, 0x2, 0x2}}]}]}]}, 0x4c}}, 0x0) executing program 32: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000feffffff0f00000008000300", @ANYRES32=r2, @ANYBLOB="08009dec349029d87e01dccbccd818d1455977080000"], 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x40080) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x12, r5, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000001000), &(0x7f0000000f40)=0x44) prctl$PR_SET_PTRACER(0x59616d61, r4) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa00000000000000000000000003000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000cd000000000000003400170015000000000000000000000000000000000000000000000004000000050000000100000008000000f7ffffff008000004c00140063"], 0x170}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9, 0x2, 0x2}}]}]}]}, 0x4c}}, 0x0) executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xb}, {0xfffd, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x9b9}]}}]}, 0x3c}}, 0x4040890) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) r1 = syz_io_uring_setup(0x7c1f, &(0x7f0000000140)={0x0, 0xeb65, 0x20, 0x2, 0xd2}, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_setup(0x3eb2, &(0x7f00000001c0)={0x0, 0xb210, 0x2, 0x2, 0x257, 0x0, r1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xb}, {0xfffd, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x9b9}]}}]}, 0x3c}}, 0x4040890) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) (async) syz_io_uring_setup(0x7c1f, &(0x7f0000000140)={0x0, 0xeb65, 0x20, 0x2, 0xd2}, &(0x7f0000000040), &(0x7f00000000c0)) (async) io_uring_setup(0x3eb2, &(0x7f00000001c0)={0x0, 0xb210, 0x2, 0x2, 0x257, 0x0, r1}) (async) executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x20, 0x140d, 0xe3263c25d365e57d, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x11) executing program 4: madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000140)=0x11) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd590, 0x513100) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xafa88, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) readahead(r1, 0x1, 0x8001) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x511240, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'gretap0\x00'}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000100)={0x0, 0x7}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000001100)) r2 = socket$nl_route(0x10, 0x3, 0x0) syncfs(r2) r3 = syz_open_dev$audion(&(0x7f0000001140), 0x0, 0x200000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000001180)={0x0, 0x2, [0x0, 0x4, 0x3, 0x3, 0x6, 0x7d66]}) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000011c0)) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x3) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000001400)={0x5, 0x10, 0xfa00, {&(0x7f0000001200)}}, 0x18) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000001440)=0x104000, 0x4) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001480), 0x802, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f00000014c0)) accept$ax25(r3, &(0x7f0000001500)={{0x3, @netrom}, [@remote, @default, @bcast, @rose, @netrom, @default, @remote, @rose]}, &(0x7f0000001580)=0x48) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, &(0x7f00000015c0), 0x14) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001600)='(#-\x00', 0x0, r5) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001640)='/dev/net/tun\x00', &(0x7f0000001680)='gretap0\x00', 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000016c0)=0x1) r7 = syz_open_pts(0xffffffffffffffff, 0x80042) ioctl$TCGETS2(r7, 0x802c542a, &(0x7f0000001700)) executing program 4: socket$nl_route(0x10, 0x3, 0x0) executing program 33: socket$nl_route(0x10, 0x3, 0x0) executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x11}], 0x400000000000172, 0x4000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x11}], 0x400000000000172, 0x4000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = syz_io_uring_setup(0x400095, &(0x7f0000000140)={0x0, 0x0, 0x10, 0x3, 0x2, 0x0, r3}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24102}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r4, 0x10ef, 0x71cd, 0x40, &(0x7f0000000000), 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x48) r9 = msgget$private(0x0, 0x20) msgsnd(r9, &(0x7f0000000400)=ANY=[@ANYBLOB="9e0e015cee5c7832bb6dea31eab7f454a2737fbc9f159b78931f6bd9fc37241deba817a8c8bd2b3ea30b1db54d791d990a64a3ac157b0bf9d14e683e8bc430f7851d0845f9c7cb6d84e9f2aef63212b0be826886a9815facc8994c601232ea3fd2bc7c00343073e5e53f65676f1544f844a8ee25aec65a98ee6555de7eb757b84b8605ba7cd6a9688afd16ebc517bd64f9c58471b22bc5e3dcfbc12823e6f250db5669536cdbf673f12cb99456ef12eb247cb79a76870885e752c31764"], 0x8, 0x800) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0xbc, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0xaa, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"]}]}, 0xbc}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) msgrcv(r9, 0x0, 0x0, 0x2, 0x800) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r8}, &(0x7f00000007c0), &(0x7f0000000040)='%pI4 \x00'}, 0x20) r11 = openat$cdrom(0xffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$CDROMCLOSETRAY(r11, 0x5382) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r8}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x0, 0x21}]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) io_uring_enter(r4, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x11}], 0x400000000000172, 0x4000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_create_chunk\x00', r3}, 0x18) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63d, 0x1, 0x2, 0xd59f83, 0x19f2, 0x3b, 0x19ef, 0x3, 0x8, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd1, 0x9}}) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000077ceb5d48500000084000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ppoll(&(0x7f0000000900)=[{r1}], 0x1, &(0x7f0000000940)={0x77359400}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f017715b9800000c00f3235000100000f300f01cb0f01c9b8010000000f01c10f090fc7ab008000000f20e035400000000f22e00f01cf0f01c3", 0x3a}], 0x1, 0x0, 0x0, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)=""/103, 0x67}], 0x1, 0x20000, 0x100) r8 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x4e6400) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f0000000340)={0x0, r4}) ioctl$EVIOCSABS0(r8, 0x401845c0, &(0x7f0000000300)={0xca, 0x7, 0x1, 0x81, 0x8, 0xbce8}) ioctl$KVM_RUN(r5, 0xae80, 0x0) executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x11}], 0x400000000000172, 0x4000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) io_uring_setup(0x1b94, &(0x7f0000000000)) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc1105511, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) io_uring_setup(0x4f01, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x396}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001040)={0x0, 0x54, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1d8}}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@flat=@binder={0x73622a85, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @fda={0x66646185, 0x6, 0xffffffffffffffff, 0x15}}, &(0x7f0000001280)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000010000009500000000000010bfa000000000000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r7, 0x6, 0x0, 0xd, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bb0280000788fb", 0x15}], 0x1}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000200)={0x7, 0x0, {0x8, @struct={0x8000, 0x5}, 0x0, 0x47, 0xffff, 0xd, 0x6, 0x1, 0x83, @struct={0x50000000, 0x10}, 0x1a89, 0x8, [0x1a7d, 0x97, 0x8, 0x0, 0x9, 0xffffffff]}, {0x8, @struct={0x3, 0x9}, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x1, 0x7, 0x39, @usage, 0x4, 0x6, [0x6, 0x9, 0x6, 0x7, 0x3, 0x1]}, {0xfffffffffffffff6, @struct={0x8, 0x4}, 0x0, 0x7, 0x7, 0xffffffff, 0x1, 0x3, 0x40, @usage=0x3, 0x9, 0x1, [0x0, 0x8, 0x5, 0x4, 0x10, 0x9]}, {0x5, 0xc000000000000000, 0x6}}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000600)={0x0, "42dd63036cb5d1883caa495e4f39b15e"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@fwd={0x8}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0xd}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000003c0)=""/4096, 0x46, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x20) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) write$FUSE_DIRENT(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="0001000000000000", @ANYRES64=r5, @ANYBLOB='\a\x00\x00\x00'], 0x100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r7, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000040)="a5", 0x1}], 0x1}, 0x11) sendmsg$inet(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000080)='\b', 0x1}], 0x1}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001600)={0x8, 0x4, {0x3ff, @struct={0x4, 0x2}, r2, 0x7, 0xffffffff, 0x9, 0xff8000000000000, 0xd4b, 0x20, @struct={0x6, 0x1}, 0x71, 0x2, [0x3c, 0x4, 0x7fe, 0x3800000000, 0x8, 0x3]}, {0x6, @usage=0x1, 0x0, 0x5, 0x1ff, 0x3ff, 0xea3f, 0x3, 0x42, @struct={0x7, 0x2}, 0x0, 0x3, [0x7, 0x7, 0x8d7, 0x66c1, 0x52, 0x5]}, {0x619e3a21, @usage=0x9, r3, 0x100000000, 0x9, 0xa, 0x3, 0x8000000000000000, 0x40a, @struct={0x4, 0x8001}, 0x4, 0x41e, [0x10, 0xe, 0x7fff, 0x3, 0x6, 0x6]}, {0xffffffffffffffff, 0xffffffff, 0xf}}) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000180)={0x1, 0x4, 0x80000000, 0x1000, 0x3ff, 0x8, 0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030022d6850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x6e0}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='percpu_alloc_percpu_fail\x00', r2}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0x40086806, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f00000000000000000000000000000000000000000000000000000000000046e6f6465767b63762f5b109e461bd57702000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) executing program 2: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x42200, 0xa0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) execveat(r2, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x1000) executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000440)={0x34, r2, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x34}}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xb, 0x0, 0x0, @SEQ_NOTEON}) executing program 2: arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0xd) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/11, 0xb}, 0xe4d}], 0x1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x840, 0x100) faccessat(r2, &(0x7f0000000080)='./file0\x00', 0x10) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="042fff01aaaaaaaaaa0200"], 0x102) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000019180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="08009e005a300000a12fab8874cd4d2f56cb88e905a7c4915ed6e845625a48031364"], 0x24}, 0x1, 0x0, 0x0, 0x24004801}, 0x9590f6cc3aa711f2) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000adb000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x33, 0x0, 0x0) (async, rerun: 64) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000362000/0x2000)=nil, &(0x7f0000fea000/0x1000)=nil, 0x2000}) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001800010000000000f8dbdf2102200008000000090000000008000100e000000206001c004e20000008000700e000000208000200ffffffff080001"], 0x4c}}, 0x0) (async, rerun: 32) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000440)={0xd28, r6, 0x615cd924cba39ce}) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f0000000480)) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000050000104002ff827a754c3549faa7bb2", @ANYRES32=0x0, @ANYBLOB="00000000201200001400128009000100626f6e640000000004000280"], 0x34}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x88, r1, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2e}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0bb654b0a21c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "54fbc23f8adc3ffea67c20f66b924ceb"}, @NL80211_ATTR_PMKID={0x14, 0x55, "7980c09923d84eb5b96ca6a7baacaf62"}, @NL80211_ATTR_SSID={0xd, 0x34, @random="7c40ded1b547620f0a"}]}, 0x88}, 0x1, 0x0, 0x0, 0x8040}, 0x40001) executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000044000500"], 0x178}}, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x6, 0x20, 0x16, 0x4, 0x0, 0xff, 0x4, 0x4b}}) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x80, 0x6d, 0x19}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e00000001000000fd0f00000308000000100200", @ANYRES32, @ANYBLOB="4712192800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0900009ff56e66b20400001006000000c036920a1156f15b50000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000040000000400000002000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000bc001e5b58bce3e7ea351757160d24de9c9acb1956ef951658447c08a78e6d4b703dc62515b780000000e3b1db532abbc9e2cd9b33ff72b8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x21}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x4000024e, r7}) setreuid(0xee01, 0xee01) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000200)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xe, &(0x7f0000000440)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x20, 0x1, 0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x11}], 0x400000000000172, 0x4000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0xfffffffffffffffd, 0x311802) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000006c0)=':\x00', &(0x7f0000000700)='ext4_mark_inode_dirty\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='\xc8/A\xe3\xfe[\x16@:\xe5\xfc\xb7\xff\x02\xb0Z!\xa6\xcc+\xed\t\x10\x11\xe8\xcb4\x06\xfa@\x11l\xbd-Rw\xf4}\x11\xc0\xb3:!\x19\x9cq\xe6\x1f8cE\xe7\x05\x97.\xb6YJ\x89\x930\x01\xd0\xfd\xfd\xf7L\xff\xc7$J\xb5H+e\x9e\x99&\xb5\x0e\xab\a.\xde\xb9\x7f\xb7\x9a\xf0\x0e\xe0Xb\x8f\x99\xe7\xa2Vs\n\xea\xaf\x04=\xb5t\xb6\'9T\x84\xe0\xc4\xbfMHo$\xca)\x1a\t\xa6\xb2\x9c\x80\x1fBz\xa4\xf7./O\x87,V\x16\\O\x90\xac\xc9\xc9k~\x99\xd1\x84Y\"$L\xbe\x83\xcf\xd3!\xa0,|b\xf5.\x06\x9d\x97\x1d\x91\xf6P\xfaNp\x1b8\xc3\x1e6\xe9\xb5\xc2\xe8\xa4#\x10\xc22t>\xf2\x909\f\xe2-[\xaf~B=\x94s\x93\xee\xce\x06\xb9\x89\xfc\xb3`P\xeao\x03\a\x9f\xc9]\x13\x99\xa1\x1b\xc7\xa0\xa8\x1eD`G\x897\x16\xbb\x1e\xf2r\xad\x16?$a\x96\x9aH\xd9\xdc\x1a\xbf<\x05\x87\x06\xa1\x98\x1e', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x200c0000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000400), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x303}, "c8e0292cb7697fe2", "3092c0272f43fe598175368ffca23f3d", "7ecee3c0", "244e081424ae6f89"}, 0x28) sendto$inet6(r4, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0xfffffffffffffed5) write$binfmt_aout(r4, 0x0, 0xfdef) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000000)={0x1, 0xfffffffa, 0x15}) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x560f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000f, 0x2010, 0xffffffffffffffff, 0xe91ca000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', r1, 0x0, 0x1}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x10, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @remote}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) syz_emit_ethernet(0x68, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbb0100000001000000dd60828bf7003200000000000000000000ff020000000000000000000000000001020090780000000060fd906300002b00fc010000000000000000000000000000200100000000000000000000000000001e520000000000000000"], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000340)="ba4000ed0f350f01d166f20fd0ae16000f1e220f01c40f01792eba4200b023ee0f204566b9220a000066b8ca47000066ba000000000f30", 0x37}], 0x1, 0x1, &(0x7f00000003c0)=[@flags={0x3, 0x82a00}], 0x1) io_uring_enter(r3, 0x146c, 0x5318, 0x62, &(0x7f0000000240)={[0x7fffffffffffffff]}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x10400, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000440)={'macsec0\x00', @multicast}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000e020000040"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d798f5de36892dc", "75eefbe8c1c60fd12c1df15717dc9373", "47338759", "942376a06c87e614"}, 0x28) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) flock(r0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000001300)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r10], 0x1c}}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r11 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r11, 0xc4c85512, &(0x7f00000007c0)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x426, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000, 0x2, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x4000000, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff1085, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r11, 0xc4c85512, &(0x7f00000007c0)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x426, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000, 0x2, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x4000000, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff1085, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1]}) write$nci(r4, &(0x7f0000000340)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0x1, 0x1}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r12, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)="4ba72c4cfd81685544f46c3f08004e363b992f21047c1d40c216930920178d659736", 0x22}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000008000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="18005e800800020000edff000800010001000080"], 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000008000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="18005e800800020000edff000800010001000080"], 0x34}}, 0x0) executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x71, 0x121381) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000008000/0x11000)=nil, 0x11000, 0x100000c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03f6ff78ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r3}, 0x14) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) ioctl$CDROMSTOP(r4, 0x5307) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000140)={0x0, 0x6}) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x601, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24041}, [@IFLA_OPERSTATE={0x5, 0x10, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x6, 0x0, 0x0) (async) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x11}], 0x400000000000172, 0x4000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) program did not crash replaying the whole log did not cause a kernel crash single: executing 8 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-connect$inet6-sendmmsg$inet6-setsockopt$WPAN_SECURITY detailed listing: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x11}], 0x400000000000172, 0x4000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-bind$alg-setsockopt$ALG_SET_KEY-socket$kcm-sendmsg$kcm detailed listing: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x6, 0x0, 0x0) (async) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-mmap-mprotect-socket$packet-setsockopt$packet_int-socket$nl_xfrm-ioctl$sock_SIOCGIFINDEX-sendto$packet-openat$cdrom-ioctl$CDROMSTOP-ioctl$USBDEVFS_SETINTERFACE detailed listing: executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x71, 0x121381) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000008000/0x11000)=nil, 0x11000, 0x100000c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03f6ff78ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r3}, 0x14) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) ioctl$CDROMSTOP(r4, 0x5307) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000140)={0x0, 0x6}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-syz_open_dev$tty1-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-bpf$PROG_LOAD-bpf$PROG_LOAD-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-sendmsg$nl_xfrm-socket$inet6_tcp-setsockopt$inet6_tcp_int-connect$inet6-setsockopt$inet6_tcp_TCP_ULP-setsockopt$inet6_tcp_TLS_TX-sendto$inet6-write$binfmt_aout-mprotect-ioctl$HIDIOCGREPORTINFO-ioctl$TIOCL_GETKMSGREDIRECT-mmap-madvise-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-ioctl$UFFDIO_WRITEPROTECT-openat$cgroup_ro detailed listing: executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00220fe0ffc563448900000083854081000000f9ff00007687f5137e567200fbc498e82e00800000000000007de8d651e8dedc11a2cf4c39c3fd164ad51c2b1563deee24047737504eafc48262b5bab595d207e08b139a4e15eec68f4335c909f0c08ab7999d99ec30a74b27c5c7aba88bb2b23c8cc78a7f53265df50489da3fb67eec8a5fe1a4d8ea39c98e4699a000366fb5c2586fb572109059a7795b8124183db01273db1f2e790883c810c22118a12f652bf24880a75fcde54fa10df88625dcefb2360e79db1f09e96ebe7ed95273b3ad1d9a5635893ef9c4bc68758594ec565758fac037f972ebedc99fa33a5134fcc2c9f5201612d38381a7f27d9ad6728d9d011de9445c5e7af4a854f5e3728442cc7e6c0d3566f69ed08b664df95933fdb25dbcce4829ca19ce85d3b97bc092a65195ed56b67533dacb894405d5bf7e2c4a987734aa234c867704"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0xfffffffffffffffd, 0x311802) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000006c0)=':\x00', &(0x7f0000000700)='ext4_mark_inode_dirty\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='\xc8/A\xe3\xfe[\x16@:\xe5\xfc\xb7\xff\x02\xb0Z!\xa6\xcc+\xed\t\x10\x11\xe8\xcb4\x06\xfa@\x11l\xbd-Rw\xf4}\x11\xc0\xb3:!\x19\x9cq\xe6\x1f8cE\xe7\x05\x97.\xb6YJ\x89\x930\x01\xd0\xfd\xfd\xf7L\xff\xc7$J\xb5H+e\x9e\x99&\xb5\x0e\xab\a.\xde\xb9\x7f\xb7\x9a\xf0\x0e\xe0Xb\x8f\x99\xe7\xa2Vs\n\xea\xaf\x04=\xb5t\xb6\'9T\x84\xe0\xc4\xbfMHo$\xca)\x1a\t\xa6\xb2\x9c\x80\x1fBz\xa4\xf7./O\x87,V\x16\\O\x90\xac\xc9\xc9k~\x99\xd1\x84Y\"$L\xbe\x83\xcf\xd3!\xa0,|b\xf5.\x06\x9d\x97\x1d\x91\xf6P\xfaNp\x1b8\xc3\x1e6\xe9\xb5\xc2\xe8\xa4#\x10\xc22t>\xf2\x909\f\xe2-[\xaf~B=\x94s\x93\xee\xce\x06\xb9\x89\xfc\xb3`P\xeao\x03\a\x9f\xc9]\x13\x99\xa1\x1b\xc7\xa0\xa8\x1eD`G\x897\x16\xbb\x1e\xf2r\xad\x16?$a\x96\x9aH\xd9\xdc\x1a\xbf<\x05\x87\x06\xa1\x98\x1e', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x200c0000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000400), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x303}, "c8e0292cb7697fe2", "3092c0272f43fe598175368ffca23f3d", "7ecee3c0", "244e081424ae6f89"}, 0x28) sendto$inet6(r4, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0xfffffffffffffed5) write$binfmt_aout(r4, 0x0, 0xfdef) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000000)={0x1, 0xfffffffa, 0x15}) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x560f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000f, 0x2010, 0xffffffffffffffff, 0xe91ca000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-sendmsg$BATADV_CMD_SET_MESH-socket$nl_xfrm-syz_clone-prctl$PR_SET_PTRACER-openat$cgroup_ro-write$UHID_CREATE2-mmap-socket$l2tp-getsockopt$ARPT_SO_GET_INFO-prctl$PR_SET_PTRACER-sendmsg$nl_xfrm-socket$nl_route-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000feffffff0f00000008000300", @ANYRES32=r2, @ANYBLOB="08009dec349029d87e01dccbccd818d1455977080000"], 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x40080) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x12, r5, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000001000), &(0x7f0000000f40)=0x44) prctl$PR_SET_PTRACER(0x59616d61, r4) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa00000000000000000000000003000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000cd000000000000003400170015000000000000000000000000000000000000000000000004000000050000000100000008000000f7ffffff008000004c00140063"], 0x170}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9, 0x2, 0x2}}]}]}]}, 0x4c}}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-sendmsg$BATADV_CMD_SET_MESH-socket$nl_xfrm-syz_clone-prctl$PR_SET_PTRACER-openat$cgroup_ro-write$UHID_CREATE2-mmap-socket$l2tp-getsockopt$ARPT_SO_GET_INFO-prctl$PR_SET_PTRACER-sendmsg$nl_xfrm-socket$nl_route-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000feffffff0f00000008000300", @ANYRES32=r2, @ANYBLOB="08009dec349029d87e01dccbccd818d1455977080000"], 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x40080) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x12, r5, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000001000), &(0x7f0000000f40)=0x44) prctl$PR_SET_PTRACER(0x59616d61, r4) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa00000000000000000000000003000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000cd000000000000003400170015000000000000000000000000000000000000000000000004000000050000000100000008000000f7ffffff008000004c00140063"], 0x170}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9, 0x2, 0x2}}]}]}]}, 0x4c}}, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 38 programs with base timeout 1m40s testing program (duration=1m49s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 27, 8, 11, 2, 16, 16, 10, 7, 12, 8, 30, 1, 1, 8, 8, 30, 8, 13, 26, 8, 19, 18, 14, 4, 6, 7, 7, 22, 25, 8, 30, 25, 37, 11, 2, 5, 8] detailed listing: executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]}) unlink(&(0x7f0000000300)='./file0/file0\x00') executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x2}}, 0x26) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x1a8000, 0xa, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x3000}, {0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x0, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x10000, 0x1, 0x9, 0x0, 0xfd}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x2, 0x3}, {0x0, 0xeeee8000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030, 0x80000a, 0x0, 0x3000, [0x800000000, 0x0, 0x1a7ff4f4]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000002c0)={0x4, 0x4000, 0x7, 0x40, 0x63}) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x2, 0x0, 0x20001f00) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f0000019080)={0xbe, 0x0, 0x1}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x2b0, 0x268, 0x300, 0x2b0, 0x268, 0x3e8, 0x460, 0x460, 0x3e8, 0x460, 0x9, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @loopback, [], [], 'veth0_to_hsr\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x9401}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "1852aa405753905554ed000600ebaf5ffbbbcc15d0abddcb5ae29b3b8f45"}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefer=statiF:0']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r7, 0x0, 0x8}, 0x18) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000019140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10}}, 0x5c}}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003700)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000940)={0x1148, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x28, 0xa9, @random="9870d337511b43025e82f4bf3c9c429f3d31b8d6e9e495af98b51fa5c8186789afeb00a5"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xd}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1000}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xc3, 0xa8, @random="ff2e3d2feaaaf878bd848211ed311a3ebf41845942cafceb0b5b36ee0f1ba118e17ec4fb77a514dc225fafa239b0f9dcaf103213f8a81f4c40e905763acef48e79692a3c1db020aa69813b3c0cb7a9c1aa78ecfc254c4d8d331b2a1f345f38ba9e717a96c76ff3f67e39409b92aa63df46a8926d318f3b280b0c7effa911380a8b57494fde0f0de17539d1d0c30341235c97881488144b6203ded3f4e94024e65454dd4e34a07a98145ddc5c297c3f5a5e20a96763544d2252d71da1e69577"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}]}, 0x1148}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000500)=@newchain={0x43c, 0x64, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {0x0, 0xd}, {0xf, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3f, 0x9, 0x9, 0x0, 0xd153, 0x1, 0x0, 0x200, 0xea90, 0x861, 0x1000, 0x5, 0x9, 0xb, 0x1, 0x7, 0x1, 0x0, 0x6090, 0x2000000, 0x6, 0x9, 0x4, 0x7fff, 0x7, 0x7, 0x6a, 0x8, 0xb, 0xa962, 0x932, 0x8, 0x6bf1, 0x480a, 0x6, 0x9da, 0x5, 0x100, 0x9, 0xec6, 0x100, 0xfff, 0x81, 0x7, 0x6, 0xd, 0x6, 0x682, 0x9b2, 0x6, 0x957, 0xfffffbdd, 0x1, 0x7, 0x7, 0x1, 0x3, 0x252b0000, 0x100, 0xfffffffd, 0x401, 0x0, 0x5, 0x401, 0x3, 0x1, 0x5, 0x1, 0x80008, 0x7, 0xffffffff, 0xe, 0x10000000, 0x1, 0x2, 0xd, 0x0, 0x80000001, 0xcb3, 0x7f, 0x1, 0x81, 0x4, 0x0, 0xffffffff, 0x1, 0x27180000, 0x8, 0x7fff, 0xbcf9, 0xf, 0x0, 0x2, 0x4, 0xb5c, 0x6, 0x4ec, 0x3, 0x3, 0x6, 0x9, 0x8, 0x7fffffff, 0x81, 0xabc0, 0x7e, 0x6, 0x2, 0x0, 0x0, 0x5, 0x2, 0x9, 0xff, 0x7631, 0x2, 0x37, 0x81, 0x101, 0x6, 0x3, 0x5, 0xfffffffe, 0x6, 0x5, 0x8, 0x5, 0x6, 0xe8f, 0x4d9a, 0x0, 0x800, 0x7, 0x7f, 0x9, 0x0, 0x6, 0x80, 0xd, 0x4, 0x0, 0xe9e, 0x2, 0x1000, 0x9, 0x4, 0x9, 0x100, 0x3, 0x6, 0x0, 0x6, 0x1ff, 0x7ff, 0xfffff9db, 0x0, 0x8bf, 0x80, 0x4, 0x200, 0x3, 0x5, 0x3302, 0x7, 0x1, 0x8, 0x9, 0xe, 0x7ac2, 0x6, 0x6, 0x81, 0xfffffffb, 0x2407, 0x2, 0x80000001, 0x8, 0xfffff0d1, 0x3, 0x401, 0x9, 0x5, 0x9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x6, 0x81, 0x1, 0x8, 0x0, 0x8, 0xe, 0x0, 0x100, 0x0, 0x1000, 0x3, 0x0, 0x4, 0x7, 0xff, 0x2, 0x4, 0xe, 0x2e, 0x90, 0x2, 0x0, 0x7fffffff, 0x8, 0x6, 0x4, 0x7, 0x7fffffff, 0x9e, 0x3993, 0x9, 0x6f, 0x2, 0x4, 0x934c, 0x5, 0xfff, 0x4, 0x3, 0xfffffff9, 0x1, 0x1, 0x1, 0x1, 0x5, 0x3, 0x0, 0x1, 0x101, 0x0, 0x4, 0x8, 0x1, 0x8, 0xfffff001, 0x7a, 0x2, 0x6, 0x2, 0x1, 0x1, 0x4, 0x80000001, 0xb, 0xfc, 0x4, 0x7]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000002a80)=ANY=[@ANYBLOB="18000000030000000000641a6e7fb36946c9000000002abf18680000030000000000000006000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000240)='./file0/file0\x00', 0x9) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000e40000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000ffffffffffffffff00000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060f5d9"], 0xb8}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 0: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1ab083, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000200)=ANY=[@ANYBLOB="a5050f0000b55e04b45adbde080045000074000000000078e00000e0460000000000000000110000ac1414aaac1414aa830300070300443c0003ac1e000000ac1414bb00000000ac1e000100000000ac141400"/127], 0x0) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000feffffff0f00000008000300", @ANYRES32=r2, @ANYBLOB="08009dec349029d87e01dccbccd818d1455977080000"], 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x40080) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x12, r5, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000001000), &(0x7f0000000f40)=0x44) prctl$PR_SET_PTRACER(0x59616d61, r4) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa00000000000000000000000003000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000cd000000000000003400170015000000000000000000000000000000000000000000000004000000050000000100000008000000f7ffffff008000004c00140063"], 0x170}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9, 0x2, 0x2}}]}]}]}, 0x4c}}, 0x0) executing program 32: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000feffffff0f00000008000300", @ANYRES32=r2, @ANYBLOB="08009dec349029d87e01dccbccd818d1455977080000"], 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x40080) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x12, r5, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000001000), &(0x7f0000000f40)=0x44) prctl$PR_SET_PTRACER(0x59616d61, r4) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa00000000000000000000000003000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000cd000000000000003400170015000000000000000000000000000000000000000000000004000000050000000100000008000000f7ffffff008000004c00140063"], 0x170}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9, 0x2, 0x2}}]}]}]}, 0x4c}}, 0x0) executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xb}, {0xfffd, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x9b9}]}}]}, 0x3c}}, 0x4040890) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) r1 = syz_io_uring_setup(0x7c1f, &(0x7f0000000140)={0x0, 0xeb65, 0x20, 0x2, 0xd2}, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_setup(0x3eb2, &(0x7f00000001c0)={0x0, 0xb210, 0x2, 0x2, 0x257, 0x0, r1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xb}, {0xfffd, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x9b9}]}}]}, 0x3c}}, 0x4040890) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) (async) syz_io_uring_setup(0x7c1f, &(0x7f0000000140)={0x0, 0xeb65, 0x20, 0x2, 0xd2}, &(0x7f0000000040), &(0x7f00000000c0)) (async) io_uring_setup(0x3eb2, &(0x7f00000001c0)={0x0, 0xb210, 0x2, 0x2, 0x257, 0x0, r1}) (async) executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x20, 0x140d, 0xe3263c25d365e57d, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x11) executing program 4: madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000140)=0x11) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd590, 0x513100) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xafa88, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) readahead(r1, 0x1, 0x8001) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x511240, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'gretap0\x00'}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000100)={0x0, 0x7}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000001100)) r2 = socket$nl_route(0x10, 0x3, 0x0) syncfs(r2) r3 = syz_open_dev$audion(&(0x7f0000001140), 0x0, 0x200000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000001180)={0x0, 0x2, [0x0, 0x4, 0x3, 0x3, 0x6, 0x7d66]}) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000011c0)) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x3) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000001400)={0x5, 0x10, 0xfa00, {&(0x7f0000001200)}}, 0x18) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000001440)=0x104000, 0x4) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001480), 0x802, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f00000014c0)) accept$ax25(r3, &(0x7f0000001500)={{0x3, @netrom}, [@remote, @default, @bcast, @rose, @netrom, @default, @remote, @rose]}, &(0x7f0000001580)=0x48) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, &(0x7f00000015c0), 0x14) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001600)='(#-\x00', 0x0, r5) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001640)='/dev/net/tun\x00', &(0x7f0000001680)='gretap0\x00', 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000016c0)=0x1) r7 = syz_open_pts(0xffffffffffffffff, 0x80042) ioctl$TCGETS2(r7, 0x802c542a, &(0x7f0000001700)) executing program 4: socket$nl_route(0x10, 0x3, 0x0) executing program 33: socket$nl_route(0x10, 0x3, 0x0) executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x11}], 0x400000000000172, 0x4000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x11}], 0x400000000000172, 0x4000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = syz_io_uring_setup(0x400095, &(0x7f0000000140)={0x0, 0x0, 0x10, 0x3, 0x2, 0x0, r3}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24102}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r4, 0x10ef, 0x71cd, 0x40, &(0x7f0000000000), 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x48) r9 = msgget$private(0x0, 0x20) msgsnd(r9, &(0x7f0000000400)=ANY=[@ANYBLOB="9e0e015cee5c7832bb6dea31eab7f454a2737fbc9f159b78931f6bd9fc37241deba817a8c8bd2b3ea30b1db54d791d990a64a3ac157b0bf9d14e683e8bc430f7851d0845f9c7cb6d84e9f2aef63212b0be826886a9815facc8994c601232ea3fd2bc7c00343073e5e53f65676f1544f844a8ee25aec65a98ee6555de7eb757b84b8605ba7cd6a9688afd16ebc517bd64f9c58471b22bc5e3dcfbc12823e6f250db5669536cdbf673f12cb99456ef12eb247cb79a76870885e752c31764"], 0x8, 0x800) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0xbc, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0xaa, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"]}]}, 0xbc}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) msgrcv(r9, 0x0, 0x0, 0x2, 0x800) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r8}, &(0x7f00000007c0), &(0x7f0000000040)='%pI4 \x00'}, 0x20) r11 = openat$cdrom(0xffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$CDROMCLOSETRAY(r11, 0x5382) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r8}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x0, 0x21}]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) io_uring_enter(r4, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x11}], 0x400000000000172, 0x4000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_create_chunk\x00', r3}, 0x18) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63d, 0x1, 0x2, 0xd59f83, 0x19f2, 0x3b, 0x19ef, 0x3, 0x8, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd1, 0x9}}) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000077ceb5d48500000084000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ppoll(&(0x7f0000000900)=[{r1}], 0x1, &(0x7f0000000940)={0x77359400}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f017715b9800000c00f3235000100000f300f01cb0f01c9b8010000000f01c10f090fc7ab008000000f20e035400000000f22e00f01cf0f01c3", 0x3a}], 0x1, 0x0, 0x0, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)=""/103, 0x67}], 0x1, 0x20000, 0x100) r8 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x4e6400) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f0000000340)={0x0, r4}) ioctl$EVIOCSABS0(r8, 0x401845c0, &(0x7f0000000300)={0xca, 0x7, 0x1, 0x81, 0x8, 0xbce8}) ioctl$KVM_RUN(r5, 0xae80, 0x0) executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x11}], 0x400000000000172, 0x4000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) io_uring_setup(0x1b94, &(0x7f0000000000)) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc1105511, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) io_uring_setup(0x4f01, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x396}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001040)={0x0, 0x54, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1d8}}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@flat=@binder={0x73622a85, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @fda={0x66646185, 0x6, 0xffffffffffffffff, 0x15}}, &(0x7f0000001280)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000010000009500000000000010bfa000000000000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r7, 0x6, 0x0, 0xd, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bb0280000788fb", 0x15}], 0x1}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000200)={0x7, 0x0, {0x8, @struct={0x8000, 0x5}, 0x0, 0x47, 0xffff, 0xd, 0x6, 0x1, 0x83, @struct={0x50000000, 0x10}, 0x1a89, 0x8, [0x1a7d, 0x97, 0x8, 0x0, 0x9, 0xffffffff]}, {0x8, @struct={0x3, 0x9}, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x1, 0x7, 0x39, @usage, 0x4, 0x6, [0x6, 0x9, 0x6, 0x7, 0x3, 0x1]}, {0xfffffffffffffff6, @struct={0x8, 0x4}, 0x0, 0x7, 0x7, 0xffffffff, 0x1, 0x3, 0x40, @usage=0x3, 0x9, 0x1, [0x0, 0x8, 0x5, 0x4, 0x10, 0x9]}, {0x5, 0xc000000000000000, 0x6}}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000600)={0x0, "42dd63036cb5d1883caa495e4f39b15e"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@fwd={0x8}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0xd}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000003c0)=""/4096, 0x46, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x20) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) write$FUSE_DIRENT(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="0001000000000000", @ANYRES64=r5, @ANYBLOB='\a\x00\x00\x00'], 0x100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r7, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000040)="a5", 0x1}], 0x1}, 0x11) sendmsg$inet(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000080)='\b', 0x1}], 0x1}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001600)={0x8, 0x4, {0x3ff, @struct={0x4, 0x2}, r2, 0x7, 0xffffffff, 0x9, 0xff8000000000000, 0xd4b, 0x20, @struct={0x6, 0x1}, 0x71, 0x2, [0x3c, 0x4, 0x7fe, 0x3800000000, 0x8, 0x3]}, {0x6, @usage=0x1, 0x0, 0x5, 0x1ff, 0x3ff, 0xea3f, 0x3, 0x42, @struct={0x7, 0x2}, 0x0, 0x3, [0x7, 0x7, 0x8d7, 0x66c1, 0x52, 0x5]}, {0x619e3a21, @usage=0x9, r3, 0x100000000, 0x9, 0xa, 0x3, 0x8000000000000000, 0x40a, @struct={0x4, 0x8001}, 0x4, 0x41e, [0x10, 0xe, 0x7fff, 0x3, 0x6, 0x6]}, {0xffffffffffffffff, 0xffffffff, 0xf}}) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000180)={0x1, 0x4, 0x80000000, 0x1000, 0x3ff, 0x8, 0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030022d6850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x6e0}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='percpu_alloc_percpu_fail\x00', r2}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0x40086806, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f00000000000000000000000000000000000000000000000000000000000046e6f6465767b63762f5b109e461bd57702000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) executing program 2: r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x42200, 0xa0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) execveat(r2, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x1000) executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000440)={0x34, r2, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x34}}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xb, 0x0, 0x0, @SEQ_NOTEON}) executing program 2: arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0xd) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/11, 0xb}, 0xe4d}], 0x1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x840, 0x100) faccessat(r2, &(0x7f0000000080)='./file0\x00', 0x10) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="042fff01aaaaaaaaaa0200"], 0x102) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000019180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="08009e005a300000a12fab8874cd4d2f56cb88e905a7c4915ed6e845625a48031364"], 0x24}, 0x1, 0x0, 0x0, 0x24004801}, 0x9590f6cc3aa711f2) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000adb000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x33, 0x0, 0x0) (async, rerun: 64) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000362000/0x2000)=nil, &(0x7f0000fea000/0x1000)=nil, 0x2000}) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001800010000000000f8dbdf2102200008000000090000000008000100e000000206001c004e20000008000700e000000208000200ffffffff080001"], 0x4c}}, 0x0) (async, rerun: 32) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000440)={0xd28, r6, 0x615cd924cba39ce}) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f0000000480)) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000050000104002ff827a754c3549faa7bb2", @ANYRES32=0x0, @ANYBLOB="00000000201200001400128009000100626f6e640000000004000280"], 0x34}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x88, r1, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2e}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0bb654b0a21c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "54fbc23f8adc3ffea67c20f66b924ceb"}, @NL80211_ATTR_PMKID={0x14, 0x55, "7980c09923d84eb5b96ca6a7baacaf62"}, @NL80211_ATTR_SSID={0xd, 0x34, @random="7c40ded1b547620f0a"}]}, 0x88}, 0x1, 0x0, 0x0, 0x8040}, 0x40001) executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000044000500"], 0x178}}, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x6, 0x20, 0x16, 0x4, 0x0, 0xff, 0x4, 0x4b}}) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x80, 0x6d, 0x19}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e00000001000000fd0f00000308000000100200", @ANYRES32, @ANYBLOB="4712192800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0900009ff56e66b20400001006000000c036920a1156f15b50000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000040000000400000002000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000bc001e5b58bce3e7ea351757160d24de9c9acb1956ef951658447c08a78e6d4b703dc62515b780000000e3b1db532abbc9e2cd9b33ff72b8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x21}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x4000024e, r7}) setreuid(0xee01, 0xee01) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000200)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xe, &(0x7f0000000440)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x20, 0x1, 0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x11}], 0x400000000000172, 0x4000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0xfffffffffffffffd, 0x311802) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000006c0)=':\x00', &(0x7f0000000700)='ext4_mark_inode_dirty\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='\xc8/A\xe3\xfe[\x16@:\xe5\xfc\xb7\xff\x02\xb0Z!\xa6\xcc+\xed\t\x10\x11\xe8\xcb4\x06\xfa@\x11l\xbd-Rw\xf4}\x11\xc0\xb3:!\x19\x9cq\xe6\x1f8cE\xe7\x05\x97.\xb6YJ\x89\x930\x01\xd0\xfd\xfd\xf7L\xff\xc7$J\xb5H+e\x9e\x99&\xb5\x0e\xab\a.\xde\xb9\x7f\xb7\x9a\xf0\x0e\xe0Xb\x8f\x99\xe7\xa2Vs\n\xea\xaf\x04=\xb5t\xb6\'9T\x84\xe0\xc4\xbfMHo$\xca)\x1a\t\xa6\xb2\x9c\x80\x1fBz\xa4\xf7./O\x87,V\x16\\O\x90\xac\xc9\xc9k~\x99\xd1\x84Y\"$L\xbe\x83\xcf\xd3!\xa0,|b\xf5.\x06\x9d\x97\x1d\x91\xf6P\xfaNp\x1b8\xc3\x1e6\xe9\xb5\xc2\xe8\xa4#\x10\xc22t>\xf2\x909\f\xe2-[\xaf~B=\x94s\x93\xee\xce\x06\xb9\x89\xfc\xb3`P\xeao\x03\a\x9f\xc9]\x13\x99\xa1\x1b\xc7\xa0\xa8\x1eD`G\x897\x16\xbb\x1e\xf2r\xad\x16?$a\x96\x9aH\xd9\xdc\x1a\xbf<\x05\x87\x06\xa1\x98\x1e', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x200c0000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000400), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x303}, "c8e0292cb7697fe2", "3092c0272f43fe598175368ffca23f3d", "7ecee3c0", "244e081424ae6f89"}, 0x28) sendto$inet6(r4, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0xfffffffffffffed5) write$binfmt_aout(r4, 0x0, 0xfdef) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000000)={0x1, 0xfffffffa, 0x15}) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x560f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000f, 0x2010, 0xffffffffffffffff, 0xe91ca000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', r1, 0x0, 0x1}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x10, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @remote}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) syz_emit_ethernet(0x68, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbb0100000001000000dd60828bf7003200000000000000000000ff020000000000000000000000000001020090780000000060fd906300002b00fc010000000000000000000000000000200100000000000000000000000000001e520000000000000000"], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000340)="ba4000ed0f350f01d166f20fd0ae16000f1e220f01c40f01792eba4200b023ee0f204566b9220a000066b8ca47000066ba000000000f30", 0x37}], 0x1, 0x1, &(0x7f00000003c0)=[@flags={0x3, 0x82a00}], 0x1) io_uring_enter(r3, 0x146c, 0x5318, 0x62, &(0x7f0000000240)={[0x7fffffffffffffff]}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x10400, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000440)={'macsec0\x00', @multicast}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000e020000040"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d798f5de36892dc", "75eefbe8c1c60fd12c1df15717dc9373", "47338759", "942376a06c87e614"}, 0x28) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) flock(r0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000001300)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r10], 0x1c}}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r11 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r11, 0xc4c85512, &(0x7f00000007c0)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x426, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000, 0x2, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x4000000, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff1085, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r11, 0xc4c85512, &(0x7f00000007c0)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x426, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000, 0x2, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x4000000, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff1085, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1]}) write$nci(r4, &(0x7f0000000340)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0x1, 0x1}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r12, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)="4ba72c4cfd81685544f46c3f08004e363b992f21047c1d40c216930920178d659736", 0x22}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000008000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="18005e800800020000edff000800010001000080"], 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000008000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="18005e800800020000edff000800010001000080"], 0x34}}, 0x0) executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x71, 0x121381) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000008000/0x11000)=nil, 0x11000, 0x100000c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03f6ff78ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r3}, 0x14) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) ioctl$CDROMSTOP(r4, 0x5307) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000140)={0x0, 0x6}) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x601, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24041}, [@IFLA_OPERSTATE={0x5, 0x10, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x6, 0x0, 0x0) (async) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x11}], 0x400000000000172, 0x4000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) program did not crash replaying the whole log did not cause a kernel crash single: executing 8 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-connect$inet6-sendmmsg$inet6-setsockopt$WPAN_SECURITY detailed listing: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x11}], 0x400000000000172, 0x4000000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) program crashed: BUG: MAX_STACK_TRACE_ENTRIES too low! single: successfully extracted reproducer found reproducer with 8 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-connect$inet6-sendmmsg$inet6 detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x11}], 0x400000000000172, 0x4000000) program crashed: BUG: MAX_STACK_TRACE_ENTRIES too low! testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-connect$inet6 detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) program crashed: BUG: MAX_STACK_TRACE_ENTRIES too low! testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) program crashed: BUG: MAX_STACK_TRACE_ENTRIES too low! testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-bpf$MAP_CREATE-bpf$PROG_LOAD detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-bpf$MAP_CREATE-bpf$BPF_RAW_TRACEPOINT_OPEN detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-socket$inet6-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN detailed listing: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) program crashed: BUG: MAX_STACK_TRACE_ENTRIES too low! testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) program crashed: BUG: MAX_STACK_TRACE_ENTRIES too low! testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN detailed listing: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN detailed listing: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) program crashed: BUG: MAX_STACK_TRACE_ENTRIES too low! extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) program did not crash reproducing took 1h56m32.163923597s repro crashed as (corrupted=false): BUG: MAX_STACK_TRACE_ENTRIES too low! turning off the locking correctness validator. CPU: 2 UID: 0 PID: 5969 Comm: syz-executor Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 save_trace+0x78f/0xb60 kernel/locking/lockdep.c:579 mark_lock+0x2d2/0xc60 kernel/locking/lockdep.c:4744 mark_usage kernel/locking/lockdep.c:4670 [inline] __lock_acquire+0x9f1/0x3c40 kernel/locking/lockdep.c:5180 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5849 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154 htab_lock_bucket kernel/bpf/hashtab.c:167 [inline] htab_map_delete_elem+0x1c8/0x740 kernel/bpf/hashtab.c:1448 bpf_prog_2c29ac5cdc6b1842+0x43/0x47 bpf_dispatcher_nop_func include/linux/bpf.h:1290 [inline] __bpf_prog_run include/linux/filter.h:701 [inline] bpf_prog_run include/linux/filter.h:708 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:2362 [inline] bpf_trace_run3+0x240/0x5a0 kernel/trace/bpf_trace.c:2404 trace_kmem_cache_free include/trace/events/kmem.h:114 [inline] kmem_cache_free+0x200/0x4c0 mm/slub.c:4714 skb_kfree_head net/core/skbuff.c:1084 [inline] skb_kfree_head net/core/skbuff.c:1081 [inline] skb_free_head+0x18a/0x1d0 net/core/skbuff.c:1098 skb_release_data+0x560/0x730 net/core/skbuff.c:1125 skb_release_all net/core/skbuff.c:1190 [inline] __kfree_skb+0x4f/0x70 net/core/skbuff.c:1204 tcp_wmem_free_skb include/net/tcp.h:306 [inline] tcp_rtx_queue_unlink_and_free include/net/tcp.h:2091 [inline] tcp_clean_rtx_queue net/ipv4/tcp_input.c:3436 [inline] tcp_ack+0x1eb7/0x5ba0 net/ipv4/tcp_input.c:4032 tcp_rcv_established+0x53d/0x20d0 net/ipv4/tcp_input.c:6253 tcp_v4_do_rcv+0x5ca/0xa90 net/ipv4/tcp_ipv4.c:1916 tcp_v4_rcv+0x33a0/0x4380 net/ipv4/tcp_ipv4.c:2351 ip_protocol_deliver_rcu+0xba/0x4c0 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x316/0x570 net/ipv4/ip_input.c:233 NF_HOOK include/linux/netfilter.h:314 [inline] NF_HOOK include/linux/netfilter.h:308 [inline] ip_local_deliver+0x18e/0x1f0 net/ipv4/ip_input.c:254 dst_input include/net/dst.h:460 [inline] ip_rcv_finish net/ipv4/ip_input.c:447 [inline] NF_HOOK include/linux/netfilter.h:314 [inline] NF_HOOK include/linux/netfilter.h:308 [inline] ip_rcv+0x2c3/0x5d0 net/ipv4/ip_input.c:567 __netif_receive_skb_one_core+0x199/0x1e0 net/core/dev.c:5674 __netif_receive_skb+0x1d/0x160 net/core/dev.c:5787 process_backlog+0x443/0x15f0 net/core/dev.c:6119 __napi_poll.constprop.0+0xb7/0x550 net/core/dev.c:6885 napi_poll net/core/dev.c:6954 [inline] net_rx_action+0xa94/0x1010 net/core/dev.c:7076 handle_softirqs+0x213/0x8f0 kernel/softirq.c:561 do_softirq kernel/softirq.c:462 [inline] do_softirq+0xb2/0xf0 kernel/softirq.c:449 __local_bh_enable_ip+0x100/0x120 kernel/softirq.c:389 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:919 [inline] __dev_queue_xmit+0x8b0/0x43e0 net/core/dev.c:4463 dev_queue_xmit include/linux/netdevice.h:3168 [inline] neigh_hh_output include/net/neighbour.h:523 [inline] neigh_output include/net/neighbour.h:537 [inline] ip_finish_output2+0xc6c/0x2150 net/ipv4/ip_output.c:236 __ip_finish_output net/ipv4/ip_output.c:314 [inline] __ip_finish_output+0x49e/0x950 net/ipv4/ip_output.c:296 ip_finish_output+0x35/0x380 net/ipv4/ip_output.c:324 NF_HOOK_COND include/linux/netfilter.h:303 [inline] ip_output+0x13b/0x2a0 net/ipv4/ip_output.c:434 dst_output include/net/dst.h:450 [inline] ip_local_out+0x33e/0x4a0 net/ipv4/ip_output.c:130 __ip_queue_xmit+0x777/0x1970 net/ipv4/ip_output.c:536 __tcp_transmit_skb+0x2b39/0x3e10 net/ipv4/tcp_output.c:1468 __tcp_send_ack.part.0+0x390/0x6f0 net/ipv4/tcp_output.c:4272 __tcp_send_ack net/ipv4/tcp_output.c:4278 [inline] tcp_send_ack+0x82/0xa0 net/ipv4/tcp_output.c:4278 __tcp_cleanup_rbuf+0x278/0x4b0 net/ipv4/tcp.c:1506 tcp_recvmsg_locked+0x124b/0x2780 net/ipv4/tcp.c:2822 tcp_recvmsg+0x12e/0x680 net/ipv4/tcp.c:2852 inet_recvmsg+0x12b/0x6a0 net/ipv4/af_inet.c:883 sock_recvmsg_nosec net/socket.c:1033 [inline] sock_recvmsg+0x1b2/0x250 net/socket.c:1055 sock_read_iter+0x2bb/0x3b0 net/socket.c:1125 new_sync_read fs/read_write.c:484 [inline] vfs_read+0xa4c/0xbe0 fs/read_write.c:565 ksys_read+0x207/0x250 fs/read_write.c:708 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fbd353846fd Code: a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b5 e8 a8 48 00 00 0f 1f 84 00 00 00 00 00 80 3d 41 7e 1c 00 00 74 17 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 5b c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec RSP: 002b:00007ffe18848168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fbd353846fd RDX: 000000000000042c RSI: 00005555628e50b0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 000000000001349e R09: 00007fbd360b5000 R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffe18848590 R13: 000000000000042c R14: 00005555628e50b0 R15: 00007ffe18848210 final repro crashed as (corrupted=false): BUG: MAX_STACK_TRACE_ENTRIES too low! turning off the locking correctness validator. CPU: 2 UID: 0 PID: 5969 Comm: syz-executor Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 save_trace+0x78f/0xb60 kernel/locking/lockdep.c:579 mark_lock+0x2d2/0xc60 kernel/locking/lockdep.c:4744 mark_usage kernel/locking/lockdep.c:4670 [inline] __lock_acquire+0x9f1/0x3c40 kernel/locking/lockdep.c:5180 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5849 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154 htab_lock_bucket kernel/bpf/hashtab.c:167 [inline] htab_map_delete_elem+0x1c8/0x740 kernel/bpf/hashtab.c:1448 bpf_prog_2c29ac5cdc6b1842+0x43/0x47 bpf_dispatcher_nop_func include/linux/bpf.h:1290 [inline] __bpf_prog_run include/linux/filter.h:701 [inline] bpf_prog_run include/linux/filter.h:708 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:2362 [inline] bpf_trace_run3+0x240/0x5a0 kernel/trace/bpf_trace.c:2404 trace_kmem_cache_free include/trace/events/kmem.h:114 [inline] kmem_cache_free+0x200/0x4c0 mm/slub.c:4714 skb_kfree_head net/core/skbuff.c:1084 [inline] skb_kfree_head net/core/skbuff.c:1081 [inline] skb_free_head+0x18a/0x1d0 net/core/skbuff.c:1098 skb_release_data+0x560/0x730 net/core/skbuff.c:1125 skb_release_all net/core/skbuff.c:1190 [inline] __kfree_skb+0x4f/0x70 net/core/skbuff.c:1204 tcp_wmem_free_skb include/net/tcp.h:306 [inline] tcp_rtx_queue_unlink_and_free include/net/tcp.h:2091 [inline] tcp_clean_rtx_queue net/ipv4/tcp_input.c:3436 [inline] tcp_ack+0x1eb7/0x5ba0 net/ipv4/tcp_input.c:4032 tcp_rcv_established+0x53d/0x20d0 net/ipv4/tcp_input.c:6253 tcp_v4_do_rcv+0x5ca/0xa90 net/ipv4/tcp_ipv4.c:1916 tcp_v4_rcv+0x33a0/0x4380 net/ipv4/tcp_ipv4.c:2351 ip_protocol_deliver_rcu+0xba/0x4c0 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x316/0x570 net/ipv4/ip_input.c:233 NF_HOOK include/linux/netfilter.h:314 [inline] NF_HOOK include/linux/netfilter.h:308 [inline] ip_local_deliver+0x18e/0x1f0 net/ipv4/ip_input.c:254 dst_input include/net/dst.h:460 [inline] ip_rcv_finish net/ipv4/ip_input.c:447 [inline] NF_HOOK include/linux/netfilter.h:314 [inline] NF_HOOK include/linux/netfilter.h:308 [inline] ip_rcv+0x2c3/0x5d0 net/ipv4/ip_input.c:567 __netif_receive_skb_one_core+0x199/0x1e0 net/core/dev.c:5674 __netif_receive_skb+0x1d/0x160 net/core/dev.c:5787 process_backlog+0x443/0x15f0 net/core/dev.c:6119 __napi_poll.constprop.0+0xb7/0x550 net/core/dev.c:6885 napi_poll net/core/dev.c:6954 [inline] net_rx_action+0xa94/0x1010 net/core/dev.c:7076 handle_softirqs+0x213/0x8f0 kernel/softirq.c:561 do_softirq kernel/softirq.c:462 [inline] do_softirq+0xb2/0xf0 kernel/softirq.c:449 __local_bh_enable_ip+0x100/0x120 kernel/softirq.c:389 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:919 [inline] __dev_queue_xmit+0x8b0/0x43e0 net/core/dev.c:4463 dev_queue_xmit include/linux/netdevice.h:3168 [inline] neigh_hh_output include/net/neighbour.h:523 [inline] neigh_output include/net/neighbour.h:537 [inline] ip_finish_output2+0xc6c/0x2150 net/ipv4/ip_output.c:236 __ip_finish_output net/ipv4/ip_output.c:314 [inline] __ip_finish_output+0x49e/0x950 net/ipv4/ip_output.c:296 ip_finish_output+0x35/0x380 net/ipv4/ip_output.c:324 NF_HOOK_COND include/linux/netfilter.h:303 [inline] ip_output+0x13b/0x2a0 net/ipv4/ip_output.c:434 dst_output include/net/dst.h:450 [inline] ip_local_out+0x33e/0x4a0 net/ipv4/ip_output.c:130 __ip_queue_xmit+0x777/0x1970 net/ipv4/ip_output.c:536 __tcp_transmit_skb+0x2b39/0x3e10 net/ipv4/tcp_output.c:1468 __tcp_send_ack.part.0+0x390/0x6f0 net/ipv4/tcp_output.c:4272 __tcp_send_ack net/ipv4/tcp_output.c:4278 [inline] tcp_send_ack+0x82/0xa0 net/ipv4/tcp_output.c:4278 __tcp_cleanup_rbuf+0x278/0x4b0 net/ipv4/tcp.c:1506 tcp_recvmsg_locked+0x124b/0x2780 net/ipv4/tcp.c:2822 tcp_recvmsg+0x12e/0x680 net/ipv4/tcp.c:2852 inet_recvmsg+0x12b/0x6a0 net/ipv4/af_inet.c:883 sock_recvmsg_nosec net/socket.c:1033 [inline] sock_recvmsg+0x1b2/0x250 net/socket.c:1055 sock_read_iter+0x2bb/0x3b0 net/socket.c:1125 new_sync_read fs/read_write.c:484 [inline] vfs_read+0xa4c/0xbe0 fs/read_write.c:565 ksys_read+0x207/0x250 fs/read_write.c:708 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fbd353846fd Code: a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b5 e8 a8 48 00 00 0f 1f 84 00 00 00 00 00 80 3d 41 7e 1c 00 00 74 17 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 5b c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec RSP: 002b:00007ffe18848168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fbd353846fd RDX: 000000000000042c RSI: 00005555628e50b0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 000000000001349e R09: 00007fbd360b5000 R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffe18848590 R13: 000000000000042c R14: 00005555628e50b0 R15: 00007ffe18848210