Extracting prog: 1h1m46.486220894s Minimizing prog: 9m3.788437282s Simplifying prog options: 0s Extracting C: 31.877804057s Simplifying C: 9m9.49167943s extracting reproducer from 55 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CAP_EXIT_HYPERCALL-ioctl$KVM_CREATE_VCPU-openat$tun-ioctl$TUNSETIFF-socket$netlink-socket$unix-ioctl$sock_SIOCGIFINDEX-openat$iommufd-ioctl$IOMMU_IOAS_ALLOC-ioctl$IOMMU_IOAS_MAP$PAGES-ioctl$IOMMU_TEST_OP_CREATE_ACCESS-ioctl$IOMMU_TEST_OP_ACCESS_RW-socket$netlink-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-sendmsg$nl_route_sched-syz_kvm_setup_cpu$x86-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-sendmsg$NL80211_CMD_VENDOR-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD-ioctl$KVM_SET_MP_STATE-ioctl$KVM_SET_LAPIC-ioctl$KVM_SET_GUEST_DEBUG_x86 detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program did not crash single: failed to extract reproducer bisect: bisecting 55 programs with base timeout 30s testing program (duration=43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 12, 16, 19, 30, 26, 26, 8, 21, 9, 25, 2, 40, 40, 16, 11, 13, 7, 15, 30, 30, 17, 16, 21, 11, 30, 26, 26, 2, 30, 11, 2, 20, 12, 40, 12, 12, 30, 9, 12, 12, 8, 3, 30, 8, 21, 3, 22, 30, 13, 3, 6, 19, 2, 30] detailed listing: executing program 0: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r0}, &(0x7f0000000240)=""/69, 0x45, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002a80)={[0x12e8, 0x6, 0x8f3b8, 0xffffffffffffffff, 0x2, 0x8000003fe, 0x4002004c4, 0x1000, 0xa, 0x97, 0xf, 0x1, 0x1000, 0x2, 0x1, 0x8], 0xeeee7ffb, 0x40704}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000061000400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) (async) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) (async) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r0}, &(0x7f0000000240)=""/69, 0x45, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002a80)={[0x12e8, 0x6, 0x8f3b8, 0xffffffffffffffff, 0x2, 0x8000003fe, 0x4002004c4, 0x1000, 0xa, 0x97, 0xf, 0x1, 0x1000, 0x2, 0x1, 0x8], 0xeeee7ffb, 0x40704}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000061000400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48) (async) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = dup3(r2, r3, 0x80000) write$FUSE_CREATE_OPEN(r4, &(0x7f00000002c0)={0xa0, 0x0, 0x0, {{0x4, 0x1, 0xc, 0x6, 0x7, 0x3627, {0x4, 0xbd5, 0x6, 0xffffffff, 0x6, 0x67, 0x3, 0x4, 0xfff, 0xa000, 0x80000001, 0x0, 0x0, 0xa2}}, {0x0, 0x4}}}, 0xa0) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x840, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0xd) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575b43f86dd6067", 0x14}, {&(0x7f00000001c0)="b7000018110058beef4ba0d598", 0xd}, {&(0x7f0000000340)="37a0a6c482b23cba92ff2203c86c3e05f1708ec47fbe2389dbb3ffff3f7b42590e180c07f3c193b532f3080000008c1d1f", 0x31}], 0x3) executing program 0: creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="66643dc0457dd48b437fcabff4e0ac3a09b843f8c668e76fe8d5d9a4d0f98646d4a3dae2bb48196c5e1e804be07fb456bcd3ff221d9aca8f32d9c55a2d938613078887c3fcaa9faf830b2e500f343888f5e149fbc1df1df9a0aab976af97326422", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r2, 0x34da2000) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) read$snddsp(r4, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xffffff49, 0x3000000000000500}]) dup3(r5, r0, 0x0) executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) write(r1, &(0x7f0000000240)="14000000140005b7ffccca38b90000", 0xf) socket(0x1d, 0x4, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0xc}, 0xe) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r7, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='add 1', 0x5) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000073fbaf3482d06d440000eeff00020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a32000000000900010073797a30000000000900020073797a3200000000140000001100010000e3ffffffffffffff816b0a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(r4, 0x7, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000780)={0x3, {{0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}, 0x7}}}, 0x108) mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', &(0x7f0000000180)='adfs\x00', 0x0, 0x0) syz_clone(0x0, &(0x7f0000000300)="3f513a45b8ac0f68ed9b1ff568d72794323516fa2bf930c37e1531abb6159ad826815cc9843aca7b43978043e7715f518f727e6adb7b92c254b3f56df4721db559a2f1ba308c03807b79efa2146698f6cb8381e7b4cf9ce0873b9c354e88c8d6befa3a8730fe7f023e0dac69e6387e5579a12a1266fa144b67d67b6d7a1ba6abbacd6f0d1cfb17a114e7b93bd876e153d2decd1b8356a6afde92269b18278ffe0c4cf2bb2cb8d751fb4b9c66a7bd4c7456e393e80c70", 0xb6, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="498cc207020f6299db5d186a55061b8c878b85f3c1b48985d72a3337202c1570a3e37fde10b79b2e87cb9c8bab630662d97e33fe40376e49619f42d8366f6a02d1cc2c28e3a36519e737e3fbfb2501713fa770fa954329403e5c7255dbb8280410a42065c60315b61560b0a44cbc52ba3c2522b671f9911399f8ebb88e661cde57da7b346773d5389753b0d8a902a86769") r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='high-speed\n', 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x2000841) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fsopen(&(0x7f00000000c0)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000800)={0x0, 0x1, 0x2, 0xe, 0xc5, &(0x7f0000000400)="59068aa3ca70843a62b8cdf34201f730584a5383e353a058fda9958e659b172d518056eed0e10b4d939bc89dbe0036360576d67ba4baeb48c6754679819dcf4fd63f61981394fc58baa0d2e6ae23674ea7fb9ee0b15cd41783e27d6a6b1ef733d9ebdc76dda76b63743340dd71aebe1366bcb91d1a4a223543bc6598aefb916fd5b9fb4362919b0c0f136d0c31be1bd63666907d6d8c32bef687906cdf929f03e9734a90302bf34d9f411be7438a369bc738d35d44f4ae7b2051242814f8417ce3ab5c18a84effee829379e9cbadbc12f12c8175c6e8e0456db071228e4f3407c3ccd49d03e85a447f2c2c73dab13581fd273e6745eec8b18ab4759412730a0abcd992d5332d64756895e6ec12d0b947e144ded07b263d6a8ffc04d986453dcdaf12f520cbe8623b5f3b907a97f832ac33d6d5da44dbd94a6cfbc8a57a3f65e71a6269ca57c1daebfcf4d1f70cfb787170f9272e32893059a36cb237cae481efcc7902c5bd632491ebf1f9d2bfa3ce712c6b2b308b8cef66fc9d83024978d7eafb91a3963545f1f099a64380e8510de037f3776b9378e66d11cbf9fd99325ea8efa87cef37dc07fef8e543430d18b7ddc25c030cbbbcdf6198454286e1d285c7eae0831716d7adf55bbcee129b0c1208ba5dbaadfa2a2020e8b68c3ecc21236b61dbd90e33357075fdb6738c6a3b0a0772f7608f529c9f411318925bff1a1f4dfbe9850c77f67f3e88162a09d430fa4a6a8d1750dcc22a15a37b7587570aded941ec76730124d2f1f84f6db5e00f8981f4cdc8d83caaf95e69db8d6000fc3bc278c1c035b3d3b10f39561ca6cf951e0c0722d404478888deb50213ce5fa0f6d278fb9cf29fb6c49311715ff538c214da391ffce6195dbb213a807f5f6ed7d01ff18359fc1197d98201c43a410280aedd61d10d4751218eb765df20c41eb8a1e320988b8aff90d0a00ee3b2a721008006a38d892e4c0cf48ae1754faf61054c90c99ed2e0b3261f5495d823b4349fe5eb83a4fd9d61390cf1b1c1559c0d2c7be7c1b5a11c3e9537303355c3befde7f85ad2f259479a66f467fd8d22521f0a3ff47abc8890bb46ea3f832e00d6e535b6e685ce47c90025719f8fac3f3e0115adddf5c6a5c09edbb0ada81c654034131cd005c3613d5be16940a16972fc0415174c4ec96acbc097ef798b954f6811367e38eab62805247b853bc3aeeb2e19d99fdbe599f80831acfdf1749bee269e18e8d81757cc1819dd20538f154ae63a7690c4ed2f40c8ce7b991b5ccafb1758a08304f6c65d9ed8eae1467ec96ab5816867c93fcb9c64082b0c8aac37d72cbf962911dc47c6bd1430e9740dc01b7c8ba3f04c7fa6534791709ddf7cdb480f522f7679fbf4ce5d6ca38d1cf219da6c2c0c8ae17d263b33e25229a598f5423ded1a0db2da39203495240348fb2c535cf05c8fe7"}) keyctl$join(0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r4 = creat(&(0x7f0000000080)='./file1\x00', 0xec) writev(r4, &(0x7f0000001c40)=[{&(0x7f0000000c40)="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", 0x401}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0xd) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000004a40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@iv={0x18}, @iv={0x13}], 0x30, 0x880}], 0x1, 0x40800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000280)="da1a0f38f15c00ba2000ed642e0f01c5360f01df0fc701dfdfad000f00d0baf80c0f98dbe1efbafc0c66edd9ee0f01c3", 0x30}], 0x40, 0x14, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r8, 0x5761, &(0x7f0000000f40)={0x5, 0x0, [{0x8000, 0x2007, 0xfffff714, [0x9, 0x9, 0x1b3, 0xb9a2, 0x1, 0x10, 0x8, 0x4]}, {0xfffff78a, 0x6, 0x9, [0x9f7, 0x3, 0x1, 0x0, 0x4, 0xf, 0x8, 0xe9cf]}, {0x1ff, 0x9, 0x1ff, [0x94f, 0x1, 0x73e5d9cb, 0x9, 0x0, 0x9, 0xfffffff7, 0x400]}, {0x5, 0x7fffffff, 0xf, [0xbf, 0x100, 0x0, 0x10000, 0x8001, 0xca, 0x100, 0xf08b9bb]}, {0x2e, 0x3, 0x8, [0x8, 0x6, 0xb1, 0x7, 0x7, 0x0, 0x100, 0x4]}]}) syz_kvm_setup_cpu$x86(r8, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="64660f6780be000000b9bb0a0000b8ec000000ba000000000f30b9800000c00f3235010000000f30c462f1beb456fb82000066410f017200c4225d9957f7b9800000c00f3235004000000f30660f5a270fc735d1a1499cb8010000000f01c1", 0x5f}], 0x1, 0x32, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) executing program 32: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fsopen(&(0x7f00000000c0)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000800)={0x0, 0x1, 0x2, 0xe, 0xc5, &(0x7f0000000400)="59068aa3ca70843a62b8cdf34201f730584a5383e353a058fda9958e659b172d518056eed0e10b4d939bc89dbe0036360576d67ba4baeb48c6754679819dcf4fd63f61981394fc58baa0d2e6ae23674ea7fb9ee0b15cd41783e27d6a6b1ef733d9ebdc76dda76b63743340dd71aebe1366bcb91d1a4a223543bc6598aefb916fd5b9fb4362919b0c0f136d0c31be1bd63666907d6d8c32bef687906cdf929f03e9734a90302bf34d9f411be7438a369bc738d35d44f4ae7b2051242814f8417ce3ab5c18a84effee829379e9cbadbc12f12c8175c6e8e0456db071228e4f3407c3ccd49d03e85a447f2c2c73dab13581fd273e6745eec8b18ab4759412730a0abcd992d5332d64756895e6ec12d0b947e144ded07b263d6a8ffc04d986453dcdaf12f520cbe8623b5f3b907a97f832ac33d6d5da44dbd94a6cfbc8a57a3f65e71a6269ca57c1daebfcf4d1f70cfb787170f9272e32893059a36cb237cae481efcc7902c5bd632491ebf1f9d2bfa3ce712c6b2b308b8cef66fc9d83024978d7eafb91a3963545f1f099a64380e8510de037f3776b9378e66d11cbf9fd99325ea8efa87cef37dc07fef8e543430d18b7ddc25c030cbbbcdf6198454286e1d285c7eae0831716d7adf55bbcee129b0c1208ba5dbaadfa2a2020e8b68c3ecc21236b61dbd90e33357075fdb6738c6a3b0a0772f7608f529c9f411318925bff1a1f4dfbe9850c77f67f3e88162a09d430fa4a6a8d1750dcc22a15a37b7587570aded941ec76730124d2f1f84f6db5e00f8981f4cdc8d83caaf95e69db8d6000fc3bc278c1c035b3d3b10f39561ca6cf951e0c0722d404478888deb50213ce5fa0f6d278fb9cf29fb6c49311715ff538c214da391ffce6195dbb213a807f5f6ed7d01ff18359fc1197d98201c43a410280aedd61d10d4751218eb765df20c41eb8a1e320988b8aff90d0a00ee3b2a721008006a38d892e4c0cf48ae1754faf61054c90c99ed2e0b3261f5495d823b4349fe5eb83a4fd9d61390cf1b1c1559c0d2c7be7c1b5a11c3e9537303355c3befde7f85ad2f259479a66f467fd8d22521f0a3ff47abc8890bb46ea3f832e00d6e535b6e685ce47c90025719f8fac3f3e0115adddf5c6a5c09edbb0ada81c654034131cd005c3613d5be16940a16972fc0415174c4ec96acbc097ef798b954f6811367e38eab62805247b853bc3aeeb2e19d99fdbe599f80831acfdf1749bee269e18e8d81757cc1819dd20538f154ae63a7690c4ed2f40c8ce7b991b5ccafb1758a08304f6c65d9ed8eae1467ec96ab5816867c93fcb9c64082b0c8aac37d72cbf962911dc47c6bd1430e9740dc01b7c8ba3f04c7fa6534791709ddf7cdb480f522f7679fbf4ce5d6ca38d1cf219da6c2c0c8ae17d263b33e25229a598f5423ded1a0db2da39203495240348fb2c535cf05c8fe7"}) keyctl$join(0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r4 = creat(&(0x7f0000000080)='./file1\x00', 0xec) writev(r4, &(0x7f0000001c40)=[{&(0x7f0000000c40)="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", 0x401}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0xd) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000004a40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@iv={0x18}, @iv={0x13}], 0x30, 0x880}], 0x1, 0x40800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000280)="da1a0f38f15c00ba2000ed642e0f01c5360f01df0fc701dfdfad000f00d0baf80c0f98dbe1efbafc0c66edd9ee0f01c3", 0x30}], 0x40, 0x14, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r8, 0x5761, &(0x7f0000000f40)={0x5, 0x0, [{0x8000, 0x2007, 0xfffff714, [0x9, 0x9, 0x1b3, 0xb9a2, 0x1, 0x10, 0x8, 0x4]}, {0xfffff78a, 0x6, 0x9, [0x9f7, 0x3, 0x1, 0x0, 0x4, 0xf, 0x8, 0xe9cf]}, {0x1ff, 0x9, 0x1ff, [0x94f, 0x1, 0x73e5d9cb, 0x9, 0x0, 0x9, 0xfffffff7, 0x400]}, {0x5, 0x7fffffff, 0xf, [0xbf, 0x100, 0x0, 0x10000, 0x8001, 0xca, 0x100, 0xf08b9bb]}, {0x2e, 0x3, 0x8, [0x8, 0x6, 0xb1, 0x7, 0x7, 0x0, 0x100, 0x4]}]}) syz_kvm_setup_cpu$x86(r8, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="64660f6780be000000b9bb0a0000b8ec000000ba000000000f30b9800000c00f3235010000000f30c462f1beb456fb82000066410f017200c4225d9957f7b9800000c00f3235004000000f30660f5a270fc735d1a1499cb8010000000f01c1", 0x5f}], 0x1, 0x32, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) executing program 1: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r1, &(0x7f0000000ac0)=[{&(0x7f00000003c0)="81fa074b87fdf8733e", 0x9}], 0x1) ioctl$I2C_PEC(r0, 0x708, 0x40) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000002c0)={0x1, 0x7, 0x4, &(0x7f0000000280)={0x5, "1d27f0db2e1f25eff995475188afe0ebe9bab69516a5e88a718dca33021b22b650"}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005"], 0xd0}}, 0x571f68543cec8180) executing program 1: setns(0xc9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e6174001400048081d2014000000000080002400000000014000000020a0500000000000000000000000008140000001100010000000000000000000000000a"], 0xa4}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f00000000c0)=0x101, 0x4) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000280)={{0x3b, @local, 0x4e21, 0x4, 'ovf\x00', 0x0, 0x6, 0x56}, {@multicast2, 0x4e23, 0x2000, 0x5, 0x1, 0x9}}, 0x44) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000240)={0x9e0000, 0x0, 0x1, r7, 0x0, &(0x7f0000000180)={0x990a7d, 0x2, '\x00', @p_u8=&(0x7f0000000140)=0xff}}) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) umount2(&(0x7f0000000140)='./file0\x00', 0x1) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) write(r0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xc00, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES16=0x0, @ANYRESHEX]) executing program 1: r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r0}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22903) seccomp$SECCOMP_SET_MODE_FILTER(0xffffc90000000000, 0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000080)='|') ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000340), 0x48140, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000540)={0x28, 0x4, 0x0, r1, &(0x7f0000000600)="1c0673da04dcfcaeadce5686abbe5551210c785f9aa228956df2cedeec5160e5af579bf9c324792e1ac2ad506885a3b961e0be815fc8be83fa1c9fd471df3fc030c8dedf6aae2f65c2f8a45fcd3bf5ba4f00a17618d6c9cb74aa6cd97400000000000000000000000081ea8b7e2e574e7632fb463a918d6f0e34dadee77d87c64214df14d03e1eff3bc74ca20d6f049a5a59964bc7171a22e43dde216f045ef5c5679abb36399d1f757330254d6a283d3add5d454a", 0x0, 0x8, 0x2, 0x0, {0x0, 0x0, r4, 0x3}}, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0xbf, 0xc0006, 0x0, 0x0, 0x0, 0x4a9e47b3, 0xffffff3e, 0x0, 0x6}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x40000022, 0x0, 0x9}]}) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0x3c, 0x18, 0x100, 0x70bd29, 0x25dfdbfc, {0x2, 0x20, 0x90, 0x2, 0xfc, 0x4, 0xfd, 0x4, 0x2100}, [@RTA_DPORT={0x6, 0x1d, 0x4e20}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_MARK={0x8, 0x10, 0x5}, @RTA_TABLE={0x8, 0xf, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044010}, 0x20004040) executing program 1: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = socket$inet6(0xa, 0xa, 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @remote, 0x9}, 0x1c) syz_clone3(&(0x7f0000000340)={0x2386400, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x58) (async) syz_clone3(&(0x7f0000000340)={0x2386400, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x58) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (async) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x8005f, 0x2, 0x20000000, 0x1000, 0x7]}, &(0x7f00000000c0)=0x54) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x8005f, 0x2, 0x20000000, 0x1000, 0x7]}, &(0x7f00000000c0)=0x54) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000001c0)={0xd, 0x0, {0x57, 0x7, 0x3ff, {0x0, 0x3}, {0x1, 0x8}, @ramp={0x4, 0x0, {0xfe01, 0x0, 0x1, 0x1}}}, {0x56, 0x200, 0xa, {0x7fff, 0x30}, {0x3, 0x2}, @rumble={0x6, 0x6}}}) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x2}, 0x18, 0x0) read$FUSE(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000020000000000000001000000b6000000000000009500000000090000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000020000000000000001000000b6000000000000009500000000090000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000040)={0xd8}, 0x4) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f0000000000)='./bus\x00') unlink(&(0x7f0000000100)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0xad, 0x0, 0x30, 0x66}) executing program 33: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = socket$inet6(0xa, 0xa, 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @remote, 0x9}, 0x1c) syz_clone3(&(0x7f0000000340)={0x2386400, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x58) (async) syz_clone3(&(0x7f0000000340)={0x2386400, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x58) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (async) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x8005f, 0x2, 0x20000000, 0x1000, 0x7]}, &(0x7f00000000c0)=0x54) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x8005f, 0x2, 0x20000000, 0x1000, 0x7]}, &(0x7f00000000c0)=0x54) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000001c0)={0xd, 0x0, {0x57, 0x7, 0x3ff, {0x0, 0x3}, {0x1, 0x8}, @ramp={0x4, 0x0, {0xfe01, 0x0, 0x1, 0x1}}}, {0x56, 0x200, 0xa, {0x7fff, 0x30}, {0x3, 0x2}, @rumble={0x6, 0x6}}}) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x2}, 0x18, 0x0) read$FUSE(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000020000000000000001000000b6000000000000009500000000090000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000020000000000000001000000b6000000000000009500000000090000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000040)={0xd8}, 0x4) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f0000000000)='./bus\x00') unlink(&(0x7f0000000100)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0xad, 0x0, 0x30, 0x66}) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xa, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=0x0, @ANYRESHEX=r0], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000240)="d2ff0306600300", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f00000021c0)) bind$packet(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) syz_emit_ethernet(0x76, &(0x7f0000002340)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x68, 0x66, 0x0, 0x5, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x13, 0x4, 0x0, 0x17, 0x3b, 0x65, 0x7b98, 0x40, 0x2f, 0x4, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x95, 0x3, 0x2, [{@empty, 0x6558}, {@rand_addr=0x64010101, 0x9}]}, @rr={0x7, 0xf, 0x54, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @loopback]}, @rr={0x7, 0x7, 0x9f, [@rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x48, 0x0, 0x8, [0x338c]}]}}}}}}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYBLOB="bb29a6b952a4"], 0x3c}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='typec_fusb302 0x22\n\x00', 0x13) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/class/i2c-dev/i2c-1/device/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='typec_fusb302 0x22\n\x00', 0x13) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SNDCTL_MIDI_INFO(r3, 0xc074510c, &(0x7f0000000440)={"1ab48e9778d1084a562a4ee1e7ce8f3f88bf30b0865d4be184c1e7d8ad71", 0xd3d0, 0xe3b0, 0x31300000, [0x0, 0x47, 0x3, 0x400, 0x887, 0x80000000, 0x2, 0x10001, 0x7fff, 0xe, 0x8, 0x9, 0x21de, 0x5, 0x8, 0x6, 0x6, 0x6]}) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$kcm(r2, &(0x7f0000001c40)={&(0x7f0000000040)=@generic={0x2c, "dc914983dcc05282254c9c6cd457dc52459d494ac1780af119f8b2d77d4a6258fb299f378f18798f942a4da688d8b7d36304ecdc1ea8a00dce41399b40d05bb0727603e4924bcd8fd8702b74e8cfbae128cc4105d5e99e884e1b25fa610469e5c9287029571464a0843ed61738500ba958a9e8da55d0605fc78dc9a933b6"}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000180)="5e0a2060f7f538c42c8f6f75593ff54d3d3a106a30de1067c41e05229d6dce6385634149995884689f1e7c9bcb5969d40908833e5674164cd7d93a150cbc95bd536136418f4e5f354103b0013f5a981cdfdaa60d", 0x54}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="e63b396697b7e252d1e5cf7fecf07f26ae657ec7a2e109842309957661a3734893d43d9144e9dc65d59dca21980196a4ed624cd0a6af1a12920a9e1bea09b4cdcaabc142bf956a18bbb4fc6ed3836224fb577e38a3195a8788f4468ac22ad6f8cd6fd3c75c0f56873be6abe3b7cfa6313852431d9769291ae5e6e8899e869656bb", 0x81}, {&(0x7f0000001400)="e52d15d02e61beb5909bd42c0208f8f09e3a6785c56e476709f3343907c38fa6f097bc89b77cdc1e502d84ae7c425515bde3c3f6f26e05238f775a678c9f9af6b3c8d5a842a15d677ae72d829b45ad3b4d19f2600263ba7760818ecdf734d8596b1c34", 0x63}, {&(0x7f0000001480)="0bc2375ee6b2e7409eec3735c7997dad2a8c75b26398065826a626f0805ca0f7848c0822bdb4a7d924eb8cf900636aa3b6744fc59a1b4eed3fa163b23dbff6890bdb6a5f314cade815c3c47111b95140171b8ec86cb73cea4c5b6aa9962edb9433bdcfa132dd9c867ee75ebf082533d5dc5b47feb4bf10ec035245157ab7454bc78edc7802b6827e66261ae0693b401b28b96937ff577c2624a3113709a8bcba96f771612b65732aee38435059e3b870bd8e2f5a2485ccb35b86d23452bc7f5421a85d199fd0b89ef6ca35e12bc0", 0xce}, {&(0x7f0000001580)="0da2e8bc7cd5065b427c2630274cc0ba655baddf98d045ea49580607324bd6283d724f710c5b62e9c9448fe5", 0x2c}, {&(0x7f00000015c0)="d7d7c51fd9918ad6cebe8775af32cfa8d2fe0554c51cfb6bc5dae5c892744f8977c81b1d9ca2baa4a081911a5b109d910956d789beb3a91cd0979f949e37a1306dbf5d234a25e7bd697847233a2126", 0x4f}, {&(0x7f0000001640)="fdc02d247636e66c7824f3a8f3d14663b832a2019a119903cb6bdea15e7d9c9ad722221819d6ed159f4011d90b0254c84bc72462258eb4a6344f9a9ec0dbc2293250c1958bc010ab10f7453ed80b3cc1bb00dbedb9c9f7ca532b4a9cb35bd68101262ef510356dadcdae681497b5de9111927e1fdd4aebff9f2dbbdab0c6dfe3d333126d3f8c66", 0x87}], 0x8, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x4c0}, 0x881) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2b}}}], 0x18}, 0x1400c0c0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) executing program 4: r0 = userfaultfd(0x80001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="89d31800000000000000000000000000000018500000000000200000000000000082450d250ec31a3b58a3d0f8a00282717f7693"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000842000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000100000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x138, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "3565d957e99236e9e9cb2b8cf74926675c231af2d2290c4c"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x192}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) read(r0, &(0x7f0000000300)=""/172, 0xdc) executing program 4: r0 = getpgid(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = syz_pidfd_open(r0, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r3, &(0x7f0000000340)='./file7/file0/../file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xf, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000050601010200000000020000000000091300020073797a31000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x3}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="9d7e01496ca96cd4f94cabca82fca1855f657aa2e6089a7c824cf7e7196840b02c1758dfd5879855c813ca8f8218658e7a1b85726a3a3c21eaad7e926182550d6487afe9b815e11d2f21a96af7245493d1efabf61e81d23c598de9ff81baf869515f8ad85379ef59e953321c3230c5ab2bd1ce22d263148d8b73aa20aafacd4aba2113e25802c7353393df3d7b23af7a623ce8a568afe4e1abccdaca3eae1ad84d", @ANYRESHEX=0x0, @ANYRES64, @ANYRES32=r1, @ANYRES32=r4], 0x0, 0x19, 0x0, 0x0, 0x2e26eaf27be3145b, 0x6}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r7, @ANYRES16=r9, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x8040}, 0x4000010) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc601}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @local}) write$tun(r11, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000228290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r13 = fsopen(&(0x7f00000002c0)='omfs\x00', 0x0) r14 = fcntl$dupfd(r13, 0x0, r6) fsconfig$FSCONFIG_SET_STRING(r14, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) ioctl(r12, 0x890b, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') executing program 34: r0 = getpgid(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = syz_pidfd_open(r0, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r3, &(0x7f0000000340)='./file7/file0/../file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xf, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000050601010200000000020000000000091300020073797a31000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x3}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="9d7e01496ca96cd4f94cabca82fca1855f657aa2e6089a7c824cf7e7196840b02c1758dfd5879855c813ca8f8218658e7a1b85726a3a3c21eaad7e926182550d6487afe9b815e11d2f21a96af7245493d1efabf61e81d23c598de9ff81baf869515f8ad85379ef59e953321c3230c5ab2bd1ce22d263148d8b73aa20aafacd4aba2113e25802c7353393df3d7b23af7a623ce8a568afe4e1abccdaca3eae1ad84d", @ANYRESHEX=0x0, @ANYRES64, @ANYRES32=r1, @ANYRES32=r4], 0x0, 0x19, 0x0, 0x0, 0x2e26eaf27be3145b, 0x6}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r7, @ANYRES16=r9, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x8040}, 0x4000010) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc601}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @local}) write$tun(r11, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000228290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r13 = fsopen(&(0x7f00000002c0)='omfs\x00', 0x0) r14 = fcntl$dupfd(r13, 0x0, r6) fsconfig$FSCONFIG_SET_STRING(r14, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) ioctl(r12, 0x890b, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000800)=@newnexthop={0x3c, 0x68, 0x901, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x2, 0xd4}, {0x1, 0x2}]}]}, 0x3c}}, 0x0) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x1200000}) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) (async, rerun: 64) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/intel_xhci_usb_sw/uevent\x00', 0x1, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@local, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@delqdisc={0x84, 0x25, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x19, 0xfff2}, {0xf, 0xf}, {0xc, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @TCA_RATE={0x6, 0x5, {0x81, 0xd6}}, @TCA_RATE={0x6, 0x5, {0x6, 0xf2}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff}, @qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x5}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x80}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x20008080) write(r4, &(0x7f0000000140)="41a5cd", 0x3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r2, r6, 0x0) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) executing program 3: syz_emit_ethernet(0xaa, &(0x7f0000000300)={@broadcast, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x5e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600280000fe8000000000000000000000aa8903000000000000c910fe88000000000000000000000000010105020004010200"/79], 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600280000fe8000000000000000000000aa8903000000000000c910fe88000000000000000000000000010105020004010200"/79], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560f, &(0x7f00000002c0)={0xb}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname(r0, &(0x7f0000000040)=@alg, &(0x7f0000000240)=0x80) (async) getsockname(r0, &(0x7f0000000040)=@alg, &(0x7f0000000240)=0x80) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) (async) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x80) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) writev(r2, &(0x7f0000001c40)=[{&(0x7f0000000300)="5c1c4ec7ea747a61209302309e81698e938130a4f20205166885bc69f43d76e65747e6cad0c6f337392fdd59ac4ab4ab217c36157e853da8ea7a8a929c0a68cba97d06d3e62cb6803dbd408d3c27d92bce781c93f4bbb12d5702dd244f4c89e6fea6313c2c8689b7f48c8044f87e1b781e107ad7da1f3e213f2d78c0afa70c20adb2bda5188405ef2872dbbb6a7034746b98f8dfb175ba85257215ea1451c53522ca4eb6175448665de114f96be84be967662ce4c3593f521c78b877ee680982cbe8fcf7f893aa16b3e03702dc6b219f8068e9502d216f4df895681fd033fb0bca24c7a05be3e465f9b7a46d27", 0xed}, {&(0x7f0000000c40)="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", 0xe9f}], 0x2) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x3ffffc}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a00)=""/109, 0x6d}, {&(0x7f0000001a80)=""/4106, 0x100a}, {&(0x7f0000003740)=""/182, 0xb6}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000003900)=""/148, 0x94}, {&(0x7f00000000c0)=""/112, 0x70}, {0x0}, {&(0x7f0000000280)=""/135, 0x87}], 0x8}, 0x9}], 0x4, 0x40010000, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1fd4ea11", 0x4}, {&(0x7f0000000280)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000800)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)={'cmac(twofish-asm)\x00'}}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x35d}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r3, 0xa}, &(0x7f0000000140)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x7, @remote}, {0x1, @broadcast}, 0x4c, {0x2, 0x102, @local}, 'ip6gretap0\x00'}) setns(0xc9, 0x0) r5 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x2c00, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x3, 0x80a0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000300)={0x0, 0x3, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2003}, 0x50) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x14, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffd}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r7, 0xaea2, 0x9) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) executing program 35: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x14, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffd}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r7, 0xaea2, 0x9) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x6, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x6, 0x0, 0x5, 0x0, 0x9}}) executing program 2: getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) (async) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={r0, 0x3, 0xb1, "7fdfc4c7af150357fec92dacf305a18b0be61417b1047ea5746baa875d215d27f4277cdcbc460daae5a220a23dd80b309573c86571fb6a86b4a51b396e618ed6bfb79ea18c316c5c36574fc460a102cf786ea22478e0eca3eefdad4693413b94e8e25c7c9eccf03df20d2f2844869ca10290d5d81ce268cdac513e9b1508a0f0b2b1a64c6d3b52039b4408b2a78049176118971cad434392e8ac2528da63eb4c62678188770c8edb91297a99ab4e8cc9a0"}, 0xb9) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={r0, 0x7, 0x10, 0x8c, 0x9}, &(0x7f0000000180)=0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) (async) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000200)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010101}}, 0x24) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000240)={0x6, 'virt_wifi0\x00', {0x6}, 0xf9}) (async, rerun: 32) r3 = socket$inet_sctp(0x2, 0x4, 0x84) (rerun: 32) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000280)={0x1, [0x6]}, 0x6) (async) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) nanosleep(&(0x7f0000000340)={0x77359400}, &(0x7f0000000380)) (async) read(r1, &(0x7f00000003c0)=""/192, 0xc0) (async, rerun: 64) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000480)='\xe1*\x00', &(0x7f00000004c0)='./file0\x00', r1) (async, rerun: 64) ioctl$BTRFS_IOC_ENCODED_WRITE(r3, 0x40809440, &(0x7f0000000780)={&(0x7f0000000740)=[{&(0x7f0000000500)="216af7e0116c50f0535d8f03e236ac74c84ae52e262f64dee9d8096fbc2c08ca9c843d429a5b4d7cc81226959ae08e0848f030c7a128ee65e92463d31301cd8cc8476814739871da390985c2d6073f6a0a", 0x51}, {&(0x7f0000000580)="38f9481b69067ea9e459b1e9409c889b4ebee6739c7729b1ff8b3c77a136ba20f495c7e0d317c24be23675a9a9f9aac68347f4fa09678947857b5890169d5df13b3760f05c602ecac726e0df447428496732728ffac8994ef353ac5d59626e104bdf17efcd8cf634e66fc5549479d6556570ecab6b026a1c93b8573de540b79730b85bb1932afeeb66dc8adf554680ae7151ede8c7a4141e124755328d529c2237482a6b", 0xa4}, {&(0x7f0000000640)="962567722798927b858cf34340a7e2b4ccbd521101f35e420211a6df1855c558fa8a97dcc7ad37ac7305e5e7027f760a75ccf283578ffc25401213c9efa140f2133889dd3c4fdc326b5c890a4ae288f15410050ffdb50ccd04b6762946b355ebee9083597d0520769395eaaaef68d742d1ac7f9eb99be71cd1b2b0d67e9049ba6c43e738619f7c99a56c57fc49684b245127745ff042554836902418d422b583a5d857ddbbfbcff0f8890e841d2583e498cb8ef36e9e09e3090c9c67f2865369ca19ef91e6decc21706a6c2efd10b2c36f84c4b56b0aae20bb7c5a630c646d7b7df149f75ced2656e8b201c90bba5293039a09b56a", 0xf5}], 0x3, 0x3, 0x0, 0x10001, 0xffffffffffffffff, 0x7f, 0x0, 0x9}) (async, rerun: 64) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x18, 0x140e, 0x3ae234f10006620a, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) (async, rerun: 32) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000900), 0x422002, 0x0) (rerun: 32) unlinkat(r5, &(0x7f0000000940)='./file0\x00', 0x200) (async) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x6}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xa4, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4b88d4a3e8"}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "e5a47e"}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "cb95001802b19f137cf5531bceff"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "db69d06f11ad8116b9429b5703"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "17de2b0e3f5e853ca0c5d8a59e"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4041}, 0x4004) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x0, 0x0, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000b80), {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5fe3, 0x7, 0x8000, 0x0, 0x0, "d5ddea43a1a1a53017a85081e8e81de98802c1bd05785b0ecfb2681178f602a48595f6a67a647a86e555ac7ec2f4e43f0cbeadfb833f088aca38fbd412c21728"}}}, {{@arp={@multicast2, @rand_addr=0x64010101, 0xffffffff, 0xff, 0xc, 0xa, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x3800, 0x350a, 0x9, 0x400, 0x1, 0x7, 'pimreg\x00', 'gre0\x00', {}, {}, 0x0, 0x180}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x39}, @multicast1, 0x0, 0xff, 0x3, 0x4, {@empty, {[0x0, 0xff, 0x0, 0x50769a559f0ab11, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x3, 0x3, 0x3, 0x1, 0xace, 'team0\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x14}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x0, 0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f0000001000)={0x68, "bcced225262f3db989aebbc24f8f1509149c7cc13fe82998871ec0714d79b17fa8da83b670abace4b4b36cdc8f20151bc9ae616cb814df2102151f6a6f4554b9e832e4fcbb497882d00faabef1ff24395deb2057f49b6d03d80681a81b46df1c8621455794297f6d8f1393b6e459c85747a19dadd90dd361260a3e9cb44e7913"}) (async, rerun: 32) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f00000010c0)={0x5d5, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (rerun: 32) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000009dc0)={&(0x7f0000009d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000009d80)={&(0x7f0000009d40)={0x30, 0x3f7, 0x8, 0x70bd26, 0x25dfdbfd, {0x10, 0x7, './file0/../file0', './file0'}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x48010) (async, rerun: 32) close_range(r4, r6, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000009e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000009f00)={&(0x7f0000009e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000009ec0)={&(0x7f0000009e80)={0x1c, r7, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0xe8fd66708dcf5ac0) executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0xb09c1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x25a5, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) close(r0) executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x6, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x6, 0x0, 0x5, 0x0, 0x9}}) executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb1e9c000) r0 = fsopen(&(0x7f00000000c0)='hpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='\x92Gi\x81B}jv\b\x9d&e8\x0e\xd4\xf2\xec\xf3O\x00F\x97X\xe6\xc5\xf5{\x85b\x9e\xcf\xa4\x11\x88\x18:\xfb\xff\xad\xd0\x80)\x83GPbW\x11\x81\x88\xe5\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000440)='0\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@\v\x00\x00\x00\x00\x00\x00\x005\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00'/308, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv6/conf/syzkaller0/use_tempaddr\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='2\n', 0x2) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) madvise(&(0x7f0000185000/0x4000)=nil, 0x4000, 0xa) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000000140)=[{&(0x7f0000001bc0)=""/156, 0x9c}, {&(0x7f0000000000)=""/133, 0x85}], 0x2, &(0x7f0000000100)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000180)={0x1, 0x0, 0x8}) executing program 2: write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf350f4e, 0x200, 0x5, 0x200, 0xffeffffa, 0x0, 0x0, 0x2, 0x800}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x7d97, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/control/extensions/xu.0/bNumControls\x00', 0x0, 0x0) executing program 5: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) (async) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) (async) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) process_madvise(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="968a17a2f0f881769b9801ffb6fee4d2e3e8599161945d3046c65635059447dadbbe90a863038d4058467542a07e1bcdad148174c0822a204805e64d9e1b8ee45b7db5b500d9c99190dace62ff0d88edb2cc8c8399184b322001035703515bb0389894c90ece12e73ba3d600a61f5378eef1a8dd0cfaab36587c69d84dc7822ae76e106049d87ec413784ad41bfadbefd14b850f146d667b9529718479a78bf8b47d37966c8091a3", 0xa8}, {&(0x7f0000000140)="9f6986dde6528b87aa4d4c42b58bd596a40545ab49fd2ddb06bc22345575b2088dfea6dff9c6dc613fc676171b82d5cd914c5cc0febbe5f90dc714916aff4b9534e0b63d2590eb1c7a627764243e40efb3aa58e03a816594e624a6bc2693d700ad7c2800b355764ff5d1086ac0d658c4bc674fa3c25306f3176b420b71d3de906fc4a6be37c571af14bafbca74fdc9f00b8fe4f57ce3d3857396ffbfb01783e706be", 0xa2}, {&(0x7f0000000200)="45d44a4b8e5141749b0aada86d59ee2cc009da0d3eb4cfe99a00cd4440bce561d32c36bf6067cb4d6610bbf86cc2d4d83cbe88004161096012de2e558fb54f1f449a4faefba8b407fd33740aff8cddab7863f490fa", 0x55}, {&(0x7f0000000280)="1c5e04fde3d3597b7a63e4a95910bd4192216e29f356c20eb65ad36d5e615af4e0ac2021dfdf277771a81bb8f6fc0853db3ade59b0949e8ec98b10c84991769973a95c3b908ff2b53b76960fe3a4cf549f28aff75b56d6dabdd92e0f2dda024756088a2b5f0ed4eff2231972f49b848bce54ec4dbb6b53622df50ddf2c9a21b7441a46d45d854530468ee845e94d12f9ccf719c80f06e5e0d2927b4304", 0x9d}], 0x4, 0x13, 0x0) (async) process_madvise(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="968a17a2f0f881769b9801ffb6fee4d2e3e8599161945d3046c65635059447dadbbe90a863038d4058467542a07e1bcdad148174c0822a204805e64d9e1b8ee45b7db5b500d9c99190dace62ff0d88edb2cc8c8399184b322001035703515bb0389894c90ece12e73ba3d600a61f5378eef1a8dd0cfaab36587c69d84dc7822ae76e106049d87ec413784ad41bfadbefd14b850f146d667b9529718479a78bf8b47d37966c8091a3", 0xa8}, {&(0x7f0000000140)="9f6986dde6528b87aa4d4c42b58bd596a40545ab49fd2ddb06bc22345575b2088dfea6dff9c6dc613fc676171b82d5cd914c5cc0febbe5f90dc714916aff4b9534e0b63d2590eb1c7a627764243e40efb3aa58e03a816594e624a6bc2693d700ad7c2800b355764ff5d1086ac0d658c4bc674fa3c25306f3176b420b71d3de906fc4a6be37c571af14bafbca74fdc9f00b8fe4f57ce3d3857396ffbfb01783e706be", 0xa2}, {&(0x7f0000000200)="45d44a4b8e5141749b0aada86d59ee2cc009da0d3eb4cfe99a00cd4440bce561d32c36bf6067cb4d6610bbf86cc2d4d83cbe88004161096012de2e558fb54f1f449a4faefba8b407fd33740aff8cddab7863f490fa", 0x55}, {&(0x7f0000000280)="1c5e04fde3d3597b7a63e4a95910bd4192216e29f356c20eb65ad36d5e615af4e0ac2021dfdf277771a81bb8f6fc0853db3ade59b0949e8ec98b10c84991769973a95c3b908ff2b53b76960fe3a4cf549f28aff75b56d6dabdd92e0f2dda024756088a2b5f0ed4eff2231972f49b848bce54ec4dbb6b53622df50ddf2c9a21b7441a46d45d854530468ee845e94d12f9ccf719c80f06e5e0d2927b4304", 0x9d}], 0x4, 0x13, 0x0) r2 = timerfd_create(0x1, 0x80000) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000380)=0x2d3f0f13) (async) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000380)=0x2d3f0f13) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000440)=[{{r3, r4/1000+10000}, 0x7, 0x1, 0xfffffff7}, {{}, 0x17, 0x401, 0x6}, {{r5, r6/1000+10000}, 0x1, 0x200, 0x86}, {{0x77359400}, 0x14, 0x7, 0xb}, {{0x77359400}, 0x17, 0x1, 0x6}, {{}, 0xd, 0x8, 0x8a}], 0x90) (async) write$evdev(0xffffffffffffffff, &(0x7f0000000440)=[{{r3, r4/1000+10000}, 0x7, 0x1, 0xfffffff7}, {{}, 0x17, 0x401, 0x6}, {{r5, r6/1000+10000}, 0x1, 0x200, 0x86}, {{0x77359400}, 0x14, 0x7, 0xb}, {{0x77359400}, 0x17, 0x1, 0x6}, {{}, 0xd, 0x8, 0x8a}], 0x90) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002580), 0x400, 0x0) connect$inet(r11, &(0x7f00000025c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) fstat(r0, &(0x7f0000004b00)) (async) fstat(r0, &(0x7f0000004b00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000004f00)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000005000)=0xe8) syz_fuse_handle_req(r11, &(0x7f0000002600)="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", 0x2000, &(0x7f0000005280)={&(0x7f0000004600)={0x50, 0x0, 0x17, {0x7, 0x2d, 0xffffffff, 0x8006000, 0x1, 0x800, 0xee1, 0x80000000, 0x0, 0x0, 0x8, 0x8b1}}, &(0x7f0000004680)={0x18, 0x0, 0x9, {0x5}}, &(0x7f00000046c0)={0x18, 0xfffffffffffffff5, 0x23818d5b, {0xfffffffffffffff7}}, &(0x7f0000004700)={0x18, 0xfffffffffffffff5, 0x7, {0xfffffffa}}, &(0x7f0000004740)={0x18, 0xfffffffffffffffe, 0x2, {0x1000}}, &(0x7f0000004780)={0x28, 0x0, 0x0, {{0x5, 0xb, 0x2, r10}}}, &(0x7f00000047c0)={0x60, 0x0, 0xfffffffffffffff7, {{0x38f, 0x8, 0xdd, 0x7, 0x80000000, 0x7, 0x4, 0x6}}}, &(0x7f0000004840)={0x18, 0x0, 0x6, {0x2}}, &(0x7f0000004880)={0x14, 0x0, 0x1, {',}.:'}}, &(0x7f00000048c0)={0x20, 0x0, 0xffff, {0x0, 0x26}}, &(0x7f0000004900)={0x78, 0x0, 0x1, {0x7, 0xa, 0x0, {0x6, 0x8, 0x2a6, 0x9, 0x8, 0x0, 0x40, 0xbcdc, 0x24, 0x6000, 0x8, r8, r9, 0x9, 0xde}}}, &(0x7f0000004980)={0x90, 0x0, 0x336bc00000000000, {0x0, 0x2, 0x3e9d8a5d, 0x9, 0x1, 0x7, {0x4, 0x3, 0x7, 0x3, 0x2, 0x9, 0x6, 0x5, 0x800, 0x4000, 0x8, 0xffffffffffffffff, r9, 0x7, 0x8}}}, &(0x7f0000004a40)={0xa0, 0xffffffffffffffda, 0x1, [{0x5, 0x5, 0xa, 0x2, '/dev/fuse\x00'}, {0x1, 0xd, 0xa, 0x4, '/dev/fuse\x00'}, {0x0, 0x1, 0x22, 0x8, '/proc/sys/net/ipv4/tcp_syncookies\x00'}]}, &(0x7f0000004b80)={0x348, 0xffffffffffffffda, 0x7f, [{{0x0, 0x1, 0xd24b, 0x92ed, 0x2, 0xff, {0x0, 0x1, 0x4, 0x8, 0x40, 0x2, 0xffffffff, 0x4, 0x200, 0xa000, 0x5, r12, r9, 0xd4c, 0x10001}}, {0x5, 0x8, 0x3, 0xfffffff0, '^@['}}, {{0x0, 0x1, 0x3, 0x2, 0xfffffff8, 0x401, {0x3, 0x23, 0x5, 0x8000000000000001, 0xfff, 0x7fffffffffffffff, 0x30a, 0xffff3226, 0x0, 0xa000, 0x1, r8, r9, 0x9, 0x7}}, {0x4, 0x6, 0xa, 0x2, '/dev/vcsu\x00'}}, {{0x0, 0x3, 0x8000, 0x4, 0x6, 0x0, {0x5, 0x80000001, 0x5, 0x1, 0x3, 0xf9b, 0x286, 0x7, 0x3, 0xc000, 0x1, r8, r9, 0x6, 0x10}}, {0x4, 0x3, 0x9, 0x6, ':-+)&)[]\\'}}, {{0x2, 0x2, 0x7fffffff, 0x8, 0x80000001, 0x100, {0x5, 0x5, 0xf, 0x6180fe99, 0x2, 0x800, 0x5, 0x4, 0x1000, 0xd000, 0x6, 0x0, r9, 0xff3, 0x1000}}, {0x5, 0x6, 0x5, 0x8, 'C\'-&@'}}, {{0x6, 0x3, 0x79, 0x4, 0x7, 0x81, {0x3, 0x3, 0x6, 0x1, 0x6d, 0x3, 0x2, 0x7, 0x8, 0xc000, 0x7, r8, r9, 0x0, 0x8001}}, {0x0, 0xe1, 0xa, 0x7f, '/dev/vcsu\x00'}}]}, &(0x7f0000005040)={0xa0, 0x0, 0xe, {{0x2, 0x1, 0x4ff, 0x7, 0xffffffff, 0x5, {0x2, 0x2, 0x34f, 0x9, 0x797, 0xa, 0x0, 0x80000001, 0x1ff, 0xc000, 0x3, r13, r9, 0x9cd, 0x7fff}}, {0x0, 0x8}}}, &(0x7f0000005100)={0x20, 0x0, 0x9, {0x4, 0x4, 0x7f, 0xfffffff8}}, &(0x7f0000005140)={0x130, 0xfffffffffffffff5, 0x2, {0x8, 0x100, 0x0, '\x00', {0x10, 0x9d76, 0xffffffffffff0000, 0x3, r8, 0xffffffffffffffff, 0x12000, '\x00', 0x1000, 0x8000000000000000, 0x4d8d, 0x9, {0x4, 0x81}, {0x0, 0xb}, {0x5, 0x20}, {0x8, 0x7fffffff}, 0x1, 0x7, 0x9d1f, 0x8}}}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000005340), 0x200040, 0x0) (async) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000005340), 0x200040, 0x0) ioctl$PPPIOCNEWUNIT(r14, 0xc004743e, &(0x7f0000005380)) r15 = dup2(r11, r2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r15, 0x6, 0x16, &(0x7f00000053c0)=[@window={0x3, 0x7, 0x4}, @timestamp, @timestamp, @timestamp, @window={0x3, 0xa, 0x4}, @window={0x3, 0x450, 0x27}, @timestamp], 0x7) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r15, 0x89fa, &(0x7f0000005440)={'sit0\x00', &(0x7f0000005400)={@private2, @private=0xa010102, 0x18}}) ioctl$XFS_IOC_GETBMAP(r14, 0xc0205826, &(0x7f0000005480)={0x2, 0x7, 0x3, 0x6, 0x2}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000054c0)={r15}) recvfrom$inet(r11, &(0x7f0000005500)=""/233, 0xe9, 0x3, &(0x7f0000005600)={0x2, 0x4e21, @multicast2}, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000005640), 0x2, 0x0) (async) r16 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000005640), 0x2, 0x0) fsetxattr$trusted_overlay_origin(r16, &(0x7f0000005680), &(0x7f00000056c0), 0x2, 0x2) (async) fsetxattr$trusted_overlay_origin(r16, &(0x7f0000005680), &(0x7f00000056c0), 0x2, 0x2) connect$inet(r11, &(0x7f0000005700)={0x2, 0x4e20, @multicast2}, 0x10) r17 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_buf(r17, 0x0, 0x30b39934b7dacf76, &(0x7f0000005740)=""/210, &(0x7f0000005840)=0xd2) syz_genetlink_get_family_id$smc(&(0x7f00000058c0), r15) (async) r18 = syz_genetlink_get_family_id$smc(&(0x7f00000058c0), r15) sendmsg$SMC_PNETID_DEL(r11, &(0x7f0000005980)={&(0x7f0000005880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005940)={&(0x7f0000005900)={0x14, r18, 0x2, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000050) executing program 36: write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf350f4e, 0x200, 0x5, 0x200, 0xffeffffa, 0x0, 0x0, 0x2, 0x800}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x7d97, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/control/extensions/xu.0/bNumControls\x00', 0x0, 0x0) executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x8}, &(0x7f0000000100)=0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40800) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) (async) write(r0, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x8}, &(0x7f0000000100)=0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40800) (async) executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r2, 0x40480923, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xffffffdffffffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000200)={0x5, 0x800, 0x2}) (async) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000002000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) (async) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]}) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) (async) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000001000)={0x1, 0x0, [{0x839}]}) (async) write$vga_arbiter(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='target '], 0x15) (async) r12 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r12, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r13}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "0000fb00"}, 0x10}}, 0x4000040) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x8}]}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000080)={[0x7, 0x7, 0xa, 0x4000000000000e52, 0x800000000001, 0x5459, 0x1041, 0x200200000006, 0x5, 0x400000001, 0x4, 0x100000000, 0x4, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000}) executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000280)={0x6, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x6, 0x0, 0x5, 0x0, 0x9}}) executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x1c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) (async) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) unshare(0x40080) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') (async) unshare(0x80) r2 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) executing program 7: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, &(0x7f0000000300)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x10, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x4004) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r3, 0x118, 0x4, 0x0, &(0x7f00000003c0)=0xffffffffffffffb2) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES8=r1, @ANYRES8=r1, @ANYRES64=r1], 0x30}, 0x1, 0x0, 0x0, 0x20008854}, 0x2000c000) executing program 7: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x93}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000040)={0x1, 0x3, 0x3, &(0x7f0000000000)={0xc, "91632209fa3400c07f19c2bb2925ad1e172604ff46daff96c5895854991bbff42a"}}) executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) executing program 6: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_proto_private(r1, 0x89a2, &(0x7f00000001c0)="d73a") setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x40000004, 0x0, 0x0, 0x2}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd15b67000fedbdf25250000000e0001006e6574ff7f0000698b0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c0001000000"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000c800) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgid(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2, r5}) sendmmsg$unix(r3, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000ac0d3c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r10, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$bt_sco(r10, &(0x7f0000001280), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000020) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000600), 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x12100) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000080), 0x3d) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x19, 0x0, &(0x7f00000002c0)="581f923965a9bd7021768d8e3f0ac7758aa95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, 0x3}, 0x50) executing program 5: setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8971, &(0x7f0000000180)={'dummy0\x00', @ifru_flags=0x1000}) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x5f1, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2c, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0x7b, 0x1, 0x7, 0x1, 0x1, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x61, 0x1, 0xd}}}}}]}}]}}, 0x0) executing program 6: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) unlink(&(0x7f0000000240)='./file0\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000300)="1143530120080000000037510800", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x3, r3, 0x1, 0xb2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000340)=[{0x6, 0x72, 0x0, 0x3}, {0x0, 0x4, 0x0, 0x2}, {0x9, 0xee, 0x9, 0x7}]}) bind$packet(r7, &(0x7f0000000040)={0x11, 0xf5, r3, 0x1, 0xf8, 0x6, @multicast}, 0x14) close_range(r8, 0xffffffffffffffff, 0x0) landlock_create_ruleset(&(0x7f0000000380)={0x1e28, 0x2, 0x2}, 0x30, 0x0) executing program 6: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r0, 0x127c, &(0x7f0000000240)={0x0, 0x1000000}) ioctl$SG_BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1ff}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001580)=@qipcrtr, 0x80, &(0x7f0000001680)=[{&(0x7f0000001600)=""/98, 0x62}], 0x1, &(0x7f00000016c0)=""/147, 0x93}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r7, 0x0, 0xa9, 0x1000, &(0x7f0000000240)="cac984ecc2006f89a86fed9161f306a9582fc727b4ebfeab0c87f201bbd4430c4e66fe9209cb108537af5f4dd28b46fb020892c17bc67a102d1c62e4b5a2bd3d71d09e276411ce1196deb136d465b02fbd88b048f9575e599c56fa545e6951bb3f4ba7b3f7da23e70cfb072aada7591e04f3dff0a7b79eef573230a351b40da6f791d9f0dcf5ef52769bd51dd604a89ab3ddbb0ed2ef02785378aeef21a68b00ae68b64dede0903de2", &(0x7f0000000380)=""/4096, 0x2, 0x0, 0x51, 0xda, &(0x7f0000001380)="de2923160fb0f41f5e6719e06d7ed67aa60cab1c85c379f415f5dc316da50470b30bfa8d964c536bc3d5152fba27d8aae3e50b010887760eaa8a07fc67bc81a1e08831d817e2c19d47c5aeebcd5d1acb0d", &(0x7f0000001400)="84845b654453a031ef090af7e081bc7d565db882d2a140a648717c478693c70fdcfff4cf85076bc772748926018c3478a11b270a0c51f964dc362c5c7992d3d201c96c3bc7cdc9cc66d3a10d6c26d8bff6243f933e6aa90cf4264370dd1b1c11373e78172ba58fe65cba6bbf3bd1333f90f8fde94c3aebd1ec282d2e81eea4b7fd8642f119397a6dd3d84a9ad475957fba316297d5d13951cb55dc250e063c4a32496ef30c12cc8c383895fe1a42499f6b9d8d0f6ef627dc4283fd995092331393eb2c7c0b17b30f3e14485c774bbb507fd32a883344abf4f6d3", 0x1, 0x0, 0x7c}, 0x50) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, r8, 0x331, 0x4, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) fcntl$setlease(r9, 0x400, 0x0) unlink(&(0x7f0000000040)='./file0\x00') setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0xd, 0x8563, 0x5}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d4}, 0x24044040) executing program 6: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfff}}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8e661481a584a3668a30723704cd729c86ec35e771a0f6ab599fd3000000000000000000", @ANYRES16=r6, @ANYBLOB="010102000000080000001900000008000300", @ANYRES32=r7, @ANYBLOB="04002400"], 0x20}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008005}, 0x20020040) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r8 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, &(0x7f0000000080)={'ip6erspan0\x00', {0x2, 0x0, @multicast1}}) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "df27e9e8019149b6", "c963635c314e079f00000085c828560c2d84b8145617573d317e0e7ff94f7660", "ca13e601", "000000a5130400"}, 0xfffffffffffffd67) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000580)=@gcm_256={{0x304}, "3ff0aa17546d45dd", "df279d352ab5d0880870f927f160d4d942367b664e0627227cc833d34a90072e", "b722b799", "f4a4103efa137028"}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @private0, 0x5}, 0x1c) r9 = syz_open_dev$radio(&(0x7f00000005c0), 0x2, 0x2) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x303}, "e79bf4efd038f3f2", "80223d477cd86b4f40f53647936d4b8bfd02f8326187a8fcab6d4d4c3525ae4d", "333f8916", "dac22d4b46ae3a8f"}, 0x38) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205648, &(0x7f0000000140)={0x0, 0x1, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa10902, 0x0, '\x00', @p_u8=0x0}}) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40012004, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000072, 0x0, 0x7ff}]}) executing program 6: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x2}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xffff7ff3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x6, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x6, 0x0, 0x5, 0x0, 0x9}}) executing program 8: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001640)={0x14, r1, 0x705, 0x70bd30, 0x25dfdbed}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4000810) executing program 7: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b0006000000009b7a000100e83ac55324dcd8cdde11b71f986ea0c28be9", 0x28, 0xfffffffffffffffe) r1 = io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x18, 0x2, 0x281}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000001040)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}], 0x2) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r2, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) executing program 8: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000540)={0x11, 0x5, r2}, 0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x0, 0x88a2}, @void, @eth={@multicast, @empty, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast1, @rand_addr=0x64010100}}}}}}, 0x2e) (async) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) (async) sendmsg$inet6(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) executing program 7: syz_emit_vhci(&(0x7f0000000900)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x3, 0xc8, 0xc9, 0xd2}}}, 0x8) socket$phonet_pipe(0x23, 0x5, 0x2) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout bisect: bisecting 55 programs bisect: split chunks (needed=false): <54> bisect: split chunk #0 of len 54 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 30, 30, 17, 16, 21, 11, 30, 26, 26, 2, 30, 11, 2, 20, 12, 40, 12, 12, 30, 9, 12, 12, 8, 3, 30, 8, 21, 3, 22, 30, 13, 3, 6, 19, 2, 30] detailed listing: executing program 4: r0 = userfaultfd(0x80001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="89d31800000000000000000000000000000018500000000000200000000000000082450d250ec31a3b58a3d0f8a00282717f7693"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000842000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000100000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x138, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "3565d957e99236e9e9cb2b8cf74926675c231af2d2290c4c"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x192}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) read(r0, &(0x7f0000000300)=""/172, 0xdc) executing program 4: r0 = getpgid(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = syz_pidfd_open(r0, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r3, &(0x7f0000000340)='./file7/file0/../file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xf, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000050601010200000000020000000000091300020073797a31000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x3}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="9d7e01496ca96cd4f94cabca82fca1855f657aa2e6089a7c824cf7e7196840b02c1758dfd5879855c813ca8f8218658e7a1b85726a3a3c21eaad7e926182550d6487afe9b815e11d2f21a96af7245493d1efabf61e81d23c598de9ff81baf869515f8ad85379ef59e953321c3230c5ab2bd1ce22d263148d8b73aa20aafacd4aba2113e25802c7353393df3d7b23af7a623ce8a568afe4e1abccdaca3eae1ad84d", @ANYRESHEX=0x0, @ANYRES64, @ANYRES32=r1, @ANYRES32=r4], 0x0, 0x19, 0x0, 0x0, 0x2e26eaf27be3145b, 0x6}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r7, @ANYRES16=r9, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x8040}, 0x4000010) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc601}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @local}) write$tun(r11, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000228290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r13 = fsopen(&(0x7f00000002c0)='omfs\x00', 0x0) r14 = fcntl$dupfd(r13, 0x0, r6) fsconfig$FSCONFIG_SET_STRING(r14, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) ioctl(r12, 0x890b, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') executing program 34: r0 = getpgid(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = syz_pidfd_open(r0, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r3, &(0x7f0000000340)='./file7/file0/../file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xf, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000050601010200000000020000000000091300020073797a31000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x3}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="9d7e01496ca96cd4f94cabca82fca1855f657aa2e6089a7c824cf7e7196840b02c1758dfd5879855c813ca8f8218658e7a1b85726a3a3c21eaad7e926182550d6487afe9b815e11d2f21a96af7245493d1efabf61e81d23c598de9ff81baf869515f8ad85379ef59e953321c3230c5ab2bd1ce22d263148d8b73aa20aafacd4aba2113e25802c7353393df3d7b23af7a623ce8a568afe4e1abccdaca3eae1ad84d", @ANYRESHEX=0x0, @ANYRES64, @ANYRES32=r1, @ANYRES32=r4], 0x0, 0x19, 0x0, 0x0, 0x2e26eaf27be3145b, 0x6}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r7, @ANYRES16=r9, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x8040}, 0x4000010) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc601}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @local}) write$tun(r11, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000228290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r13 = fsopen(&(0x7f00000002c0)='omfs\x00', 0x0) r14 = fcntl$dupfd(r13, 0x0, r6) fsconfig$FSCONFIG_SET_STRING(r14, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) ioctl(r12, 0x890b, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000800)=@newnexthop={0x3c, 0x68, 0x901, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x2, 0xd4}, {0x1, 0x2}]}]}, 0x3c}}, 0x0) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x1200000}) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) (async, rerun: 64) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/intel_xhci_usb_sw/uevent\x00', 0x1, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@local, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@delqdisc={0x84, 0x25, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x19, 0xfff2}, {0xf, 0xf}, {0xc, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @TCA_RATE={0x6, 0x5, {0x81, 0xd6}}, @TCA_RATE={0x6, 0x5, {0x6, 0xf2}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff}, @qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x5}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x80}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x20008080) write(r4, &(0x7f0000000140)="41a5cd", 0x3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r2, r6, 0x0) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) executing program 3: syz_emit_ethernet(0xaa, &(0x7f0000000300)={@broadcast, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x5e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600280000fe8000000000000000000000aa8903000000000000c910fe88000000000000000000000000010105020004010200"/79], 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600280000fe8000000000000000000000aa8903000000000000c910fe88000000000000000000000000010105020004010200"/79], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560f, &(0x7f00000002c0)={0xb}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname(r0, &(0x7f0000000040)=@alg, &(0x7f0000000240)=0x80) (async) getsockname(r0, &(0x7f0000000040)=@alg, &(0x7f0000000240)=0x80) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) (async) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x80) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) writev(r2, &(0x7f0000001c40)=[{&(0x7f0000000300)="5c1c4ec7ea747a61209302309e81698e938130a4f20205166885bc69f43d76e65747e6cad0c6f337392fdd59ac4ab4ab217c36157e853da8ea7a8a929c0a68cba97d06d3e62cb6803dbd408d3c27d92bce781c93f4bbb12d5702dd244f4c89e6fea6313c2c8689b7f48c8044f87e1b781e107ad7da1f3e213f2d78c0afa70c20adb2bda5188405ef2872dbbb6a7034746b98f8dfb175ba85257215ea1451c53522ca4eb6175448665de114f96be84be967662ce4c3593f521c78b877ee680982cbe8fcf7f893aa16b3e03702dc6b219f8068e9502d216f4df895681fd033fb0bca24c7a05be3e465f9b7a46d27", 0xed}, {&(0x7f0000000c40)="b1b991f8e86b52f0bb10e9abb7bc00c9139bd05abae4c6702a2a1d93169026bceb08c1e9688ca628c8a98b2e23525bbafc0883c2a0e7eca900d8bf61e5a004c8163627de94c9929c46caccbf75c918da77b870954a2187b433041cc6c1a0241a7ee471b88d699cb2642810d5993de59bc2f8134cd74cea40088f6f1980f24ec2295a2466f6c809899e7db0243350fe50ce581115cd9b5582390edc5511e08f2ee0ad1613bf99a2f752ae6f6a55978498e5d0001a97159af81dd50c6c30f47520ad69f25a8d01d402f13dfe772430bbe2a7114815eefc3f05e8bcbf9dfa87e6da83d0bd4acd269a95d92380125ca82fbf7f4b5ec035b1b9323f66028905c1e741f8fbe6ba5d212762a9a043cfe349b1d54d2381bc5fbebe0b96b7b7770d15f11ef7d1e8b0fe012a4803363d0c2678da1fd877029dee172c453995c5aca78ebf1f54527f81066f629c97800529f75362e8c9cc07300df82097c7d06fa2fccaa2353f9b3c71f1e22cadf0ec705adafe8d8037ccab5b2d08cbbd466658af5703cc791cf39c054fdd6253c6c4f86457f6d8a5090f24f42dea0043b97cd75c6fe7fc20cd046e8f9a0a4440fcc3a1795f7aac38ace681fc40751adfb4933cac922ec252110163f4d64943f1fafbfa5bb9b9da74c7dea51ee117b8c98f7281f6f640a8d9f222e823342d1d7e32617d6e4507a7948d4076d6ced316c308b5dfeb83911d9a57772a0f35ef36dfa4555017dacaf7090b46b1fd0ea5878443be99afb72f33193b790845159f10db844e2fa6df1698bd07f4c8e044a918dd283b381a7747175b88c1c72fbe5d6425dba2b496dfa39a8a441cf3db65ead55c533cee2c170dbd13a25ac5f09b5fe9dba7b07b275efd94b6d110f5f655b75356d80e7f86ea01bb7988f9b514e8d3319467d1957b01b3bdc982a0b53ded3b86622b8625de055bbfefdc31edb9bebf87470e853b4c2588c274d83d9ab8b022bf77451989621983942a1c1e9f0f66dd277f07c568d5ea77c9844a244e3b40c0894b806a147a4d077c03ceec449ce7eaa057473f97b447f59076320337b6be8aaf568c0fb68f4fd5368741a354356f70ca6872782035820829026a5792c225d0e754b5b0c2800b50eba572fda13ffee3a779c14136bddf7211da2b848ef74154a4f89844ec292dc6f11b8ec53e9606de3ef201a94e95c2a60697a6e781fce07890a48bdd2cb958c6e492852bd650fd8c4c7efc970bd176c9e20a37241625ae5a6b7f925f28883d501c8c87b9c0f3f87f00578d151aa5fec52193f08b96a32b14186a292d7d3d0ac0d2121b0122bbac50d71ee330af1d32674489bbe361fab1de564e177d283716c8bd010f14af8b9bddcfaf63b5736461a604ccf6c879cc17319a6de66074c0d8b6f1e678e7299d18a313500f79ce6c7026ad8613f3e07286e72d59d31e9b069c43155d7ba193d2c002cbab1a2e881609fb0ee26dc29f95ab8a4f7ffbae24b263455b3a04cd4c680b68c1e24faf0c7b3ae6c4b283181b8256b7ac37eb43382cfd874c04fd14a7c3245fd2d75a16b33230d45a7e5c049b0d691da246a7e195d226df415e0ed1f7b7eb175835fadcf407844fd0efd93728e5f585118f3d9546c301aae31e8340692cc4bf36f0cec205089fd50d23805099049c105d2892c52f92ed1620aa54b7bb5501903af30ddec35ce0a44b172e0fdd87a582ac2b5ad15dc72aef7be6e381d3fd5a9bbafefe92a58635ab7e8e11050b0543ef34a8bde33c5e651c1f8dc5acdc619f48c5023f7bdb7573967f73862d2517d89f053fd63557d3c8301589b701ac9f310d2e3bdf0f6ac18f5fb7ee9b155944f47f7a10c5a490a19a9d252b000dd20572d309574464830e2a2dc9a65f52088d2995b3414c64295a82b6e9939ec8b5026cf70ff37682f87f218efe7e0834ca664dd3b65fe711a50208675b9b22b03a0b7d348514bfc71617da50e2abb6a1931c87d36b0de6bc5c005870f443ed7a7727c89dfed2d17352253512850ea21137ab8069b8ce34bbeb32ce90f19ce9bfe79fe3db025fd2e15bf239f4adc791d6b49cce9134c5d139971b23c437d142055fda14f201a8c265a3d3910df9b30bfaa78257c51a4d5d271be3d751370648d2f804844346c1bed8893a2386b00f185c500776b8b3ef2fbcb9e53546a89b75a8e9d267b0bde96f86528a3b0cb9d16c19fc5e7d885c46b9074681894d60c7034aa1f521c42fdec63808f1489e691cf37ad9e9370d41efb7b8255cc51b13418e88ef21303de5c2bb1bd09a802f3cfd867f3a3cea9a50e211128994c337ec7a1f9b078b69187fd08d6f27aefd164ac95ec145e595cdb381c3e379795c358be679020a9f8448b5babcf23796e61d22785c09fdcddf75d4ea150a9f50ad821782234ad55c0a534112e5e7ee1c06280f4ea084cc50bd8522a94067b382d27a52bc99898d9fb326c72fa1c5401c6af3b410086aea555f25823e3d0828a47d742b7df374276c418db5e90f632fbab9e575b857e1d69514e26bd987ee6b7750443005c7d3b15197b0acc0cdf318998a815dd7aa52308e5413db17bacc4e7d79b6f39d52401656f937865ad85f8e7c2d08dc72cc0f4fe4e4556cecc102966e0e672b2fc9cfdc7932fd0f806b932e98f2458e9a6fb39fc8c0367cbcf712ef98cb96b8f3ff331e6c4a19d630f17cd319f47b25879079dffb0ae32944741e11c14c23414ad630c7b8b89f25f8e646f2a3a726dbea3982903434388a021fe64db94dd0b0c141110c6ac4ee694b6d0e8ac1deac001fb6eeb02230c0b328238aeaf68362c431ffda8f4985429ae171577f8dd2b425085d2da514721e33adebfec6998c5f37a18b7f92b3f35df754b1902e5eb70383ce8f2b20a8d5f95ceaa5fa95fe4baa815e773e81ba7116413dbae2e0a46bfe0cc2db7b6f7fe3cc767dfa650e3c5dc1529fdc0a2c448155bb9d7d5ea0df8a736afe98fac26e1c1484e482f44265ce640f2445c513d4272a172ac54b3dbaf4bf77448b19d65331e5ec3f3c247964df9ae00343588507797d1fec434a9c2aa58467250dfb919cf4a65f903838fe5c66554229d2316e00c03ac1f07d7d105960b64034c5b01affc5f98edcb10ba3b8bfba68697329a3c0711afa451def81cde989cd36407c4df70415d17b5df7a24ef9cb2720babe79193baf9041984b39e70ccd2c23f345c0251738c45dc4ead1dcc35d9b9f0b68cc2a5d28d9f09f2395acb6afd793ab884d7229c8470d5e51e0dce0ce85a61864882afb170b41d193179c265af822e3438f3e3f93c082a56d65b21ebdbaa54b691b23a6aafb18433b81793011d25a0ac75f8b690393f9a6a6021e53b6f05e73bf6604fcd2fe9447b1aefc4a431c66051b5a27b793039e1830c28eff25c43f183d6b6e03dea6b93255be03e53d728b5573e7da1a5495dab991c716e19922ba6624528bd47b0138f0c6b42b6542c70f38221653562d2683f214eb1fc18be50a03a1294cfcd579fa70dfa495fd4e54d81d13f164f6eed6f2580c884c64a27dcd6a5fe89710db45c2f7301097c91f53b79a9aba84fc64f4055fa90c850b4d180354bbfd78c43c31aaa4b78e78029e48d4219b9c0063e82af8d6ecdde27c667018a5b8f211609213b51be813bf88e1ee3c94c886b8ebaf3f2fccbb899bffeb8cf8fd738d1481d97431d924fb376644c618d2f17e8e41d957e71609d40ed867b35eda9d7a53e961574589d505ba21d684808a93673bfd59bca38edcaffaa6cca293a587d5cc3ef9d1be81f9d42d8c0be7a0bb88bc4e3b7a5ba01f40911bc537dc4e9582b86830d5f21338597151894b98bab429936e9f585f832c332c838f74670cd44bf73d7e6d57eccf30cfdfde39d07023daf55b31e814b51fe9438330de519730a31a6ae216da1a3cf5372ed1cbc88ac8fbfbdc3e6f6c7dfbf58d77ec0c4825e9099b7abebe5572826f036c3b4c81deb46ebac2725319e2b6476f4e326b08bbfdc45c0e1b5e2e47e858bac66b4a9db194f2aff727310d71acbe360c8baf01a9fa0de2c2687cf0d87a05a395692b0f7f3dbd98a44d4536391caa00be9501e3d2819e1cdbb61bcaf70aabb58abdb0fb5fe6270fa41b316fb6966ab1e588a77d9de412be6353099b8e36a679d6549fee85d734c5155ffe7b762be6abf3eb46b13309d6ab63f836929edba1bac12d9892e716f50d226bc3cf99b93b78c4077aa90c7a1a2d8f419eeca735da2f77c6acdb6d282f73aed1820c701c91bece05a378e8ad8e49f839d8a2460bddec28c0a269a70b177d34bf77f093ac040c19c7f3862eaf1b86cf583fa75d44b021f3bab31b8148ff5cf1a7e54247866d8fc4f820568580ddbab698ec4d89c25adc6c9c864326cfef2853fdf150875470a41e68e91707107d8abfd36df405a2bc55002bde679c43b492df275c814f81878aaee2822f633b3a365de17ff0dbf1aa23035dddd6046e1e9f7fc4e013a0e4e78d32f02ec9a017d93970362fe68b9ea92a39c776e311666bcaa91293396749c04178c2e097ebf9644946efd42f559a261d1238b25f83248864ed3c501ea8a7b0af9329e1f66c859148f684c309586ebef59a9b8cfa339fe2562be8fd417b84e4d4d643694080f4fefbb1a8a2408d69f1bf4adaed4433706add84729578c1879cf8b25f9df1ff29c380ad0ab28a28ed1d55966560ae3b58428a2628b8c2d3907033b06721c0f0cc3f3dda5fffd11177554d6dfec89179607539ec9eaca26c7205de0d4aed1e74c9e95a0a69d70c8d7d8c9f75ea3173e0020c5ac82e3febeffb3033410c740450a5de2e509e7cce04bf84f4c6fb6460e3d1f5fda9b0fa61a62260f9556f6599d3c9ca2cbaddf228fbf99faef97c8edf5e92c6d061a243a09249d5b5b5e9c91fdd1f482d3226036bb36ded55aba4d160d5a89109978b260d4c009be5b3141b84e02240631a08064829545d3a6d432441dd9495356428f3799fc31fa47d411829df465e45a935848b7822fdbb297631ef17b5b9145ab024186c7315e5ab918b204e0a1bcdd6bb05335462415e264af18507f537e5ec71d94b446366e25d100f6c295685d1cbc4155ff7aec0e7f95d428ee91f40ee0e5d6b70eea33624521177b13f08a96d73c441f3ad495e2d9fafb495298b471e19825a6bb89189a56769715f23fb89dcb208d69c2f9f1c23edf528f54c5001d0d635e0c355714e49ece651eae0c18cab9595fe832301ffcd95dcb28b68c3f11d29ac2e7a7d6c9dbe17e29495f0db1d85a4ce9649424f9fd5e19350656391b127548fa753ec3af89c382dd334", 0xe9f}], 0x2) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x3ffffc}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a00)=""/109, 0x6d}, {&(0x7f0000001a80)=""/4106, 0x100a}, {&(0x7f0000003740)=""/182, 0xb6}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000003900)=""/148, 0x94}, {&(0x7f00000000c0)=""/112, 0x70}, {0x0}, {&(0x7f0000000280)=""/135, 0x87}], 0x8}, 0x9}], 0x4, 0x40010000, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1fd4ea11", 0x4}, {&(0x7f0000000280)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000800)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)={'cmac(twofish-asm)\x00'}}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x35d}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r3, 0xa}, &(0x7f0000000140)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x7, @remote}, {0x1, @broadcast}, 0x4c, {0x2, 0x102, @local}, 'ip6gretap0\x00'}) setns(0xc9, 0x0) r5 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x2c00, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x3, 0x80a0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000300)={0x0, 0x3, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2003}, 0x50) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x14, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffd}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r7, 0xaea2, 0x9) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) executing program 35: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x14, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffd}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r7, 0xaea2, 0x9) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x6, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x6, 0x0, 0x5, 0x0, 0x9}}) executing program 2: getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) (async) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={r0, 0x3, 0xb1, "7fdfc4c7af150357fec92dacf305a18b0be61417b1047ea5746baa875d215d27f4277cdcbc460daae5a220a23dd80b309573c86571fb6a86b4a51b396e618ed6bfb79ea18c316c5c36574fc460a102cf786ea22478e0eca3eefdad4693413b94e8e25c7c9eccf03df20d2f2844869ca10290d5d81ce268cdac513e9b1508a0f0b2b1a64c6d3b52039b4408b2a78049176118971cad434392e8ac2528da63eb4c62678188770c8edb91297a99ab4e8cc9a0"}, 0xb9) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={r0, 0x7, 0x10, 0x8c, 0x9}, &(0x7f0000000180)=0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) (async) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000200)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010101}}, 0x24) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000240)={0x6, 'virt_wifi0\x00', {0x6}, 0xf9}) (async, rerun: 32) r3 = socket$inet_sctp(0x2, 0x4, 0x84) (rerun: 32) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000280)={0x1, [0x6]}, 0x6) (async) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) nanosleep(&(0x7f0000000340)={0x77359400}, &(0x7f0000000380)) (async) read(r1, &(0x7f00000003c0)=""/192, 0xc0) (async, rerun: 64) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000480)='\xe1*\x00', &(0x7f00000004c0)='./file0\x00', r1) (async, rerun: 64) ioctl$BTRFS_IOC_ENCODED_WRITE(r3, 0x40809440, &(0x7f0000000780)={&(0x7f0000000740)=[{&(0x7f0000000500)="216af7e0116c50f0535d8f03e236ac74c84ae52e262f64dee9d8096fbc2c08ca9c843d429a5b4d7cc81226959ae08e0848f030c7a128ee65e92463d31301cd8cc8476814739871da390985c2d6073f6a0a", 0x51}, {&(0x7f0000000580)="38f9481b69067ea9e459b1e9409c889b4ebee6739c7729b1ff8b3c77a136ba20f495c7e0d317c24be23675a9a9f9aac68347f4fa09678947857b5890169d5df13b3760f05c602ecac726e0df447428496732728ffac8994ef353ac5d59626e104bdf17efcd8cf634e66fc5549479d6556570ecab6b026a1c93b8573de540b79730b85bb1932afeeb66dc8adf554680ae7151ede8c7a4141e124755328d529c2237482a6b", 0xa4}, {&(0x7f0000000640)="962567722798927b858cf34340a7e2b4ccbd521101f35e420211a6df1855c558fa8a97dcc7ad37ac7305e5e7027f760a75ccf283578ffc25401213c9efa140f2133889dd3c4fdc326b5c890a4ae288f15410050ffdb50ccd04b6762946b355ebee9083597d0520769395eaaaef68d742d1ac7f9eb99be71cd1b2b0d67e9049ba6c43e738619f7c99a56c57fc49684b245127745ff042554836902418d422b583a5d857ddbbfbcff0f8890e841d2583e498cb8ef36e9e09e3090c9c67f2865369ca19ef91e6decc21706a6c2efd10b2c36f84c4b56b0aae20bb7c5a630c646d7b7df149f75ced2656e8b201c90bba5293039a09b56a", 0xf5}], 0x3, 0x3, 0x0, 0x10001, 0xffffffffffffffff, 0x7f, 0x0, 0x9}) (async, rerun: 64) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x18, 0x140e, 0x3ae234f10006620a, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) (async, rerun: 32) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000900), 0x422002, 0x0) (rerun: 32) unlinkat(r5, &(0x7f0000000940)='./file0\x00', 0x200) (async) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x6}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xa4, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4b88d4a3e8"}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "e5a47e"}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "cb95001802b19f137cf5531bceff"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "db69d06f11ad8116b9429b5703"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "17de2b0e3f5e853ca0c5d8a59e"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4041}, 0x4004) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x0, 0x0, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000b80), {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5fe3, 0x7, 0x8000, 0x0, 0x0, "d5ddea43a1a1a53017a85081e8e81de98802c1bd05785b0ecfb2681178f602a48595f6a67a647a86e555ac7ec2f4e43f0cbeadfb833f088aca38fbd412c21728"}}}, {{@arp={@multicast2, @rand_addr=0x64010101, 0xffffffff, 0xff, 0xc, 0xa, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x3800, 0x350a, 0x9, 0x400, 0x1, 0x7, 'pimreg\x00', 'gre0\x00', {}, {}, 0x0, 0x180}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x39}, @multicast1, 0x0, 0xff, 0x3, 0x4, {@empty, {[0x0, 0xff, 0x0, 0x50769a559f0ab11, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x3, 0x3, 0x3, 0x1, 0xace, 'team0\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x14}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x0, 0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f0000001000)={0x68, "bcced225262f3db989aebbc24f8f1509149c7cc13fe82998871ec0714d79b17fa8da83b670abace4b4b36cdc8f20151bc9ae616cb814df2102151f6a6f4554b9e832e4fcbb497882d00faabef1ff24395deb2057f49b6d03d80681a81b46df1c8621455794297f6d8f1393b6e459c85747a19dadd90dd361260a3e9cb44e7913"}) (async, rerun: 32) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f00000010c0)={0x5d5, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (rerun: 32) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000009dc0)={&(0x7f0000009d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000009d80)={&(0x7f0000009d40)={0x30, 0x3f7, 0x8, 0x70bd26, 0x25dfdbfd, {0x10, 0x7, './file0/../file0', './file0'}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x48010) (async, rerun: 32) close_range(r4, r6, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000009e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000009f00)={&(0x7f0000009e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000009ec0)={&(0x7f0000009e80)={0x1c, r7, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0xe8fd66708dcf5ac0) executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0xb09c1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x25a5, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) close(r0) executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x6, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x6, 0x0, 0x5, 0x0, 0x9}}) executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb1e9c000) r0 = fsopen(&(0x7f00000000c0)='hpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='\x92Gi\x81B}jv\b\x9d&e8\x0e\xd4\xf2\xec\xf3O\x00F\x97X\xe6\xc5\xf5{\x85b\x9e\xcf\xa4\x11\x88\x18:\xfb\xff\xad\xd0\x80)\x83GPbW\x11\x81\x88\xe5\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000440)='0\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@\v\x00\x00\x00\x00\x00\x00\x005\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00'/308, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv6/conf/syzkaller0/use_tempaddr\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='2\n', 0x2) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) madvise(&(0x7f0000185000/0x4000)=nil, 0x4000, 0xa) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000000140)=[{&(0x7f0000001bc0)=""/156, 0x9c}, {&(0x7f0000000000)=""/133, 0x85}], 0x2, &(0x7f0000000100)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000180)={0x1, 0x0, 0x8}) executing program 2: write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf350f4e, 0x200, 0x5, 0x200, 0xffeffffa, 0x0, 0x0, 0x2, 0x800}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x7d97, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/control/extensions/xu.0/bNumControls\x00', 0x0, 0x0) executing program 5: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) (async) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) (async) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) process_madvise(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="968a17a2f0f881769b9801ffb6fee4d2e3e8599161945d3046c65635059447dadbbe90a863038d4058467542a07e1bcdad148174c0822a204805e64d9e1b8ee45b7db5b500d9c99190dace62ff0d88edb2cc8c8399184b322001035703515bb0389894c90ece12e73ba3d600a61f5378eef1a8dd0cfaab36587c69d84dc7822ae76e106049d87ec413784ad41bfadbefd14b850f146d667b9529718479a78bf8b47d37966c8091a3", 0xa8}, {&(0x7f0000000140)="9f6986dde6528b87aa4d4c42b58bd596a40545ab49fd2ddb06bc22345575b2088dfea6dff9c6dc613fc676171b82d5cd914c5cc0febbe5f90dc714916aff4b9534e0b63d2590eb1c7a627764243e40efb3aa58e03a816594e624a6bc2693d700ad7c2800b355764ff5d1086ac0d658c4bc674fa3c25306f3176b420b71d3de906fc4a6be37c571af14bafbca74fdc9f00b8fe4f57ce3d3857396ffbfb01783e706be", 0xa2}, {&(0x7f0000000200)="45d44a4b8e5141749b0aada86d59ee2cc009da0d3eb4cfe99a00cd4440bce561d32c36bf6067cb4d6610bbf86cc2d4d83cbe88004161096012de2e558fb54f1f449a4faefba8b407fd33740aff8cddab7863f490fa", 0x55}, {&(0x7f0000000280)="1c5e04fde3d3597b7a63e4a95910bd4192216e29f356c20eb65ad36d5e615af4e0ac2021dfdf277771a81bb8f6fc0853db3ade59b0949e8ec98b10c84991769973a95c3b908ff2b53b76960fe3a4cf549f28aff75b56d6dabdd92e0f2dda024756088a2b5f0ed4eff2231972f49b848bce54ec4dbb6b53622df50ddf2c9a21b7441a46d45d854530468ee845e94d12f9ccf719c80f06e5e0d2927b4304", 0x9d}], 0x4, 0x13, 0x0) (async) process_madvise(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="968a17a2f0f881769b9801ffb6fee4d2e3e8599161945d3046c65635059447dadbbe90a863038d4058467542a07e1bcdad148174c0822a204805e64d9e1b8ee45b7db5b500d9c99190dace62ff0d88edb2cc8c8399184b322001035703515bb0389894c90ece12e73ba3d600a61f5378eef1a8dd0cfaab36587c69d84dc7822ae76e106049d87ec413784ad41bfadbefd14b850f146d667b9529718479a78bf8b47d37966c8091a3", 0xa8}, {&(0x7f0000000140)="9f6986dde6528b87aa4d4c42b58bd596a40545ab49fd2ddb06bc22345575b2088dfea6dff9c6dc613fc676171b82d5cd914c5cc0febbe5f90dc714916aff4b9534e0b63d2590eb1c7a627764243e40efb3aa58e03a816594e624a6bc2693d700ad7c2800b355764ff5d1086ac0d658c4bc674fa3c25306f3176b420b71d3de906fc4a6be37c571af14bafbca74fdc9f00b8fe4f57ce3d3857396ffbfb01783e706be", 0xa2}, {&(0x7f0000000200)="45d44a4b8e5141749b0aada86d59ee2cc009da0d3eb4cfe99a00cd4440bce561d32c36bf6067cb4d6610bbf86cc2d4d83cbe88004161096012de2e558fb54f1f449a4faefba8b407fd33740aff8cddab7863f490fa", 0x55}, {&(0x7f0000000280)="1c5e04fde3d3597b7a63e4a95910bd4192216e29f356c20eb65ad36d5e615af4e0ac2021dfdf277771a81bb8f6fc0853db3ade59b0949e8ec98b10c84991769973a95c3b908ff2b53b76960fe3a4cf549f28aff75b56d6dabdd92e0f2dda024756088a2b5f0ed4eff2231972f49b848bce54ec4dbb6b53622df50ddf2c9a21b7441a46d45d854530468ee845e94d12f9ccf719c80f06e5e0d2927b4304", 0x9d}], 0x4, 0x13, 0x0) r2 = timerfd_create(0x1, 0x80000) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000380)=0x2d3f0f13) (async) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000380)=0x2d3f0f13) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000440)=[{{r3, r4/1000+10000}, 0x7, 0x1, 0xfffffff7}, {{}, 0x17, 0x401, 0x6}, {{r5, r6/1000+10000}, 0x1, 0x200, 0x86}, {{0x77359400}, 0x14, 0x7, 0xb}, {{0x77359400}, 0x17, 0x1, 0x6}, {{}, 0xd, 0x8, 0x8a}], 0x90) (async) write$evdev(0xffffffffffffffff, &(0x7f0000000440)=[{{r3, r4/1000+10000}, 0x7, 0x1, 0xfffffff7}, {{}, 0x17, 0x401, 0x6}, {{r5, r6/1000+10000}, 0x1, 0x200, 0x86}, {{0x77359400}, 0x14, 0x7, 0xb}, {{0x77359400}, 0x17, 0x1, 0x6}, {{}, 0xd, 0x8, 0x8a}], 0x90) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002580), 0x400, 0x0) connect$inet(r11, &(0x7f00000025c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) fstat(r0, &(0x7f0000004b00)) (async) fstat(r0, &(0x7f0000004b00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000004f00)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000005000)=0xe8) syz_fuse_handle_req(r11, &(0x7f0000002600)="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", 0x2000, &(0x7f0000005280)={&(0x7f0000004600)={0x50, 0x0, 0x17, {0x7, 0x2d, 0xffffffff, 0x8006000, 0x1, 0x800, 0xee1, 0x80000000, 0x0, 0x0, 0x8, 0x8b1}}, &(0x7f0000004680)={0x18, 0x0, 0x9, {0x5}}, &(0x7f00000046c0)={0x18, 0xfffffffffffffff5, 0x23818d5b, {0xfffffffffffffff7}}, &(0x7f0000004700)={0x18, 0xfffffffffffffff5, 0x7, {0xfffffffa}}, &(0x7f0000004740)={0x18, 0xfffffffffffffffe, 0x2, {0x1000}}, &(0x7f0000004780)={0x28, 0x0, 0x0, {{0x5, 0xb, 0x2, r10}}}, &(0x7f00000047c0)={0x60, 0x0, 0xfffffffffffffff7, {{0x38f, 0x8, 0xdd, 0x7, 0x80000000, 0x7, 0x4, 0x6}}}, &(0x7f0000004840)={0x18, 0x0, 0x6, {0x2}}, &(0x7f0000004880)={0x14, 0x0, 0x1, {',}.:'}}, &(0x7f00000048c0)={0x20, 0x0, 0xffff, {0x0, 0x26}}, &(0x7f0000004900)={0x78, 0x0, 0x1, {0x7, 0xa, 0x0, {0x6, 0x8, 0x2a6, 0x9, 0x8, 0x0, 0x40, 0xbcdc, 0x24, 0x6000, 0x8, r8, r9, 0x9, 0xde}}}, &(0x7f0000004980)={0x90, 0x0, 0x336bc00000000000, {0x0, 0x2, 0x3e9d8a5d, 0x9, 0x1, 0x7, {0x4, 0x3, 0x7, 0x3, 0x2, 0x9, 0x6, 0x5, 0x800, 0x4000, 0x8, 0xffffffffffffffff, r9, 0x7, 0x8}}}, &(0x7f0000004a40)={0xa0, 0xffffffffffffffda, 0x1, [{0x5, 0x5, 0xa, 0x2, '/dev/fuse\x00'}, {0x1, 0xd, 0xa, 0x4, '/dev/fuse\x00'}, {0x0, 0x1, 0x22, 0x8, '/proc/sys/net/ipv4/tcp_syncookies\x00'}]}, &(0x7f0000004b80)={0x348, 0xffffffffffffffda, 0x7f, [{{0x0, 0x1, 0xd24b, 0x92ed, 0x2, 0xff, {0x0, 0x1, 0x4, 0x8, 0x40, 0x2, 0xffffffff, 0x4, 0x200, 0xa000, 0x5, r12, r9, 0xd4c, 0x10001}}, {0x5, 0x8, 0x3, 0xfffffff0, '^@['}}, {{0x0, 0x1, 0x3, 0x2, 0xfffffff8, 0x401, {0x3, 0x23, 0x5, 0x8000000000000001, 0xfff, 0x7fffffffffffffff, 0x30a, 0xffff3226, 0x0, 0xa000, 0x1, r8, r9, 0x9, 0x7}}, {0x4, 0x6, 0xa, 0x2, '/dev/vcsu\x00'}}, {{0x0, 0x3, 0x8000, 0x4, 0x6, 0x0, {0x5, 0x80000001, 0x5, 0x1, 0x3, 0xf9b, 0x286, 0x7, 0x3, 0xc000, 0x1, r8, r9, 0x6, 0x10}}, {0x4, 0x3, 0x9, 0x6, ':-+)&)[]\\'}}, {{0x2, 0x2, 0x7fffffff, 0x8, 0x80000001, 0x100, {0x5, 0x5, 0xf, 0x6180fe99, 0x2, 0x800, 0x5, 0x4, 0x1000, 0xd000, 0x6, 0x0, r9, 0xff3, 0x1000}}, {0x5, 0x6, 0x5, 0x8, 'C\'-&@'}}, {{0x6, 0x3, 0x79, 0x4, 0x7, 0x81, {0x3, 0x3, 0x6, 0x1, 0x6d, 0x3, 0x2, 0x7, 0x8, 0xc000, 0x7, r8, r9, 0x0, 0x8001}}, {0x0, 0xe1, 0xa, 0x7f, '/dev/vcsu\x00'}}]}, &(0x7f0000005040)={0xa0, 0x0, 0xe, {{0x2, 0x1, 0x4ff, 0x7, 0xffffffff, 0x5, {0x2, 0x2, 0x34f, 0x9, 0x797, 0xa, 0x0, 0x80000001, 0x1ff, 0xc000, 0x3, r13, r9, 0x9cd, 0x7fff}}, {0x0, 0x8}}}, &(0x7f0000005100)={0x20, 0x0, 0x9, {0x4, 0x4, 0x7f, 0xfffffff8}}, &(0x7f0000005140)={0x130, 0xfffffffffffffff5, 0x2, {0x8, 0x100, 0x0, '\x00', {0x10, 0x9d76, 0xffffffffffff0000, 0x3, r8, 0xffffffffffffffff, 0x12000, '\x00', 0x1000, 0x8000000000000000, 0x4d8d, 0x9, {0x4, 0x81}, {0x0, 0xb}, {0x5, 0x20}, {0x8, 0x7fffffff}, 0x1, 0x7, 0x9d1f, 0x8}}}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000005340), 0x200040, 0x0) (async) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000005340), 0x200040, 0x0) ioctl$PPPIOCNEWUNIT(r14, 0xc004743e, &(0x7f0000005380)) r15 = dup2(r11, r2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r15, 0x6, 0x16, &(0x7f00000053c0)=[@window={0x3, 0x7, 0x4}, @timestamp, @timestamp, @timestamp, @window={0x3, 0xa, 0x4}, @window={0x3, 0x450, 0x27}, @timestamp], 0x7) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r15, 0x89fa, &(0x7f0000005440)={'sit0\x00', &(0x7f0000005400)={@private2, @private=0xa010102, 0x18}}) ioctl$XFS_IOC_GETBMAP(r14, 0xc0205826, &(0x7f0000005480)={0x2, 0x7, 0x3, 0x6, 0x2}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000054c0)={r15}) recvfrom$inet(r11, &(0x7f0000005500)=""/233, 0xe9, 0x3, &(0x7f0000005600)={0x2, 0x4e21, @multicast2}, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000005640), 0x2, 0x0) (async) r16 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000005640), 0x2, 0x0) fsetxattr$trusted_overlay_origin(r16, &(0x7f0000005680), &(0x7f00000056c0), 0x2, 0x2) (async) fsetxattr$trusted_overlay_origin(r16, &(0x7f0000005680), &(0x7f00000056c0), 0x2, 0x2) connect$inet(r11, &(0x7f0000005700)={0x2, 0x4e20, @multicast2}, 0x10) r17 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_buf(r17, 0x0, 0x30b39934b7dacf76, &(0x7f0000005740)=""/210, &(0x7f0000005840)=0xd2) syz_genetlink_get_family_id$smc(&(0x7f00000058c0), r15) (async) r18 = syz_genetlink_get_family_id$smc(&(0x7f00000058c0), r15) sendmsg$SMC_PNETID_DEL(r11, &(0x7f0000005980)={&(0x7f0000005880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005940)={&(0x7f0000005900)={0x14, r18, 0x2, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000050) executing program 36: write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf350f4e, 0x200, 0x5, 0x200, 0xffeffffa, 0x0, 0x0, 0x2, 0x800}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x7d97, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/control/extensions/xu.0/bNumControls\x00', 0x0, 0x0) executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x8}, &(0x7f0000000100)=0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40800) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) (async) write(r0, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x8}, &(0x7f0000000100)=0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40800) (async) executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r2, 0x40480923, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xffffffdffffffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000200)={0x5, 0x800, 0x2}) (async) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000002000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) (async) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]}) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) (async) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000400)={"db516a4555048a44362f71d3c74bd20466ab29315ba37c837a25fe9d0ed41c13f35afafb7436880db448abd14020861a0438d2d906a494e630e441e6d4bacc47a0212ce279cb0c3f5dcaceb53503a67805ae8080de8584c197210d42b1e80b618d37e3aadf104bc63f7c1702a216d0ab1d8abd26c1937fa47f2992ca3c0c42deff4d54c7401de1982d6e8d69b335c618a5244e949abcd0ebecc7f18d97359ebf348123140ba911b8f107a7692b2908710a71060bb777f6b7b6c2895992702d6f78e209488bbaa2525e4c6d377f4ea69b843c38b1737b8e2cf7e2e4fc2f1556ad0be6038e51c2a462a2db757827a23be98595317c6e87e05759d5271da02933c0c34880f07c7c5d917f38621758f757bb8673bb163e7ca36bc6c99ab7d37526a2a0e04ad5afa5e883de40ef565142d4fe8a2be1c3fc9755da8b4d75e4d55251bc4574bdff73deed942d83cae89e14b2ff4308e62443c778d26287ae65689c08d22f8d11a1d2ccbbea106ab24561d8e455ade841dadec540268f07e926f15f605aa2691ff4611c9e31a3d81622738b22f02a0d69f282cb3fe3a293700cb7705499781fce54e10bd97d1015bd319112e6d590c1e28b5474a8ce61318405f2134c2f136c835cb46be9d77a9901aea07dbace1145ec4d811e5babb547d6d33e79537b2209f0bbb074b44da3e7dd711c700855790742bebda01b4ab002d474cdac5074890cc6d985e9cc379d1b03714a7a2f2b827208fba054b46a394590984df717eeb4336e53f8213fcd81fc4adb1ccda9b3bfc62717b9c2cad4847f3ac44ba1e9e9135f6d6efa8605853a94315df33abbae493072fcb7ad715b3ce7e7d4679e278d51ad4e3c29cd0bae01d45a75b03ba06e7e58be6c454e50350f0e07c1197eebd8b0a8e4b61066d2f56f3bd92a467879649274422599f603cf15e4beeadc3fd2c31257efe3be8f0b9dae7149a60f5de95947f9a0add966cc709f1e586f199c74730d746cc19ba03be84a7933261bc2be6abad19245ef331068000d643dbbe35bba1c660d2d6a62b6891942b08a090592f99f719d8b778160a015947575a7bb2f3cd79c1b4e67ce590c52576c009ed51d5ae68f177e517ca182fa267596e178eaa70e8cba93b542a613b7a67d10e7f4939b2aede5e1ce864d36b065f879f0727bb599c25579d95d256daffaf76266868b6f7f45dcdcf5dadd5e5b61b2d28627fa7ef7ca20ef79143ff0949ffe3fcbbf5aae010dc48db8cc38d2789c8b2debd7dd414fc82e6e112dd22f76ff655903ee7d7503916be04e66415e42e420ae7d9835bfd85074b604868a3053e0cd5dff8f3f15ccf97c32aa36616d245cd6b242173019e6599a727a9450dcdb5163ba47fdf2215b4f4e4b87dcc6cbf0349f25857b1c61d3d9c5f4618e65b340172fd7c8ddd486c7855890f9aa46581d8a4e68fb5d9e0a"}) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000001000)={0x1, 0x0, [{0x839}]}) (async) write$vga_arbiter(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='target '], 0x15) (async) r12 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r12, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r13}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "0000fb00"}, 0x10}}, 0x4000040) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x8}]}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000080)={[0x7, 0x7, 0xa, 0x4000000000000e52, 0x800000000001, 0x5459, 0x1041, 0x200200000006, 0x5, 0x400000001, 0x4, 0x100000000, 0x4, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000}) executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000280)={0x6, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x6, 0x0, 0x5, 0x0, 0x9}}) executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x1c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) (async) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) unshare(0x40080) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') (async) unshare(0x80) r2 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) executing program 7: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, &(0x7f0000000300)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x10, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x4004) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r3, 0x118, 0x4, 0x0, &(0x7f00000003c0)=0xffffffffffffffb2) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES8=r1, @ANYRES8=r1, @ANYRES64=r1], 0x30}, 0x1, 0x0, 0x0, 0x20008854}, 0x2000c000) executing program 7: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x93}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000040)={0x1, 0x3, 0x3, &(0x7f0000000000)={0xc, "91632209fa3400c07f19c2bb2925ad1e172604ff46daff96c5895854991bbff42a"}}) executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) executing program 6: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_proto_private(r1, 0x89a2, &(0x7f00000001c0)="d73a") setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x40000004, 0x0, 0x0, 0x2}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd15b67000fedbdf25250000000e0001006e6574ff7f0000698b0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c0001000000"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000c800) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgid(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2, r5}) sendmmsg$unix(r3, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000ac0d3c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r10, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$bt_sco(r10, &(0x7f0000001280), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000020) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000600), 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x12100) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000080), 0x3d) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x19, 0x0, &(0x7f00000002c0)="581f923965a9bd7021768d8e3f0ac7758aa95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, 0x3}, 0x50) executing program 5: setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8971, &(0x7f0000000180)={'dummy0\x00', @ifru_flags=0x1000}) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x5f1, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2c, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0x7b, 0x1, 0x7, 0x1, 0x1, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x61, 0x1, 0xd}}}}}]}}]}}, 0x0) executing program 6: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) unlink(&(0x7f0000000240)='./file0\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000300)="1143530120080000000037510800", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x3, r3, 0x1, 0xb2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000340)=[{0x6, 0x72, 0x0, 0x3}, {0x0, 0x4, 0x0, 0x2}, {0x9, 0xee, 0x9, 0x7}]}) bind$packet(r7, &(0x7f0000000040)={0x11, 0xf5, r3, 0x1, 0xf8, 0x6, @multicast}, 0x14) close_range(r8, 0xffffffffffffffff, 0x0) landlock_create_ruleset(&(0x7f0000000380)={0x1e28, 0x2, 0x2}, 0x30, 0x0) executing program 6: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r0, 0x127c, &(0x7f0000000240)={0x0, 0x1000000}) ioctl$SG_BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1ff}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001580)=@qipcrtr, 0x80, &(0x7f0000001680)=[{&(0x7f0000001600)=""/98, 0x62}], 0x1, &(0x7f00000016c0)=""/147, 0x93}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r7, 0x0, 0xa9, 0x1000, &(0x7f0000000240)="cac984ecc2006f89a86fed9161f306a9582fc727b4ebfeab0c87f201bbd4430c4e66fe9209cb108537af5f4dd28b46fb020892c17bc67a102d1c62e4b5a2bd3d71d09e276411ce1196deb136d465b02fbd88b048f9575e599c56fa545e6951bb3f4ba7b3f7da23e70cfb072aada7591e04f3dff0a7b79eef573230a351b40da6f791d9f0dcf5ef52769bd51dd604a89ab3ddbb0ed2ef02785378aeef21a68b00ae68b64dede0903de2", &(0x7f0000000380)=""/4096, 0x2, 0x0, 0x51, 0xda, &(0x7f0000001380)="de2923160fb0f41f5e6719e06d7ed67aa60cab1c85c379f415f5dc316da50470b30bfa8d964c536bc3d5152fba27d8aae3e50b010887760eaa8a07fc67bc81a1e08831d817e2c19d47c5aeebcd5d1acb0d", &(0x7f0000001400)="84845b654453a031ef090af7e081bc7d565db882d2a140a648717c478693c70fdcfff4cf85076bc772748926018c3478a11b270a0c51f964dc362c5c7992d3d201c96c3bc7cdc9cc66d3a10d6c26d8bff6243f933e6aa90cf4264370dd1b1c11373e78172ba58fe65cba6bbf3bd1333f90f8fde94c3aebd1ec282d2e81eea4b7fd8642f119397a6dd3d84a9ad475957fba316297d5d13951cb55dc250e063c4a32496ef30c12cc8c383895fe1a42499f6b9d8d0f6ef627dc4283fd995092331393eb2c7c0b17b30f3e14485c774bbb507fd32a883344abf4f6d3", 0x1, 0x0, 0x7c}, 0x50) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, r8, 0x331, 0x4, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) fcntl$setlease(r9, 0x400, 0x0) unlink(&(0x7f0000000040)='./file0\x00') setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0xd, 0x8563, 0x5}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d4}, 0x24044040) executing program 6: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfff}}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8e661481a584a3668a30723704cd729c86ec35e771a0f6ab599fd3000000000000000000", @ANYRES16=r6, @ANYBLOB="010102000000080000001900000008000300", @ANYRES32=r7, @ANYBLOB="04002400"], 0x20}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008005}, 0x20020040) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r8 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, &(0x7f0000000080)={'ip6erspan0\x00', {0x2, 0x0, @multicast1}}) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "df27e9e8019149b6", "c963635c314e079f00000085c828560c2d84b8145617573d317e0e7ff94f7660", "ca13e601", "000000a5130400"}, 0xfffffffffffffd67) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000580)=@gcm_256={{0x304}, "3ff0aa17546d45dd", "df279d352ab5d0880870f927f160d4d942367b664e0627227cc833d34a90072e", "b722b799", "f4a4103efa137028"}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @private0, 0x5}, 0x1c) r9 = syz_open_dev$radio(&(0x7f00000005c0), 0x2, 0x2) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x303}, "e79bf4efd038f3f2", "80223d477cd86b4f40f53647936d4b8bfd02f8326187a8fcab6d4d4c3525ae4d", "333f8916", "dac22d4b46ae3a8f"}, 0x38) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205648, &(0x7f0000000140)={0x0, 0x1, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa10902, 0x0, '\x00', @p_u8=0x0}}) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40012004, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000072, 0x0, 0x7ff}]}) executing program 6: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x2}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xffff7ff3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x6, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x6, 0x0, 0x5, 0x0, 0x9}}) executing program 8: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001640)={0x14, r1, 0x705, 0x70bd30, 0x25dfdbed}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4000810) executing program 7: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b0006000000009b7a000100e83ac55324dcd8cdde11b71f986ea0c28be9", 0x28, 0xfffffffffffffffe) r1 = io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x18, 0x2, 0x281}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000001040)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}], 0x2) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r2, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) executing program 8: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000540)={0x11, 0x5, r2}, 0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x0, 0x88a2}, @void, @eth={@multicast, @empty, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast1, @rand_addr=0x64010100}}}}}}, 0x2e) (async) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) (async) sendmsg$inet6(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) executing program 7: syz_emit_vhci(&(0x7f0000000900)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x3, 0xc8, 0xc9, 0xd2}}}, 0x8) socket$phonet_pipe(0x23, 0x5, 0x2) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 30, 9, 12, 12, 8, 3, 30, 8, 21, 3, 22, 30, 13, 3, 6, 19, 2, 30] detailed listing: executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x8}, &(0x7f0000000100)=0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40800) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) (async) write(r0, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x8}, &(0x7f0000000100)=0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40800) (async) executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r2, 0x40480923, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xffffffdffffffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000200)={0x5, 0x800, 0x2}) (async) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000002000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) (async) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]}) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) (async) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000001000)={0x1, 0x0, [{0x839}]}) (async) write$vga_arbiter(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='target '], 0x15) (async) r12 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r12, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r13}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "0000fb00"}, 0x10}}, 0x4000040) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x8}]}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000080)={[0x7, 0x7, 0xa, 0x4000000000000e52, 0x800000000001, 0x5459, 0x1041, 0x200200000006, 0x5, 0x400000001, 0x4, 0x100000000, 0x4, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000}) executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000280)={0x6, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x6, 0x0, 0x5, 0x0, 0x9}}) executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x1c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) (async) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) unshare(0x40080) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') (async) unshare(0x80) r2 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) executing program 7: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, &(0x7f0000000300)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x10, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x4004) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r3, 0x118, 0x4, 0x0, &(0x7f00000003c0)=0xffffffffffffffb2) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES8=r1, @ANYRES8=r1, @ANYRES64=r1], 0x30}, 0x1, 0x0, 0x0, 0x20008854}, 0x2000c000) executing program 7: r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x93}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000040)={0x1, 0x3, 0x3, &(0x7f0000000000)={0xc, "91632209fa3400c07f19c2bb2925ad1e172604ff46daff96c5895854991bbff42a"}}) executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) executing program 6: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_proto_private(r1, 0x89a2, &(0x7f00000001c0)="d73a") setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x40000004, 0x0, 0x0, 0x2}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd15b67000fedbdf25250000000e0001006e6574ff7f0000698b0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c0001000000"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000c800) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgid(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2, r5}) sendmmsg$unix(r3, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000ac0d3c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r10, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$bt_sco(r10, &(0x7f0000001280), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000020) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000600), 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x12100) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000080), 0x3d) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x19, 0x0, &(0x7f00000002c0)="581f923965a9bd7021768d8e3f0ac7758aa95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, 0x3}, 0x50) executing program 5: setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8971, &(0x7f0000000180)={'dummy0\x00', @ifru_flags=0x1000}) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x5f1, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2c, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0x7b, 0x1, 0x7, 0x1, 0x1, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x61, 0x1, 0xd}}}}}]}}]}}, 0x0) executing program 6: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) unlink(&(0x7f0000000240)='./file0\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000300)="1143530120080000000037510800", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x3, r3, 0x1, 0xb2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000340)=[{0x6, 0x72, 0x0, 0x3}, {0x0, 0x4, 0x0, 0x2}, {0x9, 0xee, 0x9, 0x7}]}) bind$packet(r7, &(0x7f0000000040)={0x11, 0xf5, r3, 0x1, 0xf8, 0x6, @multicast}, 0x14) close_range(r8, 0xffffffffffffffff, 0x0) landlock_create_ruleset(&(0x7f0000000380)={0x1e28, 0x2, 0x2}, 0x30, 0x0) executing program 6: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r0, 0x127c, &(0x7f0000000240)={0x0, 0x1000000}) ioctl$SG_BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1ff}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001580)=@qipcrtr, 0x80, &(0x7f0000001680)=[{&(0x7f0000001600)=""/98, 0x62}], 0x1, &(0x7f00000016c0)=""/147, 0x93}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r7, 0x0, 0xa9, 0x1000, &(0x7f0000000240)="cac984ecc2006f89a86fed9161f306a9582fc727b4ebfeab0c87f201bbd4430c4e66fe9209cb108537af5f4dd28b46fb020892c17bc67a102d1c62e4b5a2bd3d71d09e276411ce1196deb136d465b02fbd88b048f9575e599c56fa545e6951bb3f4ba7b3f7da23e70cfb072aada7591e04f3dff0a7b79eef573230a351b40da6f791d9f0dcf5ef52769bd51dd604a89ab3ddbb0ed2ef02785378aeef21a68b00ae68b64dede0903de2", &(0x7f0000000380)=""/4096, 0x2, 0x0, 0x51, 0xda, &(0x7f0000001380)="de2923160fb0f41f5e6719e06d7ed67aa60cab1c85c379f415f5dc316da50470b30bfa8d964c536bc3d5152fba27d8aae3e50b010887760eaa8a07fc67bc81a1e08831d817e2c19d47c5aeebcd5d1acb0d", &(0x7f0000001400)="84845b654453a031ef090af7e081bc7d565db882d2a140a648717c478693c70fdcfff4cf85076bc772748926018c3478a11b270a0c51f964dc362c5c7992d3d201c96c3bc7cdc9cc66d3a10d6c26d8bff6243f933e6aa90cf4264370dd1b1c11373e78172ba58fe65cba6bbf3bd1333f90f8fde94c3aebd1ec282d2e81eea4b7fd8642f119397a6dd3d84a9ad475957fba316297d5d13951cb55dc250e063c4a32496ef30c12cc8c383895fe1a42499f6b9d8d0f6ef627dc4283fd995092331393eb2c7c0b17b30f3e14485c774bbb507fd32a883344abf4f6d3", 0x1, 0x0, 0x7c}, 0x50) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, r8, 0x331, 0x4, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) fcntl$setlease(r9, 0x400, 0x0) unlink(&(0x7f0000000040)='./file0\x00') setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0xd, 0x8563, 0x5}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d4}, 0x24044040) executing program 6: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfff}}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8e661481a584a3668a30723704cd729c86ec35e771a0f6ab599fd3000000000000000000", @ANYRES16=r6, @ANYBLOB="010102000000080000001900000008000300", @ANYRES32=r7, @ANYBLOB="04002400"], 0x20}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008005}, 0x20020040) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r8 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, &(0x7f0000000080)={'ip6erspan0\x00', {0x2, 0x0, @multicast1}}) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "df27e9e8019149b6", "c963635c314e079f00000085c828560c2d84b8145617573d317e0e7ff94f7660", "ca13e601", "000000a5130400"}, 0xfffffffffffffd67) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000580)=@gcm_256={{0x304}, "3ff0aa17546d45dd", "df279d352ab5d0880870f927f160d4d942367b664e0627227cc833d34a90072e", "b722b799", "f4a4103efa137028"}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @private0, 0x5}, 0x1c) r9 = syz_open_dev$radio(&(0x7f00000005c0), 0x2, 0x2) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x303}, "e79bf4efd038f3f2", "80223d477cd86b4f40f53647936d4b8bfd02f8326187a8fcab6d4d4c3525ae4d", "333f8916", "dac22d4b46ae3a8f"}, 0x38) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205648, &(0x7f0000000140)={0x0, 0x1, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa10902, 0x0, '\x00', @p_u8=0x0}}) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40012004, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000072, 0x0, 0x7ff}]}) executing program 6: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x2}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xffff7ff3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x6, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x6, 0x0, 0x5, 0x0, 0x9}}) executing program 8: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001640)={0x14, r1, 0x705, 0x70bd30, 0x25dfdbed}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4000810) executing program 7: ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b0006000000009b7a000100e83ac55324dcd8cdde11b71f986ea0c28be9", 0x28, 0xfffffffffffffffe) r1 = io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x18, 0x2, 0x281}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000001040)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}], 0x2) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r2, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) executing program 8: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000540)={0x11, 0x5, r2}, 0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x0, 0x88a2}, @void, @eth={@multicast, @empty, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast1, @rand_addr=0x64010100}}}}}}, 0x2e) (async) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) (async) sendmsg$inet6(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) executing program 7: syz_emit_vhci(&(0x7f0000000900)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x3, 0xc8, 0xc9, 0xd2}}}, 0x8) socket$phonet_pipe(0x23, 0x5, 0x2) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 30, 30, 17, 16, 21, 11, 30, 26, 26, 2, 30, 11, 2, 20, 12, 40, 12, 30] detailed listing: executing program 4: r0 = userfaultfd(0x80001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="89d31800000000000000000000000000000018500000000000200000000000000082450d250ec31a3b58a3d0f8a00282717f7693"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000842000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000100000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x138, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "3565d957e99236e9e9cb2b8cf74926675c231af2d2290c4c"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x192}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) read(r0, &(0x7f0000000300)=""/172, 0xdc) executing program 4: r0 = getpgid(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = syz_pidfd_open(r0, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r3, &(0x7f0000000340)='./file7/file0/../file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xf, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000050601010200000000020000000000091300020073797a31000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x3}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="9d7e01496ca96cd4f94cabca82fca1855f657aa2e6089a7c824cf7e7196840b02c1758dfd5879855c813ca8f8218658e7a1b85726a3a3c21eaad7e926182550d6487afe9b815e11d2f21a96af7245493d1efabf61e81d23c598de9ff81baf869515f8ad85379ef59e953321c3230c5ab2bd1ce22d263148d8b73aa20aafacd4aba2113e25802c7353393df3d7b23af7a623ce8a568afe4e1abccdaca3eae1ad84d", @ANYRESHEX=0x0, @ANYRES64, @ANYRES32=r1, @ANYRES32=r4], 0x0, 0x19, 0x0, 0x0, 0x2e26eaf27be3145b, 0x6}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r7, @ANYRES16=r9, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x8040}, 0x4000010) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc601}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @local}) write$tun(r11, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000228290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r13 = fsopen(&(0x7f00000002c0)='omfs\x00', 0x0) r14 = fcntl$dupfd(r13, 0x0, r6) fsconfig$FSCONFIG_SET_STRING(r14, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) ioctl(r12, 0x890b, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') executing program 34: r0 = getpgid(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = syz_pidfd_open(r0, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r3, &(0x7f0000000340)='./file7/file0/../file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xf, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000050601010200000000020000000000091300020073797a31000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x3}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="9d7e01496ca96cd4f94cabca82fca1855f657aa2e6089a7c824cf7e7196840b02c1758dfd5879855c813ca8f8218658e7a1b85726a3a3c21eaad7e926182550d6487afe9b815e11d2f21a96af7245493d1efabf61e81d23c598de9ff81baf869515f8ad85379ef59e953321c3230c5ab2bd1ce22d263148d8b73aa20aafacd4aba2113e25802c7353393df3d7b23af7a623ce8a568afe4e1abccdaca3eae1ad84d", @ANYRESHEX=0x0, @ANYRES64, @ANYRES32=r1, @ANYRES32=r4], 0x0, 0x19, 0x0, 0x0, 0x2e26eaf27be3145b, 0x6}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r7, @ANYRES16=r9, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x8040}, 0x4000010) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc601}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @local}) write$tun(r11, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000228290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r13 = fsopen(&(0x7f00000002c0)='omfs\x00', 0x0) r14 = fcntl$dupfd(r13, 0x0, r6) fsconfig$FSCONFIG_SET_STRING(r14, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) ioctl(r12, 0x890b, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000800)=@newnexthop={0x3c, 0x68, 0x901, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x2, 0xd4}, {0x1, 0x2}]}]}, 0x3c}}, 0x0) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x1200000}) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) (async, rerun: 64) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/intel_xhci_usb_sw/uevent\x00', 0x1, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@local, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@delqdisc={0x84, 0x25, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x19, 0xfff2}, {0xf, 0xf}, {0xc, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @TCA_RATE={0x6, 0x5, {0x81, 0xd6}}, @TCA_RATE={0x6, 0x5, {0x6, 0xf2}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff}, @qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x5}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x80}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x20008080) write(r4, &(0x7f0000000140)="41a5cd", 0x3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r2, r6, 0x0) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) executing program 3: syz_emit_ethernet(0xaa, &(0x7f0000000300)={@broadcast, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x5e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600280000fe8000000000000000000000aa8903000000000000c910fe88000000000000000000000000010105020004010200"/79], 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600280000fe8000000000000000000000aa8903000000000000c910fe88000000000000000000000000010105020004010200"/79], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560f, &(0x7f00000002c0)={0xb}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname(r0, &(0x7f0000000040)=@alg, &(0x7f0000000240)=0x80) (async) getsockname(r0, &(0x7f0000000040)=@alg, &(0x7f0000000240)=0x80) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) (async) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x80) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) writev(r2, &(0x7f0000001c40)=[{&(0x7f0000000300)="5c1c4ec7ea747a61209302309e81698e938130a4f20205166885bc69f43d76e65747e6cad0c6f337392fdd59ac4ab4ab217c36157e853da8ea7a8a929c0a68cba97d06d3e62cb6803dbd408d3c27d92bce781c93f4bbb12d5702dd244f4c89e6fea6313c2c8689b7f48c8044f87e1b781e107ad7da1f3e213f2d78c0afa70c20adb2bda5188405ef2872dbbb6a7034746b98f8dfb175ba85257215ea1451c53522ca4eb6175448665de114f96be84be967662ce4c3593f521c78b877ee680982cbe8fcf7f893aa16b3e03702dc6b219f8068e9502d216f4df895681fd033fb0bca24c7a05be3e465f9b7a46d27", 0xed}, {&(0x7f0000000c40)="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", 0xe9f}], 0x2) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x3ffffc}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a00)=""/109, 0x6d}, {&(0x7f0000001a80)=""/4106, 0x100a}, {&(0x7f0000003740)=""/182, 0xb6}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000003900)=""/148, 0x94}, {&(0x7f00000000c0)=""/112, 0x70}, {0x0}, {&(0x7f0000000280)=""/135, 0x87}], 0x8}, 0x9}], 0x4, 0x40010000, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1fd4ea11", 0x4}, {&(0x7f0000000280)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000800)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)={'cmac(twofish-asm)\x00'}}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x35d}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r3, 0xa}, &(0x7f0000000140)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x7, @remote}, {0x1, @broadcast}, 0x4c, {0x2, 0x102, @local}, 'ip6gretap0\x00'}) setns(0xc9, 0x0) r5 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x2c00, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x3, 0x80a0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000300)={0x0, 0x3, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2003}, 0x50) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x14, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffd}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r7, 0xaea2, 0x9) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) executing program 35: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x14, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffd}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r7, 0xaea2, 0x9) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x6, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x6, 0x0, 0x5, 0x0, 0x9}}) executing program 2: getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) (async) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={r0, 0x3, 0xb1, "7fdfc4c7af150357fec92dacf305a18b0be61417b1047ea5746baa875d215d27f4277cdcbc460daae5a220a23dd80b309573c86571fb6a86b4a51b396e618ed6bfb79ea18c316c5c36574fc460a102cf786ea22478e0eca3eefdad4693413b94e8e25c7c9eccf03df20d2f2844869ca10290d5d81ce268cdac513e9b1508a0f0b2b1a64c6d3b52039b4408b2a78049176118971cad434392e8ac2528da63eb4c62678188770c8edb91297a99ab4e8cc9a0"}, 0xb9) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={r0, 0x7, 0x10, 0x8c, 0x9}, &(0x7f0000000180)=0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) (async) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000200)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010101}}, 0x24) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000240)={0x6, 'virt_wifi0\x00', {0x6}, 0xf9}) (async, rerun: 32) r3 = socket$inet_sctp(0x2, 0x4, 0x84) (rerun: 32) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000280)={0x1, [0x6]}, 0x6) (async) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) nanosleep(&(0x7f0000000340)={0x77359400}, &(0x7f0000000380)) (async) read(r1, &(0x7f00000003c0)=""/192, 0xc0) (async, rerun: 64) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000480)='\xe1*\x00', &(0x7f00000004c0)='./file0\x00', r1) (async, rerun: 64) ioctl$BTRFS_IOC_ENCODED_WRITE(r3, 0x40809440, &(0x7f0000000780)={&(0x7f0000000740)=[{&(0x7f0000000500)="216af7e0116c50f0535d8f03e236ac74c84ae52e262f64dee9d8096fbc2c08ca9c843d429a5b4d7cc81226959ae08e0848f030c7a128ee65e92463d31301cd8cc8476814739871da390985c2d6073f6a0a", 0x51}, {&(0x7f0000000580)="38f9481b69067ea9e459b1e9409c889b4ebee6739c7729b1ff8b3c77a136ba20f495c7e0d317c24be23675a9a9f9aac68347f4fa09678947857b5890169d5df13b3760f05c602ecac726e0df447428496732728ffac8994ef353ac5d59626e104bdf17efcd8cf634e66fc5549479d6556570ecab6b026a1c93b8573de540b79730b85bb1932afeeb66dc8adf554680ae7151ede8c7a4141e124755328d529c2237482a6b", 0xa4}, {&(0x7f0000000640)="962567722798927b858cf34340a7e2b4ccbd521101f35e420211a6df1855c558fa8a97dcc7ad37ac7305e5e7027f760a75ccf283578ffc25401213c9efa140f2133889dd3c4fdc326b5c890a4ae288f15410050ffdb50ccd04b6762946b355ebee9083597d0520769395eaaaef68d742d1ac7f9eb99be71cd1b2b0d67e9049ba6c43e738619f7c99a56c57fc49684b245127745ff042554836902418d422b583a5d857ddbbfbcff0f8890e841d2583e498cb8ef36e9e09e3090c9c67f2865369ca19ef91e6decc21706a6c2efd10b2c36f84c4b56b0aae20bb7c5a630c646d7b7df149f75ced2656e8b201c90bba5293039a09b56a", 0xf5}], 0x3, 0x3, 0x0, 0x10001, 0xffffffffffffffff, 0x7f, 0x0, 0x9}) (async, rerun: 64) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x18, 0x140e, 0x3ae234f10006620a, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) (async, rerun: 32) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000900), 0x422002, 0x0) (rerun: 32) unlinkat(r5, &(0x7f0000000940)='./file0\x00', 0x200) (async) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x6}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xa4, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4b88d4a3e8"}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "e5a47e"}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "cb95001802b19f137cf5531bceff"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "db69d06f11ad8116b9429b5703"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "17de2b0e3f5e853ca0c5d8a59e"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4041}, 0x4004) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x0, 0x0, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000b80), {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5fe3, 0x7, 0x8000, 0x0, 0x0, "d5ddea43a1a1a53017a85081e8e81de98802c1bd05785b0ecfb2681178f602a48595f6a67a647a86e555ac7ec2f4e43f0cbeadfb833f088aca38fbd412c21728"}}}, {{@arp={@multicast2, @rand_addr=0x64010101, 0xffffffff, 0xff, 0xc, 0xa, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x3800, 0x350a, 0x9, 0x400, 0x1, 0x7, 'pimreg\x00', 'gre0\x00', {}, {}, 0x0, 0x180}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x39}, @multicast1, 0x0, 0xff, 0x3, 0x4, {@empty, {[0x0, 0xff, 0x0, 0x50769a559f0ab11, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x3, 0x3, 0x3, 0x1, 0xace, 'team0\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x14}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x0, 0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f0000001000)={0x68, "bcced225262f3db989aebbc24f8f1509149c7cc13fe82998871ec0714d79b17fa8da83b670abace4b4b36cdc8f20151bc9ae616cb814df2102151f6a6f4554b9e832e4fcbb497882d00faabef1ff24395deb2057f49b6d03d80681a81b46df1c8621455794297f6d8f1393b6e459c85747a19dadd90dd361260a3e9cb44e7913"}) (async, rerun: 32) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f00000010c0)={0x5d5, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (rerun: 32) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000009dc0)={&(0x7f0000009d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000009d80)={&(0x7f0000009d40)={0x30, 0x3f7, 0x8, 0x70bd26, 0x25dfdbfd, {0x10, 0x7, './file0/../file0', './file0'}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x48010) (async, rerun: 32) close_range(r4, r6, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000009e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000009f00)={&(0x7f0000009e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000009ec0)={&(0x7f0000009e80)={0x1c, r7, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0xe8fd66708dcf5ac0) executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0xb09c1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x25a5, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) close(r0) executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x6, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x6, 0x0, 0x5, 0x0, 0x9}}) executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb1e9c000) r0 = fsopen(&(0x7f00000000c0)='hpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='\x92Gi\x81B}jv\b\x9d&e8\x0e\xd4\xf2\xec\xf3O\x00F\x97X\xe6\xc5\xf5{\x85b\x9e\xcf\xa4\x11\x88\x18:\xfb\xff\xad\xd0\x80)\x83GPbW\x11\x81\x88\xe5\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000440)='0\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@\v\x00\x00\x00\x00\x00\x00\x005\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00'/308, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv6/conf/syzkaller0/use_tempaddr\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='2\n', 0x2) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) madvise(&(0x7f0000185000/0x4000)=nil, 0x4000, 0xa) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000000140)=[{&(0x7f0000001bc0)=""/156, 0x9c}, {&(0x7f0000000000)=""/133, 0x85}], 0x2, &(0x7f0000000100)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000180)={0x1, 0x0, 0x8}) executing program 2: write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf350f4e, 0x200, 0x5, 0x200, 0xffeffffa, 0x0, 0x0, 0x2, 0x800}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x7d97, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/control/extensions/xu.0/bNumControls\x00', 0x0, 0x0) executing program 5: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) (async) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) (async) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) process_madvise(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="968a17a2f0f881769b9801ffb6fee4d2e3e8599161945d3046c65635059447dadbbe90a863038d4058467542a07e1bcdad148174c0822a204805e64d9e1b8ee45b7db5b500d9c99190dace62ff0d88edb2cc8c8399184b322001035703515bb0389894c90ece12e73ba3d600a61f5378eef1a8dd0cfaab36587c69d84dc7822ae76e106049d87ec413784ad41bfadbefd14b850f146d667b9529718479a78bf8b47d37966c8091a3", 0xa8}, {&(0x7f0000000140)="9f6986dde6528b87aa4d4c42b58bd596a40545ab49fd2ddb06bc22345575b2088dfea6dff9c6dc613fc676171b82d5cd914c5cc0febbe5f90dc714916aff4b9534e0b63d2590eb1c7a627764243e40efb3aa58e03a816594e624a6bc2693d700ad7c2800b355764ff5d1086ac0d658c4bc674fa3c25306f3176b420b71d3de906fc4a6be37c571af14bafbca74fdc9f00b8fe4f57ce3d3857396ffbfb01783e706be", 0xa2}, {&(0x7f0000000200)="45d44a4b8e5141749b0aada86d59ee2cc009da0d3eb4cfe99a00cd4440bce561d32c36bf6067cb4d6610bbf86cc2d4d83cbe88004161096012de2e558fb54f1f449a4faefba8b407fd33740aff8cddab7863f490fa", 0x55}, {&(0x7f0000000280)="1c5e04fde3d3597b7a63e4a95910bd4192216e29f356c20eb65ad36d5e615af4e0ac2021dfdf277771a81bb8f6fc0853db3ade59b0949e8ec98b10c84991769973a95c3b908ff2b53b76960fe3a4cf549f28aff75b56d6dabdd92e0f2dda024756088a2b5f0ed4eff2231972f49b848bce54ec4dbb6b53622df50ddf2c9a21b7441a46d45d854530468ee845e94d12f9ccf719c80f06e5e0d2927b4304", 0x9d}], 0x4, 0x13, 0x0) (async) process_madvise(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="968a17a2f0f881769b9801ffb6fee4d2e3e8599161945d3046c65635059447dadbbe90a863038d4058467542a07e1bcdad148174c0822a204805e64d9e1b8ee45b7db5b500d9c99190dace62ff0d88edb2cc8c8399184b322001035703515bb0389894c90ece12e73ba3d600a61f5378eef1a8dd0cfaab36587c69d84dc7822ae76e106049d87ec413784ad41bfadbefd14b850f146d667b9529718479a78bf8b47d37966c8091a3", 0xa8}, {&(0x7f0000000140)="9f6986dde6528b87aa4d4c42b58bd596a40545ab49fd2ddb06bc22345575b2088dfea6dff9c6dc613fc676171b82d5cd914c5cc0febbe5f90dc714916aff4b9534e0b63d2590eb1c7a627764243e40efb3aa58e03a816594e624a6bc2693d700ad7c2800b355764ff5d1086ac0d658c4bc674fa3c25306f3176b420b71d3de906fc4a6be37c571af14bafbca74fdc9f00b8fe4f57ce3d3857396ffbfb01783e706be", 0xa2}, {&(0x7f0000000200)="45d44a4b8e5141749b0aada86d59ee2cc009da0d3eb4cfe99a00cd4440bce561d32c36bf6067cb4d6610bbf86cc2d4d83cbe88004161096012de2e558fb54f1f449a4faefba8b407fd33740aff8cddab7863f490fa", 0x55}, {&(0x7f0000000280)="1c5e04fde3d3597b7a63e4a95910bd4192216e29f356c20eb65ad36d5e615af4e0ac2021dfdf277771a81bb8f6fc0853db3ade59b0949e8ec98b10c84991769973a95c3b908ff2b53b76960fe3a4cf549f28aff75b56d6dabdd92e0f2dda024756088a2b5f0ed4eff2231972f49b848bce54ec4dbb6b53622df50ddf2c9a21b7441a46d45d854530468ee845e94d12f9ccf719c80f06e5e0d2927b4304", 0x9d}], 0x4, 0x13, 0x0) r2 = timerfd_create(0x1, 0x80000) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000380)=0x2d3f0f13) (async) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000380)=0x2d3f0f13) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000440)=[{{r3, r4/1000+10000}, 0x7, 0x1, 0xfffffff7}, {{}, 0x17, 0x401, 0x6}, {{r5, r6/1000+10000}, 0x1, 0x200, 0x86}, {{0x77359400}, 0x14, 0x7, 0xb}, {{0x77359400}, 0x17, 0x1, 0x6}, {{}, 0xd, 0x8, 0x8a}], 0x90) (async) write$evdev(0xffffffffffffffff, &(0x7f0000000440)=[{{r3, r4/1000+10000}, 0x7, 0x1, 0xfffffff7}, {{}, 0x17, 0x401, 0x6}, {{r5, r6/1000+10000}, 0x1, 0x200, 0x86}, {{0x77359400}, 0x14, 0x7, 0xb}, {{0x77359400}, 0x17, 0x1, 0x6}, {{}, 0xd, 0x8, 0x8a}], 0x90) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002580), 0x400, 0x0) connect$inet(r11, &(0x7f00000025c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) fstat(r0, &(0x7f0000004b00)) (async) fstat(r0, &(0x7f0000004b00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000004f00)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000005000)=0xe8) syz_fuse_handle_req(r11, &(0x7f0000002600)="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", 0x2000, &(0x7f0000005280)={&(0x7f0000004600)={0x50, 0x0, 0x17, {0x7, 0x2d, 0xffffffff, 0x8006000, 0x1, 0x800, 0xee1, 0x80000000, 0x0, 0x0, 0x8, 0x8b1}}, &(0x7f0000004680)={0x18, 0x0, 0x9, {0x5}}, &(0x7f00000046c0)={0x18, 0xfffffffffffffff5, 0x23818d5b, {0xfffffffffffffff7}}, &(0x7f0000004700)={0x18, 0xfffffffffffffff5, 0x7, {0xfffffffa}}, &(0x7f0000004740)={0x18, 0xfffffffffffffffe, 0x2, {0x1000}}, &(0x7f0000004780)={0x28, 0x0, 0x0, {{0x5, 0xb, 0x2, r10}}}, &(0x7f00000047c0)={0x60, 0x0, 0xfffffffffffffff7, {{0x38f, 0x8, 0xdd, 0x7, 0x80000000, 0x7, 0x4, 0x6}}}, &(0x7f0000004840)={0x18, 0x0, 0x6, {0x2}}, &(0x7f0000004880)={0x14, 0x0, 0x1, {',}.:'}}, &(0x7f00000048c0)={0x20, 0x0, 0xffff, {0x0, 0x26}}, &(0x7f0000004900)={0x78, 0x0, 0x1, {0x7, 0xa, 0x0, {0x6, 0x8, 0x2a6, 0x9, 0x8, 0x0, 0x40, 0xbcdc, 0x24, 0x6000, 0x8, r8, r9, 0x9, 0xde}}}, &(0x7f0000004980)={0x90, 0x0, 0x336bc00000000000, {0x0, 0x2, 0x3e9d8a5d, 0x9, 0x1, 0x7, {0x4, 0x3, 0x7, 0x3, 0x2, 0x9, 0x6, 0x5, 0x800, 0x4000, 0x8, 0xffffffffffffffff, r9, 0x7, 0x8}}}, &(0x7f0000004a40)={0xa0, 0xffffffffffffffda, 0x1, [{0x5, 0x5, 0xa, 0x2, '/dev/fuse\x00'}, {0x1, 0xd, 0xa, 0x4, '/dev/fuse\x00'}, {0x0, 0x1, 0x22, 0x8, '/proc/sys/net/ipv4/tcp_syncookies\x00'}]}, &(0x7f0000004b80)={0x348, 0xffffffffffffffda, 0x7f, [{{0x0, 0x1, 0xd24b, 0x92ed, 0x2, 0xff, {0x0, 0x1, 0x4, 0x8, 0x40, 0x2, 0xffffffff, 0x4, 0x200, 0xa000, 0x5, r12, r9, 0xd4c, 0x10001}}, {0x5, 0x8, 0x3, 0xfffffff0, '^@['}}, {{0x0, 0x1, 0x3, 0x2, 0xfffffff8, 0x401, {0x3, 0x23, 0x5, 0x8000000000000001, 0xfff, 0x7fffffffffffffff, 0x30a, 0xffff3226, 0x0, 0xa000, 0x1, r8, r9, 0x9, 0x7}}, {0x4, 0x6, 0xa, 0x2, '/dev/vcsu\x00'}}, {{0x0, 0x3, 0x8000, 0x4, 0x6, 0x0, {0x5, 0x80000001, 0x5, 0x1, 0x3, 0xf9b, 0x286, 0x7, 0x3, 0xc000, 0x1, r8, r9, 0x6, 0x10}}, {0x4, 0x3, 0x9, 0x6, ':-+)&)[]\\'}}, {{0x2, 0x2, 0x7fffffff, 0x8, 0x80000001, 0x100, {0x5, 0x5, 0xf, 0x6180fe99, 0x2, 0x800, 0x5, 0x4, 0x1000, 0xd000, 0x6, 0x0, r9, 0xff3, 0x1000}}, {0x5, 0x6, 0x5, 0x8, 'C\'-&@'}}, {{0x6, 0x3, 0x79, 0x4, 0x7, 0x81, {0x3, 0x3, 0x6, 0x1, 0x6d, 0x3, 0x2, 0x7, 0x8, 0xc000, 0x7, r8, r9, 0x0, 0x8001}}, {0x0, 0xe1, 0xa, 0x7f, '/dev/vcsu\x00'}}]}, &(0x7f0000005040)={0xa0, 0x0, 0xe, {{0x2, 0x1, 0x4ff, 0x7, 0xffffffff, 0x5, {0x2, 0x2, 0x34f, 0x9, 0x797, 0xa, 0x0, 0x80000001, 0x1ff, 0xc000, 0x3, r13, r9, 0x9cd, 0x7fff}}, {0x0, 0x8}}}, &(0x7f0000005100)={0x20, 0x0, 0x9, {0x4, 0x4, 0x7f, 0xfffffff8}}, &(0x7f0000005140)={0x130, 0xfffffffffffffff5, 0x2, {0x8, 0x100, 0x0, '\x00', {0x10, 0x9d76, 0xffffffffffff0000, 0x3, r8, 0xffffffffffffffff, 0x12000, '\x00', 0x1000, 0x8000000000000000, 0x4d8d, 0x9, {0x4, 0x81}, {0x0, 0xb}, {0x5, 0x20}, {0x8, 0x7fffffff}, 0x1, 0x7, 0x9d1f, 0x8}}}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000005340), 0x200040, 0x0) (async) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000005340), 0x200040, 0x0) ioctl$PPPIOCNEWUNIT(r14, 0xc004743e, &(0x7f0000005380)) r15 = dup2(r11, r2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r15, 0x6, 0x16, &(0x7f00000053c0)=[@window={0x3, 0x7, 0x4}, @timestamp, @timestamp, @timestamp, @window={0x3, 0xa, 0x4}, @window={0x3, 0x450, 0x27}, @timestamp], 0x7) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r15, 0x89fa, &(0x7f0000005440)={'sit0\x00', &(0x7f0000005400)={@private2, @private=0xa010102, 0x18}}) ioctl$XFS_IOC_GETBMAP(r14, 0xc0205826, &(0x7f0000005480)={0x2, 0x7, 0x3, 0x6, 0x2}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000054c0)={r15}) recvfrom$inet(r11, &(0x7f0000005500)=""/233, 0xe9, 0x3, &(0x7f0000005600)={0x2, 0x4e21, @multicast2}, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000005640), 0x2, 0x0) (async) r16 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000005640), 0x2, 0x0) fsetxattr$trusted_overlay_origin(r16, &(0x7f0000005680), &(0x7f00000056c0), 0x2, 0x2) (async) fsetxattr$trusted_overlay_origin(r16, &(0x7f0000005680), &(0x7f00000056c0), 0x2, 0x2) connect$inet(r11, &(0x7f0000005700)={0x2, 0x4e20, @multicast2}, 0x10) r17 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_buf(r17, 0x0, 0x30b39934b7dacf76, &(0x7f0000005740)=""/210, &(0x7f0000005840)=0xd2) syz_genetlink_get_family_id$smc(&(0x7f00000058c0), r15) (async) r18 = syz_genetlink_get_family_id$smc(&(0x7f00000058c0), r15) sendmsg$SMC_PNETID_DEL(r11, &(0x7f0000005980)={&(0x7f0000005880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005940)={&(0x7f0000005900)={0x14, r18, 0x2, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000050) executing program 36: write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf350f4e, 0x200, 0x5, 0x200, 0xffeffffa, 0x0, 0x0, 0x2, 0x800}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x7d97, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/control/extensions/xu.0/bNumControls\x00', 0x0, 0x0) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout bisect: the chunk can be dropped bisect: split chunks (needed=true): <18> bisect: split chunk #0 of len 18 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 2, 30, 11, 2, 20, 12, 40, 12, 30] detailed listing: executing program 35: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x14, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffd}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r7, 0xaea2, 0x9) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x6, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x6, 0x0, 0x5, 0x0, 0x9}}) executing program 2: getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) (async) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={r0, 0x3, 0xb1, "7fdfc4c7af150357fec92dacf305a18b0be61417b1047ea5746baa875d215d27f4277cdcbc460daae5a220a23dd80b309573c86571fb6a86b4a51b396e618ed6bfb79ea18c316c5c36574fc460a102cf786ea22478e0eca3eefdad4693413b94e8e25c7c9eccf03df20d2f2844869ca10290d5d81ce268cdac513e9b1508a0f0b2b1a64c6d3b52039b4408b2a78049176118971cad434392e8ac2528da63eb4c62678188770c8edb91297a99ab4e8cc9a0"}, 0xb9) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={r0, 0x7, 0x10, 0x8c, 0x9}, &(0x7f0000000180)=0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) (async) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000200)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010101}}, 0x24) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000240)={0x6, 'virt_wifi0\x00', {0x6}, 0xf9}) (async, rerun: 32) r3 = socket$inet_sctp(0x2, 0x4, 0x84) (rerun: 32) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000280)={0x1, [0x6]}, 0x6) (async) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) nanosleep(&(0x7f0000000340)={0x77359400}, &(0x7f0000000380)) (async) read(r1, &(0x7f00000003c0)=""/192, 0xc0) (async, rerun: 64) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000480)='\xe1*\x00', &(0x7f00000004c0)='./file0\x00', r1) (async, rerun: 64) ioctl$BTRFS_IOC_ENCODED_WRITE(r3, 0x40809440, &(0x7f0000000780)={&(0x7f0000000740)=[{&(0x7f0000000500)="216af7e0116c50f0535d8f03e236ac74c84ae52e262f64dee9d8096fbc2c08ca9c843d429a5b4d7cc81226959ae08e0848f030c7a128ee65e92463d31301cd8cc8476814739871da390985c2d6073f6a0a", 0x51}, {&(0x7f0000000580)="38f9481b69067ea9e459b1e9409c889b4ebee6739c7729b1ff8b3c77a136ba20f495c7e0d317c24be23675a9a9f9aac68347f4fa09678947857b5890169d5df13b3760f05c602ecac726e0df447428496732728ffac8994ef353ac5d59626e104bdf17efcd8cf634e66fc5549479d6556570ecab6b026a1c93b8573de540b79730b85bb1932afeeb66dc8adf554680ae7151ede8c7a4141e124755328d529c2237482a6b", 0xa4}, {&(0x7f0000000640)="962567722798927b858cf34340a7e2b4ccbd521101f35e420211a6df1855c558fa8a97dcc7ad37ac7305e5e7027f760a75ccf283578ffc25401213c9efa140f2133889dd3c4fdc326b5c890a4ae288f15410050ffdb50ccd04b6762946b355ebee9083597d0520769395eaaaef68d742d1ac7f9eb99be71cd1b2b0d67e9049ba6c43e738619f7c99a56c57fc49684b245127745ff042554836902418d422b583a5d857ddbbfbcff0f8890e841d2583e498cb8ef36e9e09e3090c9c67f2865369ca19ef91e6decc21706a6c2efd10b2c36f84c4b56b0aae20bb7c5a630c646d7b7df149f75ced2656e8b201c90bba5293039a09b56a", 0xf5}], 0x3, 0x3, 0x0, 0x10001, 0xffffffffffffffff, 0x7f, 0x0, 0x9}) (async, rerun: 64) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x18, 0x140e, 0x3ae234f10006620a, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) (async, rerun: 32) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000900), 0x422002, 0x0) (rerun: 32) unlinkat(r5, &(0x7f0000000940)='./file0\x00', 0x200) (async) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x6}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xa4, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4b88d4a3e8"}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "e5a47e"}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "cb95001802b19f137cf5531bceff"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "db69d06f11ad8116b9429b5703"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "17de2b0e3f5e853ca0c5d8a59e"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4041}, 0x4004) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x0, 0x0, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000b80), {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5fe3, 0x7, 0x8000, 0x0, 0x0, "d5ddea43a1a1a53017a85081e8e81de98802c1bd05785b0ecfb2681178f602a48595f6a67a647a86e555ac7ec2f4e43f0cbeadfb833f088aca38fbd412c21728"}}}, {{@arp={@multicast2, @rand_addr=0x64010101, 0xffffffff, 0xff, 0xc, 0xa, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x3800, 0x350a, 0x9, 0x400, 0x1, 0x7, 'pimreg\x00', 'gre0\x00', {}, {}, 0x0, 0x180}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x39}, @multicast1, 0x0, 0xff, 0x3, 0x4, {@empty, {[0x0, 0xff, 0x0, 0x50769a559f0ab11, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x3, 0x3, 0x3, 0x1, 0xace, 'team0\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x14}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x0, 0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f0000001000)={0x68, "bcced225262f3db989aebbc24f8f1509149c7cc13fe82998871ec0714d79b17fa8da83b670abace4b4b36cdc8f20151bc9ae616cb814df2102151f6a6f4554b9e832e4fcbb497882d00faabef1ff24395deb2057f49b6d03d80681a81b46df1c8621455794297f6d8f1393b6e459c85747a19dadd90dd361260a3e9cb44e7913"}) (async, rerun: 32) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f00000010c0)={0x5d5, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (rerun: 32) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000009dc0)={&(0x7f0000009d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000009d80)={&(0x7f0000009d40)={0x30, 0x3f7, 0x8, 0x70bd26, 0x25dfdbfd, {0x10, 0x7, './file0/../file0', './file0'}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x48010) (async, rerun: 32) close_range(r4, r6, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000009e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000009f00)={&(0x7f0000009e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000009ec0)={&(0x7f0000009e80)={0x1c, r7, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0xe8fd66708dcf5ac0) executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0xb09c1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x25a5, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) close(r0) executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x6, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x6, 0x0, 0x5, 0x0, 0x9}}) executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb1e9c000) r0 = fsopen(&(0x7f00000000c0)='hpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='\x92Gi\x81B}jv\b\x9d&e8\x0e\xd4\xf2\xec\xf3O\x00F\x97X\xe6\xc5\xf5{\x85b\x9e\xcf\xa4\x11\x88\x18:\xfb\xff\xad\xd0\x80)\x83GPbW\x11\x81\x88\xe5\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000440)='0\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@\v\x00\x00\x00\x00\x00\x00\x005\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00'/308, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv6/conf/syzkaller0/use_tempaddr\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='2\n', 0x2) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) madvise(&(0x7f0000185000/0x4000)=nil, 0x4000, 0xa) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000000140)=[{&(0x7f0000001bc0)=""/156, 0x9c}, {&(0x7f0000000000)=""/133, 0x85}], 0x2, &(0x7f0000000100)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000180)={0x1, 0x0, 0x8}) executing program 2: write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf350f4e, 0x200, 0x5, 0x200, 0xffeffffa, 0x0, 0x0, 0x2, 0x800}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x7d97, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/control/extensions/xu.0/bNumControls\x00', 0x0, 0x0) executing program 5: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) (async) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) (async) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) process_madvise(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="968a17a2f0f881769b9801ffb6fee4d2e3e8599161945d3046c65635059447dadbbe90a863038d4058467542a07e1bcdad148174c0822a204805e64d9e1b8ee45b7db5b500d9c99190dace62ff0d88edb2cc8c8399184b322001035703515bb0389894c90ece12e73ba3d600a61f5378eef1a8dd0cfaab36587c69d84dc7822ae76e106049d87ec413784ad41bfadbefd14b850f146d667b9529718479a78bf8b47d37966c8091a3", 0xa8}, {&(0x7f0000000140)="9f6986dde6528b87aa4d4c42b58bd596a40545ab49fd2ddb06bc22345575b2088dfea6dff9c6dc613fc676171b82d5cd914c5cc0febbe5f90dc714916aff4b9534e0b63d2590eb1c7a627764243e40efb3aa58e03a816594e624a6bc2693d700ad7c2800b355764ff5d1086ac0d658c4bc674fa3c25306f3176b420b71d3de906fc4a6be37c571af14bafbca74fdc9f00b8fe4f57ce3d3857396ffbfb01783e706be", 0xa2}, {&(0x7f0000000200)="45d44a4b8e5141749b0aada86d59ee2cc009da0d3eb4cfe99a00cd4440bce561d32c36bf6067cb4d6610bbf86cc2d4d83cbe88004161096012de2e558fb54f1f449a4faefba8b407fd33740aff8cddab7863f490fa", 0x55}, {&(0x7f0000000280)="1c5e04fde3d3597b7a63e4a95910bd4192216e29f356c20eb65ad36d5e615af4e0ac2021dfdf277771a81bb8f6fc0853db3ade59b0949e8ec98b10c84991769973a95c3b908ff2b53b76960fe3a4cf549f28aff75b56d6dabdd92e0f2dda024756088a2b5f0ed4eff2231972f49b848bce54ec4dbb6b53622df50ddf2c9a21b7441a46d45d854530468ee845e94d12f9ccf719c80f06e5e0d2927b4304", 0x9d}], 0x4, 0x13, 0x0) (async) process_madvise(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="968a17a2f0f881769b9801ffb6fee4d2e3e8599161945d3046c65635059447dadbbe90a863038d4058467542a07e1bcdad148174c0822a204805e64d9e1b8ee45b7db5b500d9c99190dace62ff0d88edb2cc8c8399184b322001035703515bb0389894c90ece12e73ba3d600a61f5378eef1a8dd0cfaab36587c69d84dc7822ae76e106049d87ec413784ad41bfadbefd14b850f146d667b9529718479a78bf8b47d37966c8091a3", 0xa8}, {&(0x7f0000000140)="9f6986dde6528b87aa4d4c42b58bd596a40545ab49fd2ddb06bc22345575b2088dfea6dff9c6dc613fc676171b82d5cd914c5cc0febbe5f90dc714916aff4b9534e0b63d2590eb1c7a627764243e40efb3aa58e03a816594e624a6bc2693d700ad7c2800b355764ff5d1086ac0d658c4bc674fa3c25306f3176b420b71d3de906fc4a6be37c571af14bafbca74fdc9f00b8fe4f57ce3d3857396ffbfb01783e706be", 0xa2}, {&(0x7f0000000200)="45d44a4b8e5141749b0aada86d59ee2cc009da0d3eb4cfe99a00cd4440bce561d32c36bf6067cb4d6610bbf86cc2d4d83cbe88004161096012de2e558fb54f1f449a4faefba8b407fd33740aff8cddab7863f490fa", 0x55}, {&(0x7f0000000280)="1c5e04fde3d3597b7a63e4a95910bd4192216e29f356c20eb65ad36d5e615af4e0ac2021dfdf277771a81bb8f6fc0853db3ade59b0949e8ec98b10c84991769973a95c3b908ff2b53b76960fe3a4cf549f28aff75b56d6dabdd92e0f2dda024756088a2b5f0ed4eff2231972f49b848bce54ec4dbb6b53622df50ddf2c9a21b7441a46d45d854530468ee845e94d12f9ccf719c80f06e5e0d2927b4304", 0x9d}], 0x4, 0x13, 0x0) r2 = timerfd_create(0x1, 0x80000) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000380)=0x2d3f0f13) (async) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000380)=0x2d3f0f13) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000440)=[{{r3, r4/1000+10000}, 0x7, 0x1, 0xfffffff7}, {{}, 0x17, 0x401, 0x6}, {{r5, r6/1000+10000}, 0x1, 0x200, 0x86}, {{0x77359400}, 0x14, 0x7, 0xb}, {{0x77359400}, 0x17, 0x1, 0x6}, {{}, 0xd, 0x8, 0x8a}], 0x90) (async) write$evdev(0xffffffffffffffff, &(0x7f0000000440)=[{{r3, r4/1000+10000}, 0x7, 0x1, 0xfffffff7}, {{}, 0x17, 0x401, 0x6}, {{r5, r6/1000+10000}, 0x1, 0x200, 0x86}, {{0x77359400}, 0x14, 0x7, 0xb}, {{0x77359400}, 0x17, 0x1, 0x6}, {{}, 0xd, 0x8, 0x8a}], 0x90) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002580), 0x400, 0x0) connect$inet(r11, &(0x7f00000025c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) fstat(r0, &(0x7f0000004b00)) (async) fstat(r0, &(0x7f0000004b00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000004f00)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000005000)=0xe8) syz_fuse_handle_req(r11, &(0x7f0000002600)="88a173e49bb907b188fddd366a01192f524943add09e34d15971b44a137fd70831067fad0db8f34160f97997be5c32cf778f948c62a5ec85e7e23f6b0373557232c948411b99d64effead07d72df80e845dda1c839d54f8f7302ce06b43a9a52132541772ffb766d64f6c4349f58be49cf8c5a43b95e09a0618ed61c1f0c6f885f7841716aaa919f9f142238814da93530040e457cbd4f402f0d853037fdd3cdde95548b4d286bc7e111a83c970209171b66134db6db9ec56bbb6f4046f38338b2e2ddb664703b3d0f8c6f9882c97a388620d19e7ccc341c30927f92292ea54f577e65cddd294ee94d3c2223d3bf76ac507f5429cf573af45988505627ea4ffafe3ab8bdb02e7af05d81954136b17bed007d3df86f690df4fe4369319898f7270e7fe4656515b87ba6b6f7f97b5a0ebf4e1b5391a7dab00d0970005f7791efae137c43c8b2a413c99a4d6616dafc15d2405a3f6e71cc74560334a17c21523cf72388ed69a546725af31b54fad8c854348eb5c1268ce0ecab403d7d5bf5bfbb93e3917902664e3b5cfbd816669e0ccaa2d1e2e4c3c3d1a3bd6d1032bce41f48f885b8ca498a5d89e5b54795ffc1af02ba5a87dbb502ed4821cf304f2dceaa12350a93d20b469a44c1d9b4023ef14652ba1819ec7568d6bac0aaf8ee78a7694c839e179692ba48f24215831e0403027d40748d2e72d9a00e7cbe3058aaca053283afdff49da6269a020dd7c08c7e8d2ed4765aaa484bcd1b2780ce8cee13537fa5c295a62ef2ad40efdff3dece4bd7272dfb65c49a09f227640ed6d47bfa909baa70a8960ba3eb3cdd0788bd2cd54381fc8ccde51b3a19d635500794256eaf8a9d74b43eda28797dfc54e06a0c7e3a818f416636be07da18cccca766687aafd1863b0e63cedf7f224ca4b9d53cb7278e3323771edba853d4223e3b4319d9f47ffc6c1a24ff5d991fa2a83d8ea59b64078dd62781031edaedfce7834e49395b0116df9cfe0bb1785aac179365ee858df4e1c265d68c6a503ba64fb0d0214a60ceb2335a8b571ff9755ad5cd306fc6519f7d87ad5d1250098922509bb45601d7cf5cd6c8197b9a4467f08d676cefadd31c4de9c22daa7845ec05bd7c17068001c6e0b754110fb9860a2bb3ef670eb78d8c05c6943423fb27c970825e8507fdf1277eab6132a1c457db74a031faa73b703deb2ac4d26662dee0956557dee416243e8037458b954ab40933b7e549cad6e99c8b1bb2acae44356d7c40bd1102a47662900e25cb9cd3c056be82c4a1e1c3896f1fa18e9f0aa8908c2bbda4194ccea7d6a1af6640d180bb1c6e70a5521e16efc6bf57ab8995cbd1f022d649baaff7d85c2a16c491264a9135e0183c7e26128e9090cba0c28aec9e239ae994ee5bad4121d7733b683ddba5ad367e66166f2e1503a094171d4e28c3b6e26b088a158f0e4a243552f6e870d9ee3f69e69a750503912ae3b17e1b68e3653621dc953b9ac00927e1bccd7445bc06c6b9c0ba094cd2bcdefaa3c979e57347b523a2680f7704102b1d5c26ee6ced69dff4a162890a7a319b0cd9d40b41d2d39aa5f8dcc4ac6df4eccb1e61788dfce0ed6c25e45d7145f9b4dbe28dd76265db8a0243d35c1e558e5f21c2e19e5c85254c6f1f8c5cdacba35ef5d2c0d58efb24659557409b725f33dfc7389a43f6e46e93b47ad1ee904fa3626f94827aea56f16c7604cac0cda18d3b739586b10e48ce4402405639ea79679e904d829801635d01887ea5f8d6e315cb9e2e6fa20a0eebc854bed1a6833c74444f92171090afc7ec72c280f063ad126fbab8177ae847655e20faad2679969c204cb65515c25dd6d6c3b82fd4d1061971c6e1bd3094c38f7cca86cb1ac88fa1cc8db84937c4806356768ae105691b84f03886fae9735bce1d8354122f60168198d87b6f77f7f60fba7aa8f76460dad7086426556e4fa9c3610211e88998c9bbdeaff8c9dabe79029e69842c645f3726b008ecf2465e6d918f7a69518be9ab5b55f455e5dcc625f6a7abf527894d01494fbf2874842d6a6fc4968ffe7b0caf4a5da4999efd22d67ad4eb935ee813cfcfdba7fb29cc2ef489a852bfcfa1a96a2da8ed1f44cae77cc40f021343fab04c0976c35ce956595721e0c6295f69814502b75a3e381833973aa86d6d0b9f4e59de24ab8f6497ccad1d3891c4e196df2a6c691a434ee24bd8693ca8dbaaa5fed6c0b2e5dddda0a6f73eee1241de42636197e511896ca9ceb85d7911b9e1785ce9671508f5f624dd71b7e2bd8dfa0f1a6dbb190756d423ac293e39250e69a13eaa3bb6eace63e050e53579a0151efc67f104bab9e241be51b5e0e43d974d8349a2f09d9a7d6c0e96c53fbc5e248d79371c162153d265d8baa523b431e278c990fad678b21a4352ca3005ea480e7e31047f9d56299333b657010515bd7254abe8009c157c06122cfa02c3e6facff1d02e0c84aabd35d28c320a7f8cec261ceef638ca4e6bcfbea0500cc8332e8e6f1ec553aaff49843277517dbcb73706c4d1c8b525caeff4812ffda12bef223f5b9ceef1bb4eb82d0a4feebe19943d5c85af386d65e0fea1f55d2b1a1d6c7dfe15941e657451006776df0304f9c66cb83ab425782d3514812c77b7b980b238e25f64b5d02eb7a81f0687d3a45d2aa43d7e5dbd2cdc76d11fd0bd6b11885f34d334e337dacb876d40e3263e26bcf831d0e9ef028162cb9c7712d681e131aa6a08b21512eb6e7e55e3b5318ffa1cb547402af694bc0c4fa74ebbd93388c3a6094312d9e01192aef421923b48d9ea80934072de0bdb87017c7e02835f1b620726a6fcec74a4de4c0e45e0d1a5fca12d6b2633510754bc8d96af7c30fac399f9f53eb10599528ebea450ab84c646b474285517bc1f0fa26a27bd095fe2c14253473581d0801213ca638ef1a4057776168381276f6cbecc6349e2f9384478676b530cfd2f19651553ff436bdcd9f0291f7fc0f8c5e128db38aee9bdcf3625e4bff0cb21bcfa282f87734d995f0ef161ee1f4481adbd93f5d9460cb7d234f1ddefef85d35e872995f7ba1f011c96d54d303ade7832baf88db0654be08a1e7d15cf3a0f124c51996774540820e18ede5b43634c810efe790176734b0892a347dcd943414f45644fd514a57c72670272c2e8b472e550831cc87d7d5802e2217d538b95b13cdad0109641e4be3c543840ff9f9f7429468e654179c97b547796e4b9ff52f89f6a6d1e75105ffc8736d61d77cbdc6d0742ff70ca40d9e7a375b4cb30fd82a7871c3cbc66cbfe5a736160e7d6ffc69be16ad11d288fd176baeba6c95e70e57551557bf0688a991b6f2b43c30453926ffbf468e4b48022bee3bce9a22357adefdebe188c2725bde0610f4cf3dc1bc6b49de9711ff21f7cf57c960139e1842d7be1709f79e1ae06505ca6904e851a4b74350ccbed099498af7c2d36b341ca2f4f7397982f4a8d18db2be48e1843818774c438c57fcf7bf5817fd89a0f919325c3b136df2c30a99679d2db3701718016c19f0c7140c6a6337639dd788bd2f6bce8561c2a4fa436bd607e4109dd76845b7fa13f5b33db32b8f694bd366aea69a851893b31fce3965d7eace471b39a013f7cef34267a6d1c5f1ad5bbbf99c4800fee46e853921fbf626b23eb4f9f4cc43df48592f7c3bee24a01ded37cc3effda6c288560fb06936d5b14760e847f6c99619c659aa387dff39154b69eedcbdf99143759546f6a258d1ce43aa029d164cadc5abfecebbf74ee2c64043d08f46245148851dfc84ea56ae6e99810e774f640555ea4d2e6cdd2a910089a01ef7bad92749a34e71e04109d8048c551d60d2c08b281554bf7468f876d6aa610973d8334da930be61f40643c98fe18ec9fcfdb0d8a7716ecad40677b64d4c06cd14f06106ea1f2736073880c63592cfb2c6bc0cd5351b1015b70009819eea9dbe1facb0946ecbf3d9c3a7303bd9d8229c91ad4eb6296088b5337357e26511502b4e8ddd428fc15384fb8e1399d181d82d828278f3f43fca041b0f9c17654e4469a22ae17579ce55a38e05a2a0875517137b638e71cf0916bb502933b12929de44a24749c1368334771f48dcfcc14b228766a89a679986750511367b407444f875339b99f334e1e7bb3487f5a95627a02ba68f0dbf32b2563b2414bbcd695a404b6ce735d956ab663e97f67646002bcc64224a4c49223d0b32256164c7bbc075f841b880af6ae72de1e69925d9d8e5f755e68e9ee8ea93a2de541483394525e2c7ab812a2cb91711e8ab830cc812f4dc55522e3cd53bf6ea15409cd12f4262c983f390eb5c48cdb3405f4518e4ad8279b502a1342458a79172a83f9db1bbb173312d25d31267603fb5e5dc09d1b54148519dcfa39fe19c33934aa2c189d2aefa63ff793f614a11691aa851cdfc96a65821df27866017b92a887fc1bd9935448c82fee50be0fa0b3b139fe787b15e0d9b91dfa387c6b06aaaaee53ca7f7d17c0bbb4be7b789ae82d90824d099e763609497c2f7d88d79c7d9ab7917d1f7872aa4641ba335cf4789c206a45be96d14c9438842367e4ea0af559ebb96308b926a1aa9211cdc90bfb78402d57e33330b65c3120f8d65455b68b5e9d8357ceb191cb6869c0ae0e66e088f27c8abc2f1d3c7345a170f86801707467ec6d6140d51b212d40f2c5586798a68cb564974d5bc987f2a55b41c13719d8c28a858bcef8f0f8cec8d36eedd5516088579ec082c934a7b6f2fdefd7a83d62a14bb5d92571dbc0e5c42fed68ebe08d23bccca68f61ca260c0200c4e747d5b26211ab2d36ce7336477ce8fbbf52c0a92ee30b0fd967158e11e2f4d9b344083c06e86f7caedc3ae39e91ebde5168803efa63df9d57878aaaa8d3ec4dbacc87986f518c0e8fe35a7c936c2a36d525cce6b68b01bb8584d9f3e1fc7a91505d95e451230d70d1397f30ee5d08bf7b5d2d42775e69892f1d7b4f28151bc84761634bd953951bea87703dbf6ada8819a274324ea70ceded213ba475c15a9ca1399c543b43b84782b4c1412a1424de9dd2b7e45dd753c1d14391e16351f5b7677c485bd8e2dbb11309 <> 025b6147f3769ced0df66e5196108f0c9e4c480f73e32b030185dc14bdfc5f09118ab990d49e0fe9d82a1c4126c0875a877770d437d99b1cc56dd567b32792d00f9cad34f25b023ca704f1edb666ba6974d347148f44b42ec3462206f2df6b9abdfb0da3eff386b0c93e0da6e4416ac0c049556e7228ea40d61a113eb543a99d163aed43e38c2b6843c5ee9a7b6fa63dddff92820c7fa6aec8cc3c66f981528b4b9661f52feeb9ba988ea376260696f127ea2ccedd09b26074d3fc1c7ba03c2d06c621b3c606ca9af2c7cf579efaa7b2ffc554e30146e4ba164c2f4ff3cabe4c7d80fc2ae9b1e84277dce2eac9f4cd7ce1e3b6655e4a409feb28bad6f670d90c0b5730c0ebb421e30920615a29d4b0589a69bcf9256b79507659f2e44cd02e1e1300710ed26d100b561391758c513ea5d0e64f88c5ea320e1cedea13d06d6f5ffce79bccd79022440fbc473a2708ba1d2076d85f6d988928748998949abebc1c555787d92f462f2b0096e2d94d210c2c8a53ec2cd889a011a1a73146db3019949004eab67e9f03ccd771f2c340d8241037764a0753068871ae94041076b244fb7b39da2ce57d446cab5f05dc19c569147bd4e2227ed7db02a5e5caa26c54bbffc38b55e9fb47793a76fb34fa0603658f2811e10f62504c0e66b935e78194e6880833beab1031652d28c50b4e46c1cd3253d8773340e587f20928089a3178534a82b8fd6ead046e4c9b485f7095cf35b352b338cd87bb6fa37f68d2ba2cdb829ad41dad080653c0bbc1c0c36dbd466e0fdc5f3d751d4262a573db7d90c74ba236f264c79c81d30b1c45219e733b176c53139cc2872ba5b76a0ad746edabba21bd7982bdccd50986961fe3db2fa529ca5a689d67fbbc5b4a30b1dcaaa0d5ac2b1db644e4c0cbe773783bbde95707638ba00b00d8219019bbc83aadd9a5ebd3a933ace5aa3c6256422f75a081ba76311bb8cfc24d6a7099ac07b3ce65f7bc845f270f8978d1150487a441b38caee3d6157c4919f9c812e5874f54873ae93eafa07bc91554c59c8db88fd45554b15628d1c4879ab6ca2ab6e02efa652c04d0994c19c8b4cda721f99f1f81ac9f2ea1c8697a34ae86db776064e2209865db10d1fc3c797467fed45256616a4fbf71b5d48e82602900af4fea0ed608f110b7377b93ec90d98a27260685d98255c6478595c88419a8c925e7c273f745fff795e4152378ab435dad3c4c88c18a6c3270c15c12bb26357be2374f59fcef12c72700d348dd5adaac3a68cc66a043425237f11352fb0406ccaaabfdf5906626d1b9c576c38788a7ccafb2b25eca8582e700aea5f0c9a9844418d5eb7fb6b80e341c78324e710f569b7db09fc5ac9e95a7b319c8b0ea7afbb5505bb615294b72fa68dffd6ba58033d0776716b25fc1464b7ac263bfd8f2141da8cb24ff6723d865cb639a244dfe62c69b486e238b8eff4245ca3aadc7edaad64c7efdfc45054b4f0b835dc82d058a988122f19adade54926bde7561254e5b84c94e2060bc1b9f3641069b5c96b51ed410e0b518379c1340577805ade6c4080cca0caef98e028af0f7bfd9df4b3c16177729560e0e40a56f8d641ac8762be311e469abf0082a5c275f4b43f7e7d8d33e8136f80a1bbdb37f856e6ee3253c984fca7cca72d97cc1d31983944a445fcca34e7db61a3bb205990dd031cad6244a2ef8546a1c69a2cc6f93bbcf626a4c675119215b829e99933eda45428db70e775258d8fad0768849367d5f44e6672e5fbc8137cf2f51e734c901cc6a9d77a65855609123dfed0c9aec364d6b966cbe9d507fff0e537407a592dcfc7f53f30f4ccc3735f476d65af4f6feca2961bd50657cec5106a13df991fa33e299d91146ff52aa67a940ee62183dd11a7ff12b3aa220205707b034116f50", 0x2000, &(0x7f0000005280)={&(0x7f0000004600)={0x50, 0x0, 0x17, {0x7, 0x2d, 0xffffffff, 0x8006000, 0x1, 0x800, 0xee1, 0x80000000, 0x0, 0x0, 0x8, 0x8b1}}, &(0x7f0000004680)={0x18, 0x0, 0x9, {0x5}}, &(0x7f00000046c0)={0x18, 0xfffffffffffffff5, 0x23818d5b, {0xfffffffffffffff7}}, &(0x7f0000004700)={0x18, 0xfffffffffffffff5, 0x7, {0xfffffffa}}, &(0x7f0000004740)={0x18, 0xfffffffffffffffe, 0x2, {0x1000}}, &(0x7f0000004780)={0x28, 0x0, 0x0, {{0x5, 0xb, 0x2, r10}}}, &(0x7f00000047c0)={0x60, 0x0, 0xfffffffffffffff7, {{0x38f, 0x8, 0xdd, 0x7, 0x80000000, 0x7, 0x4, 0x6}}}, &(0x7f0000004840)={0x18, 0x0, 0x6, {0x2}}, &(0x7f0000004880)={0x14, 0x0, 0x1, {',}.:'}}, &(0x7f00000048c0)={0x20, 0x0, 0xffff, {0x0, 0x26}}, &(0x7f0000004900)={0x78, 0x0, 0x1, {0x7, 0xa, 0x0, {0x6, 0x8, 0x2a6, 0x9, 0x8, 0x0, 0x40, 0xbcdc, 0x24, 0x6000, 0x8, r8, r9, 0x9, 0xde}}}, &(0x7f0000004980)={0x90, 0x0, 0x336bc00000000000, {0x0, 0x2, 0x3e9d8a5d, 0x9, 0x1, 0x7, {0x4, 0x3, 0x7, 0x3, 0x2, 0x9, 0x6, 0x5, 0x800, 0x4000, 0x8, 0xffffffffffffffff, r9, 0x7, 0x8}}}, &(0x7f0000004a40)={0xa0, 0xffffffffffffffda, 0x1, [{0x5, 0x5, 0xa, 0x2, '/dev/fuse\x00'}, {0x1, 0xd, 0xa, 0x4, '/dev/fuse\x00'}, {0x0, 0x1, 0x22, 0x8, '/proc/sys/net/ipv4/tcp_syncookies\x00'}]}, &(0x7f0000004b80)={0x348, 0xffffffffffffffda, 0x7f, [{{0x0, 0x1, 0xd24b, 0x92ed, 0x2, 0xff, {0x0, 0x1, 0x4, 0x8, 0x40, 0x2, 0xffffffff, 0x4, 0x200, 0xa000, 0x5, r12, r9, 0xd4c, 0x10001}}, {0x5, 0x8, 0x3, 0xfffffff0, '^@['}}, {{0x0, 0x1, 0x3, 0x2, 0xfffffff8, 0x401, {0x3, 0x23, 0x5, 0x8000000000000001, 0xfff, 0x7fffffffffffffff, 0x30a, 0xffff3226, 0x0, 0xa000, 0x1, r8, r9, 0x9, 0x7}}, {0x4, 0x6, 0xa, 0x2, '/dev/vcsu\x00'}}, {{0x0, 0x3, 0x8000, 0x4, 0x6, 0x0, {0x5, 0x80000001, 0x5, 0x1, 0x3, 0xf9b, 0x286, 0x7, 0x3, 0xc000, 0x1, r8, r9, 0x6, 0x10}}, {0x4, 0x3, 0x9, 0x6, ':-+)&)[]\\'}}, {{0x2, 0x2, 0x7fffffff, 0x8, 0x80000001, 0x100, {0x5, 0x5, 0xf, 0x6180fe99, 0x2, 0x800, 0x5, 0x4, 0x1000, 0xd000, 0x6, 0x0, r9, 0xff3, 0x1000}}, {0x5, 0x6, 0x5, 0x8, 'C\'-&@'}}, {{0x6, 0x3, 0x79, 0x4, 0x7, 0x81, {0x3, 0x3, 0x6, 0x1, 0x6d, 0x3, 0x2, 0x7, 0x8, 0xc000, 0x7, r8, r9, 0x0, 0x8001}}, {0x0, 0xe1, 0xa, 0x7f, '/dev/vcsu\x00'}}]}, &(0x7f0000005040)={0xa0, 0x0, 0xe, {{0x2, 0x1, 0x4ff, 0x7, 0xffffffff, 0x5, {0x2, 0x2, 0x34f, 0x9, 0x797, 0xa, 0x0, 0x80000001, 0x1ff, 0xc000, 0x3, r13, r9, 0x9cd, 0x7fff}}, {0x0, 0x8}}}, &(0x7f0000005100)={0x20, 0x0, 0x9, {0x4, 0x4, 0x7f, 0xfffffff8}}, &(0x7f0000005140)={0x130, 0xfffffffffffffff5, 0x2, {0x8, 0x100, 0x0, '\x00', {0x10, 0x9d76, 0xffffffffffff0000, 0x3, r8, 0xffffffffffffffff, 0x12000, '\x00', 0x1000, 0x8000000000000000, 0x4d8d, 0x9, {0x4, 0x81}, {0x0, 0xb}, {0x5, 0x20}, {0x8, 0x7fffffff}, 0x1, 0x7, 0x9d1f, 0x8}}}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000005340), 0x200040, 0x0) (async) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000005340), 0x200040, 0x0) ioctl$PPPIOCNEWUNIT(r14, 0xc004743e, &(0x7f0000005380)) r15 = dup2(r11, r2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r15, 0x6, 0x16, &(0x7f00000053c0)=[@window={0x3, 0x7, 0x4}, @timestamp, @timestamp, @timestamp, @window={0x3, 0xa, 0x4}, @window={0x3, 0x450, 0x27}, @timestamp], 0x7) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r15, 0x89fa, &(0x7f0000005440)={'sit0\x00', &(0x7f0000005400)={@private2, @private=0xa010102, 0x18}}) ioctl$XFS_IOC_GETBMAP(r14, 0xc0205826, &(0x7f0000005480)={0x2, 0x7, 0x3, 0x6, 0x2}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000054c0)={r15}) recvfrom$inet(r11, &(0x7f0000005500)=""/233, 0xe9, 0x3, &(0x7f0000005600)={0x2, 0x4e21, @multicast2}, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000005640), 0x2, 0x0) (async) r16 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000005640), 0x2, 0x0) fsetxattr$trusted_overlay_origin(r16, &(0x7f0000005680), &(0x7f00000056c0), 0x2, 0x2) (async) fsetxattr$trusted_overlay_origin(r16, &(0x7f0000005680), &(0x7f00000056c0), 0x2, 0x2) connect$inet(r11, &(0x7f0000005700)={0x2, 0x4e20, @multicast2}, 0x10) r17 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_buf(r17, 0x0, 0x30b39934b7dacf76, &(0x7f0000005740)=""/210, &(0x7f0000005840)=0xd2) syz_genetlink_get_family_id$smc(&(0x7f00000058c0), r15) (async) r18 = syz_genetlink_get_family_id$smc(&(0x7f00000058c0), r15) sendmsg$SMC_PNETID_DEL(r11, &(0x7f0000005980)={&(0x7f0000005880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005940)={&(0x7f0000005900)={0x14, r18, 0x2, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000050) executing program 36: write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf350f4e, 0x200, 0x5, 0x200, 0xffeffffa, 0x0, 0x0, 0x2, 0x800}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x7d97, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/control/extensions/xu.0/bNumControls\x00', 0x0, 0x0) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 30, 30, 17, 16, 21, 11, 30, 26, 30] detailed listing: executing program 4: r0 = userfaultfd(0x80001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="89d31800000000000000000000000000000018500000000000200000000000000082450d250ec31a3b58a3d0f8a00282717f7693"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000842000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000100000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x138, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "3565d957e99236e9e9cb2b8cf74926675c231af2d2290c4c"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x192}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) read(r0, &(0x7f0000000300)=""/172, 0xdc) executing program 4: r0 = getpgid(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = syz_pidfd_open(r0, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r3, &(0x7f0000000340)='./file7/file0/../file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xf, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000050601010200000000020000000000091300020073797a31000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x3}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="9d7e01496ca96cd4f94cabca82fca1855f657aa2e6089a7c824cf7e7196840b02c1758dfd5879855c813ca8f8218658e7a1b85726a3a3c21eaad7e926182550d6487afe9b815e11d2f21a96af7245493d1efabf61e81d23c598de9ff81baf869515f8ad85379ef59e953321c3230c5ab2bd1ce22d263148d8b73aa20aafacd4aba2113e25802c7353393df3d7b23af7a623ce8a568afe4e1abccdaca3eae1ad84d", @ANYRESHEX=0x0, @ANYRES64, @ANYRES32=r1, @ANYRES32=r4], 0x0, 0x19, 0x0, 0x0, 0x2e26eaf27be3145b, 0x6}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r7, @ANYRES16=r9, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x8040}, 0x4000010) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc601}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @local}) write$tun(r11, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000228290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r13 = fsopen(&(0x7f00000002c0)='omfs\x00', 0x0) r14 = fcntl$dupfd(r13, 0x0, r6) fsconfig$FSCONFIG_SET_STRING(r14, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) ioctl(r12, 0x890b, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') executing program 34: r0 = getpgid(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = syz_pidfd_open(r0, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r3, &(0x7f0000000340)='./file7/file0/../file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xf, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000050601010200000000020000000000091300020073797a31000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x3}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="9d7e01496ca96cd4f94cabca82fca1855f657aa2e6089a7c824cf7e7196840b02c1758dfd5879855c813ca8f8218658e7a1b85726a3a3c21eaad7e926182550d6487afe9b815e11d2f21a96af7245493d1efabf61e81d23c598de9ff81baf869515f8ad85379ef59e953321c3230c5ab2bd1ce22d263148d8b73aa20aafacd4aba2113e25802c7353393df3d7b23af7a623ce8a568afe4e1abccdaca3eae1ad84d", @ANYRESHEX=0x0, @ANYRES64, @ANYRES32=r1, @ANYRES32=r4], 0x0, 0x19, 0x0, 0x0, 0x2e26eaf27be3145b, 0x6}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r7, @ANYRES16=r9, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x8040}, 0x4000010) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc601}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @local}) write$tun(r11, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000228290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r13 = fsopen(&(0x7f00000002c0)='omfs\x00', 0x0) r14 = fcntl$dupfd(r13, 0x0, r6) fsconfig$FSCONFIG_SET_STRING(r14, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) ioctl(r12, 0x890b, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000800)=@newnexthop={0x3c, 0x68, 0x901, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x2, 0xd4}, {0x1, 0x2}]}]}, 0x3c}}, 0x0) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x1200000}) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) (async, rerun: 64) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/intel_xhci_usb_sw/uevent\x00', 0x1, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@local, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@delqdisc={0x84, 0x25, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x19, 0xfff2}, {0xf, 0xf}, {0xc, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @TCA_RATE={0x6, 0x5, {0x81, 0xd6}}, @TCA_RATE={0x6, 0x5, {0x6, 0xf2}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff}, @qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x5}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x80}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x20008080) write(r4, &(0x7f0000000140)="41a5cd", 0x3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r2, r6, 0x0) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) executing program 3: syz_emit_ethernet(0xaa, &(0x7f0000000300)={@broadcast, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x5e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600280000fe8000000000000000000000aa8903000000000000c910fe88000000000000000000000000010105020004010200"/79], 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600280000fe8000000000000000000000aa8903000000000000c910fe88000000000000000000000000010105020004010200"/79], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560f, &(0x7f00000002c0)={0xb}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname(r0, &(0x7f0000000040)=@alg, &(0x7f0000000240)=0x80) (async) getsockname(r0, &(0x7f0000000040)=@alg, &(0x7f0000000240)=0x80) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) (async) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x80) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) writev(r2, &(0x7f0000001c40)=[{&(0x7f0000000300)="5c1c4ec7ea747a61209302309e81698e938130a4f20205166885bc69f43d76e65747e6cad0c6f337392fdd59ac4ab4ab217c36157e853da8ea7a8a929c0a68cba97d06d3e62cb6803dbd408d3c27d92bce781c93f4bbb12d5702dd244f4c89e6fea6313c2c8689b7f48c8044f87e1b781e107ad7da1f3e213f2d78c0afa70c20adb2bda5188405ef2872dbbb6a7034746b98f8dfb175ba85257215ea1451c53522ca4eb6175448665de114f96be84be967662ce4c3593f521c78b877ee680982cbe8fcf7f893aa16b3e03702dc6b219f8068e9502d216f4df895681fd033fb0bca24c7a05be3e465f9b7a46d27", 0xed}, {&(0x7f0000000c40)="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", 0xe9f}], 0x2) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x3ffffc}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a00)=""/109, 0x6d}, {&(0x7f0000001a80)=""/4106, 0x100a}, {&(0x7f0000003740)=""/182, 0xb6}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000003900)=""/148, 0x94}, {&(0x7f00000000c0)=""/112, 0x70}, {0x0}, {&(0x7f0000000280)=""/135, 0x87}], 0x8}, 0x9}], 0x4, 0x40010000, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1fd4ea11", 0x4}, {&(0x7f0000000280)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000800)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)={'cmac(twofish-asm)\x00'}}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x35d}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r3, 0xa}, &(0x7f0000000140)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x7, @remote}, {0x1, @broadcast}, 0x4c, {0x2, 0x102, @local}, 'ip6gretap0\x00'}) setns(0xc9, 0x0) r5 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x2c00, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x3, 0x80a0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000300)={0x0, 0x3, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2003}, 0x50) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x14, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffd}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r7, 0xaea2, 0x9) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout bisect: the chunk can be dropped bisect: split chunks (needed=true): <9> bisect: split chunk #0 of len 9 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 11, 30, 26, 30] detailed listing: executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x80) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) writev(r2, &(0x7f0000001c40)=[{&(0x7f0000000300)="5c1c4ec7ea747a61209302309e81698e938130a4f20205166885bc69f43d76e65747e6cad0c6f337392fdd59ac4ab4ab217c36157e853da8ea7a8a929c0a68cba97d06d3e62cb6803dbd408d3c27d92bce781c93f4bbb12d5702dd244f4c89e6fea6313c2c8689b7f48c8044f87e1b781e107ad7da1f3e213f2d78c0afa70c20adb2bda5188405ef2872dbbb6a7034746b98f8dfb175ba85257215ea1451c53522ca4eb6175448665de114f96be84be967662ce4c3593f521c78b877ee680982cbe8fcf7f893aa16b3e03702dc6b219f8068e9502d216f4df895681fd033fb0bca24c7a05be3e465f9b7a46d27", 0xed}, {&(0x7f0000000c40)="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", 0xe9f}], 0x2) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x3ffffc}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a00)=""/109, 0x6d}, {&(0x7f0000001a80)=""/4106, 0x100a}, {&(0x7f0000003740)=""/182, 0xb6}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000003900)=""/148, 0x94}, {&(0x7f00000000c0)=""/112, 0x70}, {0x0}, {&(0x7f0000000280)=""/135, 0x87}], 0x8}, 0x9}], 0x4, 0x40010000, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1fd4ea11", 0x4}, {&(0x7f0000000280)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000800)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)={'cmac(twofish-asm)\x00'}}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x35d}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r3, 0xa}, &(0x7f0000000140)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x7, @remote}, {0x1, @broadcast}, 0x4c, {0x2, 0x102, @local}, 'ip6gretap0\x00'}) setns(0xc9, 0x0) r5 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x2c00, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x3, 0x80a0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000300)={0x0, 0x3, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2003}, 0x50) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x14, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffd}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r7, 0xaea2, 0x9) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <4> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 26, 30] detailed listing: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x3ffffc}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a00)=""/109, 0x6d}, {&(0x7f0000001a80)=""/4106, 0x100a}, {&(0x7f0000003740)=""/182, 0xb6}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000003900)=""/148, 0x94}, {&(0x7f00000000c0)=""/112, 0x70}, {0x0}, {&(0x7f0000000280)=""/135, 0x87}], 0x8}, 0x9}], 0x4, 0x40010000, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1fd4ea11", 0x4}, {&(0x7f0000000280)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000800)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)={'cmac(twofish-asm)\x00'}}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x35d}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r3, 0xa}, &(0x7f0000000140)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x7, @remote}, {0x1, @broadcast}, 0x4c, {0x2, 0x102, @local}, 'ip6gretap0\x00'}) setns(0xc9, 0x0) r5 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x2c00, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x3, 0x80a0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000300)={0x0, 0x3, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2003}, 0x50) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x14, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffd}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r7, 0xaea2, 0x9) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 11, 30] detailed listing: executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x80) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) writev(r2, &(0x7f0000001c40)=[{&(0x7f0000000300)="5c1c4ec7ea747a61209302309e81698e938130a4f20205166885bc69f43d76e65747e6cad0c6f337392fdd59ac4ab4ab217c36157e853da8ea7a8a929c0a68cba97d06d3e62cb6803dbd408d3c27d92bce781c93f4bbb12d5702dd244f4c89e6fea6313c2c8689b7f48c8044f87e1b781e107ad7da1f3e213f2d78c0afa70c20adb2bda5188405ef2872dbbb6a7034746b98f8dfb175ba85257215ea1451c53522ca4eb6175448665de114f96be84be967662ce4c3593f521c78b877ee680982cbe8fcf7f893aa16b3e03702dc6b219f8068e9502d216f4df895681fd033fb0bca24c7a05be3e465f9b7a46d27", 0xed}, {&(0x7f0000000c40)="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", 0xe9f}], 0x2) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 30] detailed listing: executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 30] detailed listing: executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x80) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) writev(r2, &(0x7f0000001c40)=[{&(0x7f0000000300)="5c1c4ec7ea747a61209302309e81698e938130a4f20205166885bc69f43d76e65747e6cad0c6f337392fdd59ac4ab4ab217c36157e853da8ea7a8a929c0a68cba97d06d3e62cb6803dbd408d3c27d92bce781c93f4bbb12d5702dd244f4c89e6fea6313c2c8689b7f48c8044f87e1b781e107ad7da1f3e213f2d78c0afa70c20adb2bda5188405ef2872dbbb6a7034746b98f8dfb175ba85257215ea1451c53522ca4eb6175448665de114f96be84be967662ce4c3593f521c78b877ee680982cbe8fcf7f893aa16b3e03702dc6b219f8068e9502d216f4df895681fd033fb0bca24c7a05be3e465f9b7a46d27", 0xed}, {&(0x7f0000000c40)="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", 0xe9f}], 0x2) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program did not crash bisect: split chunks (needed=true): <1>, <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 3 programs left: executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x80) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) writev(r2, &(0x7f0000001c40)=[{&(0x7f0000000300)="5c1c4ec7ea747a61209302309e81698e938130a4f20205166885bc69f43d76e65747e6cad0c6f337392fdd59ac4ab4ab217c36157e853da8ea7a8a929c0a68cba97d06d3e62cb6803dbd408d3c27d92bce781c93f4bbb12d5702dd244f4c89e6fea6313c2c8689b7f48c8044f87e1b781e107ad7da1f3e213f2d78c0afa70c20adb2bda5188405ef2872dbbb6a7034746b98f8dfb175ba85257215ea1451c53522ca4eb6175448665de114f96be84be967662ce4c3593f521c78b877ee680982cbe8fcf7f893aa16b3e03702dc6b219f8068e9502d216f4df895681fd033fb0bca24c7a05be3e465f9b7a46d27", 0xed}, {&(0x7f0000000c40)="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", 0xe9f}], 0x2) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) bisect: trying to concatenate bisect: concatenate 3 entries minimizing program #0 before concatenation testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 11, 30] detailed listing: executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x80) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 11, 30] detailed listing: executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 11, 30] detailed listing: executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x80) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 11, 30] detailed listing: executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) socket$nl_generic(0x10, 0x3, 0x10) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 11, 30] detailed listing: executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 11, 30] detailed listing: executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 11, 30] detailed listing: executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 11, 30] detailed listing: executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 11, 30] detailed listing: executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 11, 30] detailed listing: executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 11, 30] detailed listing: executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 11, 30] detailed listing: executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) r2 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) write$cgroup_int(r2, &(0x7f0000000540)=0xffffffffffffffff, 0x74) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 11, 30] detailed listing: executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 11, 30] detailed listing: executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) creat(&(0x7f0000000080)='./file1\x00', 0xec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 11, 30] detailed listing: executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 11, 30] detailed listing: executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 11, 30] detailed listing: executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 11, 30] detailed listing: executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 11, 30] detailed listing: executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 11, 30] detailed listing: executing program 0: socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 11, 30] detailed listing: executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout minimized 21 calls -> 4 calls minimizing program #1 before concatenation testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 10, 30] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000001c0)={0x2, 0xc, 0xffff, 0x0, 0x7, 0x1, 0x0, &(0x7f0000000140)=[{0x21, 0xfe}]}) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9, 30] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8, 30] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x22ec089, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="c314373ce9fd1613757405a71e70834a0c7e6074a0356ae13fc69feb6d2689471c79ad32377c58e0ebfb81184aeaea64fcb990cb7e5cc1aa4ea2d24d9fa83eae6ab810dc724bbc1fea2abda655448bf93d771d5f2e61463901353ad23ec0885381a137b6eee24b7d2829611a13be3c4cabfab31478c5645ea5287184ff96969490f5fec8888656913229f4f72d896b84f18defb4acfdb2a72224bdc29901dae32ee6f2a230c35d5f5ad719b861bf825ec08ffbc5761bf82b1d502ef87b4438401e46cfc0e9c5babc6f049e125bfaf0d3ea0b02e35d8eaaad70af5436a9d948", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0]) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 7, 30] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 6, 30] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 5, 30] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 30] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 30] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 3, 30] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 2, 30] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 30] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 0: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) program crashed: WARNING in hci_conn_timeout minimized 11 calls -> 1 calls minimizing program #2 before concatenation testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 29] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 28] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 27] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYRES8=r14, @ANYRES16=r14, @ANYBLOB="040028bd7000fbdbdf254f00000008000300", @ANYRES32=r16, @ANYRESOCT=r14], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 26] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 25] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYRES64=r8], 0x2c}}, 0x0) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 24] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 23] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 22] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 21] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r9, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 20] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r6, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r8, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x28, 0x400, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xffe9, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x487b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 19] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r7, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0x4, 0xfff2}, {0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4019) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 18] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r6, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 17] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r6, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 16] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r6, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 15] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r6, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) socket$netlink(0x10, 0x3, 0x0) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 14] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r6, 0x0, 0x7, 0x7, &(0x7f0000000680)="55497d0332d81878449eda297d3a2a653d2d25e131773f6281b31d993ff6c720fc675410f28e8f51361a51fd06190dcb439298d0fdceab09d8073a0abdfa4980a5528deb1ad33d65a86762abfeeae9a68687b95dcd4695b7d0cd1ffab71bc828e6f9ee1903622ea93ea07f5929f63cf31d679ab85e504589cfec2b622aefcbbaa1cd472c1f285e0ade29f9bd8af5321a6a78ed4051f4ea862745084412a3251208", 0x4}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 13] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r5}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 12] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 11] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 10] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8d80, 0x0) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 9] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 8] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 7] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 6] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 5] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 4] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 3] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 2] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 1] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 1] detailed listing: executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) executing program 3: mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) program crashed: WARNING in hci_conn_timeout minimized 30 calls -> 1 calls testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-write$RDMA_USER_CM_CMD_RESOLVE_ADDR-syz_emit_vhci-syz_emit_vhci-mount$bind-ioctl$KVM_CREATE_VM detailed listing: executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) program crashed: WARNING in hci_conn_timeout bisect: concatenation succeeded found reproducer with 6 syscalls minimizing guilty program testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-write$RDMA_USER_CM_CMD_RESOLVE_ADDR-syz_emit_vhci-syz_emit_vhci-mount$bind detailed listing: executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-write$RDMA_USER_CM_CMD_RESOLVE_ADDR-syz_emit_vhci-syz_emit_vhci detailed listing: executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-write$RDMA_USER_CM_CMD_RESOLVE_ADDR-syz_emit_vhci detailed listing: executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-write$RDMA_USER_CM_CMD_RESOLVE_ADDR-syz_emit_vhci detailed listing: executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-syz_emit_vhci-syz_emit_vhci detailed listing: executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) program crashed: WARNING in hci_conn_timeout testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci detailed listing: executing program 0: syz_emit_vhci(0x0, 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(0x0, 0x7) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB], 0x7) program did not crash extracting C reproducer testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci program crashed: WARNING in hci_conn_timeout simplifying C reproducer testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci program crashed: WARNING in corrupted a never seen crash title: WARNING in corrupted, ignore testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci program crashed: WARNING in hci_conn_timeout testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci program did not crash testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci program did not crash testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci program crashed: WARNING in hci_conn_timeout testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci program crashed: WARNING in hci_conn_timeout testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci program did not crash testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci program crashed: WARNING in hci_conn_timeout testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci program did not crash testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci program crashed: WARNING in hci_conn_timeout testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci program crashed: WARNING in hci_conn_timeout testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci program did not crash testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci program crashed: WARNING in hci_conn_timeout testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci program did not crash testing compiled C program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci program did not crash testing program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) program crashed: WARNING in hci_conn_timeout validation run: crashed=true testing program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) program did not crash validation run: crashed=false testing program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) program crashed: WARNING in hci_conn_timeout validation run: crashed=true testing program (duration=45s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-syz_emit_vhci detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) program crashed: WARNING in hci_conn_timeout validation run: crashed=true reproducing took 1h23m2.715066637s repro crashed as (corrupted=false): ------------[ cut here ]------------ refcnt < 0 WARNING: net/bluetooth/hci_conn.c:631 at hci_conn_timeout+0x16a/0x230 net/bluetooth/hci_conn.c:631, CPU#2: kworker/u34:2/5834 Modules linked in: CPU: 2 UID: 0 PID: 5834 Comm: kworker/u34:2 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Workqueue: hci0 hci_conn_timeout RIP: 0010:hci_conn_timeout+0x16a/0x230 net/bluetooth/hci_conn.c:631 Code: 44 0f b6 2d 83 0e 6c 06 31 ff 41 83 e5 40 44 89 ee e8 2a 75 58 f7 45 84 ed 0f 84 02 ff ff ff e9 77 9a bf f6 e8 07 7b 58 f7 90 <0f> 0b 90 e8 fe 7a 58 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 RSP: 0018:ffffc90006befc18 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff888035fc4a40 RCX: ffffffff8ab1e43f RDX: ffff888032b58000 RSI: ffffffff8ab1e539 RDI: ffff888032b58000 RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 R10: 00000000ffffffff R11: 000000000000758b R12: ffff888035fc4000 R13: ffff888032b584c4 R14: ffffffff9122aba4 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880d5fdc000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe2ab296492 CR3: 000000003c1e7000 CR4: 0000000000352ef0 Call Trace: process_one_work+0xa23/0x1940 kernel/workqueue.c:3322 process_scheduled_works kernel/workqueue.c:3405 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3486 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 final repro crashed as (corrupted=false): ------------[ cut here ]------------ refcnt < 0 WARNING: net/bluetooth/hci_conn.c:631 at hci_conn_timeout+0x16a/0x230 net/bluetooth/hci_conn.c:631, CPU#2: kworker/u34:2/5834 Modules linked in: CPU: 2 UID: 0 PID: 5834 Comm: kworker/u34:2 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Workqueue: hci0 hci_conn_timeout RIP: 0010:hci_conn_timeout+0x16a/0x230 net/bluetooth/hci_conn.c:631 Code: 44 0f b6 2d 83 0e 6c 06 31 ff 41 83 e5 40 44 89 ee e8 2a 75 58 f7 45 84 ed 0f 84 02 ff ff ff e9 77 9a bf f6 e8 07 7b 58 f7 90 <0f> 0b 90 e8 fe 7a 58 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 RSP: 0018:ffffc90006befc18 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff888035fc4a40 RCX: ffffffff8ab1e43f RDX: ffff888032b58000 RSI: ffffffff8ab1e539 RDI: ffff888032b58000 RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 R10: 00000000ffffffff R11: 000000000000758b R12: ffff888035fc4000 R13: ffff888032b584c4 R14: ffffffff9122aba4 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880d5fdc000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe2ab296492 CR3: 000000003c1e7000 CR4: 0000000000352ef0 Call Trace: process_one_work+0xa23/0x1940 kernel/workqueue.c:3322 process_scheduled_works kernel/workqueue.c:3405 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3486 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245