Extracting prog: 24m7.816373369s Minimizing prog: 32m33.571275745s Simplifying prog options: 4m51.975561348s Extracting C: 49.3664743s Simplifying C: 0s extracting reproducer from 67 programs testing a last program of every proc single: executing 17 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6 detailed listing: executing program 0: socket$inet6(0xa, 0x800000000000002, 0x1) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$l2tp-signalfd-mremap-prctl$PR_SET_MM-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_PROBE_CLIENT-mprotect-mprotect-openat$tun-ioctl$TUNSETIFF-socket-ioctl$sock_inet_SIOCSIFFLAGS-socket$nl_generic-syz_genetlink_get_family_id$tipc2-sendmsg$TIPC_NL_BEARER_ENABLE-write-syz_init_net_socket$bt_l2cap-setsockopt$bt_BT_CHANNEL_POLICY detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_clone-mmap$IORING_OFF_SQ_RING-mprotect-syz_clone-io_setup detailed listing: executing program 0: syz_open_procfs(0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0xa0b84111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000001c0)) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-prlimit64-fsopen-mmap$IORING_OFF_SQ_RING-syz_clone-socket$inet-inotify_init1-ioctl$TUNATTACHFILTER detailed listing: executing program 0: syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x1, 0x1fb}, 0x0) fsopen(0x0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x1) inotify_init1(0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-write$uinput_user_dev-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$BINDER_WRITE_READ-ppoll-ioctl$KVM_CREATE_VCPU-sendmsg$NLBL_UNLABEL_C_STATICADD-socket-socketpair$unix-socket-creat-write$binfmt_script-openat-write-cachestat-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_REGS-openat$kvm-ioctl$KVM_RUN-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x35, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0xffff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x1000f, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x41, 0x2000803, 0xffffffff, 0x10000, 0x4, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x0, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r1, 0x5211}, {r1, 0x2}, {r0, 0x1000}], 0x3, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={[0x5]}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r4, &(0x7f0000000740), 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000080)='4', 0x1) cachestat(r4, &(0x7f0000000100)={0x4, 0x5296}, &(0x7f0000000180), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-write$uinput_user_dev-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$BINDER_WRITE_READ-ppoll-ioctl$KVM_CREATE_VCPU-sendmsg$NLBL_UNLABEL_C_STATICADD-socket-socketpair$unix-socket-creat-write$binfmt_script-openat-write-cachestat-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_REGS-openat$kvm-ioctl$KVM_RUN-ioctl$KVM_CREATE_VM-dup-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x35, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0xffff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x1000f, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x41, 0x2000803, 0xffffffff, 0x10000, 0x4, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x0, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r1, 0x5211}, {r1, 0x2}, {r0, 0x1000}], 0x3, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={[0x5]}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r4, &(0x7f0000000740), 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000080)='4', 0x1) cachestat(r4, &(0x7f0000000100)={0x4, 0x5296}, &(0x7f0000000180), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$netlink-sendmsg$netlink-syz_genetlink_get_family_id$SEG6-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_CHANNEL_SWITCH-capset-lsetxattr$security_selinux detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000fedbdf", @ANYRES32=r3, @ANYBLOB="06000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:usbmon_device_t:s0\x00', 0x1001, 0x2) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$netlink-sendmsg$netlink-syz_genetlink_get_family_id$SEG6-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_CHANNEL_SWITCH-capset-lsetxattr$security_selinux detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000fedbdf", @ANYRES32=r3, @ANYBLOB="06000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:usbmon_device_t:s0\x00', 0x1001, 0x2) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$key-sendmsg$key-ioctl$EVIOCGRAB detailed listing: executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000400030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x1000) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$key-sendmsg$key-ioctl$EVIOCGRAB detailed listing: executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000400030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x1000) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-sendfile-openat$procfs-read$char_usb-sendmsg$nl_xfrm-openat$fuse-read$FUSE-fsopen-openat$sysfs-copy_file_range-fsconfig$FSCONFIG_CMD_CREATE-socket$nl_generic-syz_genetlink_get_family_id$ethtool-setresuid-sendmsg$ETHTOOL_MSG_STRSET_GET-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_GET_STATION-fsmount-fchdir-openat$cgroup_ro-write$binfmt_script-mmap-sendto$inet-mprotect-ptrace$ARCH_SHSTK_STATUS-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_REQ_SET_REG detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmstat\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000140)=""/163, 0xa3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="140100001a000100feffffff00010000ff02000000000000000000000000000000000000000000004e20071c4e2100b5020000203a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc"], 0x154}}, 0x844) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x101a42, 0x57) copy_file_range(r5, &(0x7f0000000000)=0x8, r5, 0x0, 0x4, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) setresuid(r2, r2, r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c000180080001000f0000000c00018008000100040000000c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000004a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004a40)={&(0x7f00000029c0)=ANY=[@ANYBLOB='H \x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x2048}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) r9 = fsmount(r4, 0x0, 0x0) fchdir(r9) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000340)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r10, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689", 0x2, 0x20000000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ptrace$ARCH_SHSTK_STATUS(0x1e, r3, &(0x7f00000003c0), 0x5005) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESHEX, @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-sendfile-openat$procfs-read$char_usb-sendmsg$nl_xfrm-openat$fuse-read$FUSE-fsopen-openat$sysfs-copy_file_range-fsconfig$FSCONFIG_CMD_CREATE-socket$nl_generic-syz_genetlink_get_family_id$ethtool-setresuid-sendmsg$ETHTOOL_MSG_STRSET_GET-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_GET_STATION-fsmount-fchdir-openat$cgroup_ro-write$binfmt_script-mmap-sendto$inet-mprotect-ptrace$ARCH_SHSTK_STATUS-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_REQ_SET_REG detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmstat\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000140)=""/163, 0xa3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="140100001a000100feffffff00010000ff02000000000000000000000000000000000000000000004e20071c4e2100b5020000203a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc"], 0x154}}, 0x844) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x101a42, 0x57) copy_file_range(r5, &(0x7f0000000000)=0x8, r5, 0x0, 0x4, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) setresuid(r2, r2, r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c000180080001000f0000000c00018008000100040000000c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000004a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004a40)={&(0x7f00000029c0)=ANY=[@ANYBLOB='H \x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x2048}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) r9 = fsmount(r4, 0x0, 0x0) fchdir(r9) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000340)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r10, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689", 0x2, 0x20000000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ptrace$ARCH_SHSTK_STATUS(0x1e, r3, &(0x7f00000003c0), 0x5005) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESHEX, @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-memfd_create-mprotect-quotactl$Q_SETQUOTA-mknodat-socket$nl_generic-landlock_create_ruleset-landlock_restrict_self-landlock_create_ruleset-open-fcntl$setlease-landlock_restrict_self-landlock_restrict_self-open-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_NEW_MPATH-mkdirat-socket-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_generic-mount-openat-read-openat$tun-ioctl$TUNSETIFF-ioctl$TUNSETOFFLOAD-syz_io_uring_setup-close-fcntl$lock-mmap detailed listing: executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1d5842, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@sr0, 0x0, &(0x7f00000001c0)={0x8e4, 0x16c, 0x9, 0x0, 0x3, 0x2, 0x9, 0x6, 0x1c09}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x0, 0x850}, 0x30, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) open(&(0x7f0000000400)='./file0\x00', 0xe0841, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="80800000", @ANYRES16=r4, @ANYBLOB="00042abd7000ffdbdf25170000000a00060008021100000100000a00060008021100000000000a001a0008021100000100000a001a00ffffffffffff00000a001a0008021100000100000a001a0008021100000100000a000600ffffffffffff00000a000600ffffffffffff00000a001a000802110000000000"], 0x80}, 0x1, 0x0, 0x0, 0x100}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000160001d7a26bd005b8c3fd000a0000000c00ca8008000b"], 0x20}}, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x230c00, 0x0) read(r6, &(0x7f0000000a00), 0x64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r7, 0x400454ce, 0xa) syz_io_uring_setup(0x3409, &(0x7f0000000080)={0x0, 0xe962, 0x8, 0xfffffffd, 0x136}, 0x0, 0x0, 0x0) close(0x3) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-memfd_create-mprotect-quotactl$Q_SETQUOTA-mknodat-socket$nl_generic-landlock_create_ruleset-landlock_restrict_self-landlock_create_ruleset-open-fcntl$setlease-landlock_restrict_self-landlock_restrict_self-open-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_NEW_MPATH-mkdirat-socket-setsockopt$netlink_NETLINK_TX_RING-sendmsg$nl_generic-mount-openat-read-openat$tun-ioctl$TUNSETIFF-ioctl$TUNSETOFFLOAD-syz_io_uring_setup-close-fcntl$lock-mmap detailed listing: executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1d5842, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@sr0, 0x0, &(0x7f00000001c0)={0x8e4, 0x16c, 0x9, 0x0, 0x3, 0x2, 0x9, 0x6, 0x1c09}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x0, 0x850}, 0x30, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) open(&(0x7f0000000400)='./file0\x00', 0xe0841, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="80800000", @ANYRES16=r4, @ANYBLOB="00042abd7000ffdbdf25170000000a00060008021100000100000a00060008021100000000000a001a0008021100000100000a001a00ffffffffffff00000a001a0008021100000100000a001a0008021100000100000a000600ffffffffffff00000a000600ffffffffffff00000a001a000802110000000000"], 0x80}, 0x1, 0x0, 0x0, 0x100}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000160001d7a26bd005b8c3fd000a0000000c00ca8008000b"], 0x20}}, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x230c00, 0x0) read(r6, &(0x7f0000000a00), 0x64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r7, 0x400454ce, 0xa) syz_io_uring_setup(0x3409, &(0x7f0000000080)={0x0, 0xe962, 0x8, 0xfffffffd, 0x136}, 0x0, 0x0, 0x0) close(0x3) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-socket$inet6_tcp-ioctl$sock_inet6_SIOCADDRT-socket-ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD-newfstatat-setresuid-ioctl$UFFDIO_REGISTER-userfaultfd-mprotect-syz_clone-ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY-read$FUSE-write$FUSE_INIT-syz_open_procfs$namespace-fchdir-getpid-fcntl$getownex-getsockopt$sock_cred-socket$inet6_tcp-setsockopt$inet6_mreq-setsockopt$inet6_mreq-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-close_range-ioctl$XFS_IOC_ATTRLIST_BY_HANDLE-pidfd_send_signal-read$FUSE detailed listing: executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0xe}, 0x8, 0x0, 0x200, 0x400, 0xcd8, 0x86620090}) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r3, r3, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = userfaultfd(0x80801) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x24000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY(r0, 0x80207501, &(0x7f0000000540)={0x0, 0xffff, 0x8, &(0x7f0000000280)}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000004980)='ns/ipc\x00') fchdir(r4) getpid() fcntl$getownex(r0, 0x10, &(0x7f0000004d40)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004d80), 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x200000000000003b}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000440)={{r6, &(0x7f0000000040)='\x00', 0x2000, &(0x7f00000000c0)={@align=0x6, {0x3fd, 0xaeb, 0x8, 0x4}}, 0x3, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000240)=0x57d}, {[0x5, 0x9, 0x4, 0x81]}, 0x8, 0xfa, &(0x7f0000000340)=""/250}) pidfd_send_signal(r8, 0x24, &(0x7f00000004c0)={0x14, 0xc27, 0x1}, 0x0) read$FUSE(r0, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-socket$inet6_tcp-ioctl$sock_inet6_SIOCADDRT-socket-ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD-newfstatat-setresuid-ioctl$UFFDIO_REGISTER-userfaultfd-mprotect-syz_clone-ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY-read$FUSE-write$FUSE_INIT-syz_open_procfs$namespace-fchdir-getpid-fcntl$getownex-getsockopt$sock_cred-socket$inet6_tcp-setsockopt$inet6_mreq-setsockopt$inet6_mreq-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-close_range-ioctl$XFS_IOC_ATTRLIST_BY_HANDLE-pidfd_send_signal-read$FUSE detailed listing: executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0xe}, 0x8, 0x0, 0x200, 0x400, 0xcd8, 0x86620090}) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r3, r3, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = userfaultfd(0x80801) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x24000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY(r0, 0x80207501, &(0x7f0000000540)={0x0, 0xffff, 0x8, &(0x7f0000000280)}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000004980)='ns/ipc\x00') fchdir(r4) getpid() fcntl$getownex(r0, 0x10, &(0x7f0000004d40)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004d80), 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x200000000000003b}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000440)={{r6, &(0x7f0000000040)='\x00', 0x2000, &(0x7f00000000c0)={@align=0x6, {0x3fd, 0xaeb, 0x8, 0x4}}, 0x3, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000240)=0x57d}, {[0x5, 0x9, 0x4, 0x81]}, 0x8, 0xfa, &(0x7f0000000340)=""/250}) pidfd_send_signal(r8, 0x24, &(0x7f00000004c0)={0x14, 0xc27, 0x1}, 0x0) read$FUSE(r0, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-creat-write$binfmt_elf32-close-ioctl$RTC_WKALM_SET detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) write$binfmt_elf32(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4605069e0d00000000000000000200030009000000ca020000380000005e02000006040000ffff20000400f8ff1e0400020000000051e5746414"], 0xb8) close(r1) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x5, 0x15, 0xa, 0xb, 0x4, 0x401, 0x5, 0x11, 0xffffffffffffffff}}) program did not crash single: failed to extract reproducer bisect: bisecting 67 programs with base timeout 30s testing program (duration=46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 7, 12, 10, 30, 22, 27, 27, 8, 20, 17, 8, 30, 30, 30, 4, 10, 27, 12, 17, 29, 29, 15, 20, 1, 7, 14, 3, 3, 15, 7, 17, 19, 17, 9, 9, 9, 11, 30, 27, 13, 28, 28, 20, 20, 8, 20, 2, 2, 2, 2, 10, 2, 20, 10, 6, 3, 20, 2, 8, 6, 2, 1, 1, 2, 20, 1] detailed listing: executing program 1: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) write$cgroup_devices(r1, 0x0, 0x21) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c000000000001090224"], 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x14000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1000, 0x7, 0x0, 0x5, 0xfffffffffffffffd, 0x2, 0xffffffffffffffff], 0x4, 0x102280}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) executing program 32: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) write$binfmt_elf32(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4605069e0d00000000000000000200030009000000ca020000380000005e02000006040000ffff20000400f8ff1e0400020000000051e5746414"], 0xb8) close(r1) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x5, 0x15, 0xa, 0xb, 0x4, 0x401, 0x5, 0x11, 0xffffffffffffffff}}) executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x4c, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x3, 0x25, "", {{{0x9, 0x5, 0x1, 0x2, 0x238, 0x2, 0xff, 0xf}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x99, 0x5}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x10, 0x9, 0x10, 0x20, 0x55}, 0x67, &(0x7f00000001c0)={0x5, 0xf, 0x67, 0x3, [@generic={0x58, 0x10, 0x4, "7523013a1957cdf2088313ec60fdbf100dd723b4509da034b3d73685bca2e9276e8c1c8eea3c6440c83bbf57108bf68f4eaa17d63cc89e0b804f99a328085b0b920a2f1d6735f3f1d2ab51ac60c4193fab5ca64e99"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xe, 0x0, 0x3}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x457}}, {0xbc, &(0x7f00000002c0)=@string={0xbc, 0x3, "a83d61a433741844b559032a5d1976aae539a0548ebd91ed12264d8f748e79e1425402b9c142439c34b9f6b8c5965af2eecde5db8015dbf3d43cc494907d34bd68b28f0a9223bb6cd5e511842e6aeb8ffed18d6efdfbab4f6eebfeb4a46b8a1031379948064d3f4d6a661dd1b0721ee3d6a0698a52c9ee29c8014fb0e42c11513368feeef2504b4966d612cc1f41c8bb8980341481f65b46b3d88a61134a1b423ee3e3b6e7702a89253aa1af5da5e4b4d08b1341458f92b53161"}}]}) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x14, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 1: mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0xcb) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) syz_clone(0x80088000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$can_bcm(0x1d, 0x2, 0x2) accept(r3, &(0x7f00000002c0)=@in={0x2, 0x0, @local}, &(0x7f0000000240)=0x80) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83b00fe8000000000000000000000000000aaff0200"], 0xffe) executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="26f3450fd6cb65460f322e6426470f0767460f73f43df4c7442400f31f0000c744240292000000c7442406000000000f011c24c74424002d000000c744240211000000ff1c2465260f01c4460f23ac2e45dcaf08200000", 0x57}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x2, 0x7b, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x2, 0x7b, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9001000010001307000000000000000000000000000000000000000000000000fc020000000000000000000000000000000000004e20ffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d432000000fc02000000000000000000000000000002000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000f10f00000a000400500000000000000048000200706362632873657270656e742d67656e657269632900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005800010078636263286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000735b2ee2"], 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x40082) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x0, @empty}}) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x24004000) unshare(0x60000600) socket(0x10, 0x2, 0x0) (async) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) write(r5, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042402000000ff02000300000000", 0x1e5) executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0xe}, 0x8, 0x0, 0x200, 0x400, 0xcd8, 0x86620090}) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r3, r3, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = userfaultfd(0x80801) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x24000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY(r0, 0x80207501, &(0x7f0000000540)={0x0, 0xffff, 0x8, &(0x7f0000000280)}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000004980)='ns/ipc\x00') fchdir(r4) getpid() fcntl$getownex(r0, 0x10, &(0x7f0000004d40)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004d80), 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x200000000000003b}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000440)={{r6, &(0x7f0000000040)='\x00', 0x2000, &(0x7f00000000c0)={@align=0x6, {0x3fd, 0xaeb, 0x8, 0x4}}, 0x3, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000240)=0x57d}, {[0x5, 0x9, 0x4, 0x81]}, 0x8, 0xfa, &(0x7f0000000340)=""/250}) pidfd_send_signal(r8, 0x24, &(0x7f00000004c0)={0x14, 0xc27, 0x1}, 0x0) read$FUSE(r0, 0x0, 0x0) executing program 33: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0xe}, 0x8, 0x0, 0x200, 0x400, 0xcd8, 0x86620090}) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r3, r3, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = userfaultfd(0x80801) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x24000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY(r0, 0x80207501, &(0x7f0000000540)={0x0, 0xffff, 0x8, &(0x7f0000000280)}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000004980)='ns/ipc\x00') fchdir(r4) getpid() fcntl$getownex(r0, 0x10, &(0x7f0000004d40)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004d80), 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x200000000000003b}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000440)={{r6, &(0x7f0000000040)='\x00', 0x2000, &(0x7f00000000c0)={@align=0x6, {0x3fd, 0xaeb, 0x8, 0x4}}, 0x3, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000240)=0x57d}, {[0x5, 0x9, 0x4, 0x81]}, 0x8, 0xfa, &(0x7f0000000340)=""/250}) pidfd_send_signal(r8, 0x24, &(0x7f00000004c0)={0x14, 0xc27, 0x1}, 0x0) read$FUSE(r0, 0x0, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x10, 0x4, 0x3c8, 0x110, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth1_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x4, {@empty, @mac=@dev, @dev, @broadcast}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@arp={@empty, @empty, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x180000000) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x51, 0x28, 0xfffeffff, 0xfffd, 0xa, 0x9, 0x10, 0x6, 0x2, 0x40, 0x1, 0x9, 0x9, 0xd, 0xff, 0xfffffffd, [0x3, 0x3]}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000040)={0x1, &(0x7f0000000500)=[{0xa, 0x4b, &(0x7f0000000440)="41411a98d6d68308a0e6530b4d3b8468551f5965ed1163193ea4f0a171d6eb6cdce079ebde9936f503825f1c2ca38f04744d4f1781cfcb4c023fd92cbb2b1d33fbe79437a257bde65ae9ff", 0x0, 0x1}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x141000, 0x0) getsockname$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000480)={0x0, 0xea60}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TIOCCBRK(r5, 0x5428) ioctl$TUNSETIFF(r1, 0x6611, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f00000005c0)={@val={0x0, 0x800}, @val={0x3, 0x5, 0x7, 0x3, 0x80, 0x6}, @ipv6=@generic={0x4, 0x6, "84e437", 0x0, 0x0, 0x1, @mcast1, @mcast2}}, 0x36) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x258, 0x0, 0x200}]}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r2, 0x2284, &(0x7f0000000100)=0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) finit_module(r4, 0x0, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x1, @mcast2, 0x100}}, {{0xa, 0x0, 0x2, @local}}}, 0x108) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x20) executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:usbmon_device_t:s0\x00', 0x1001, 0x2) executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r2 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x171, 0x0, r2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) io_setup(0x7f, &(0x7f0000001440)=0x0) r6 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x4, 0x71}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) io_getevents(r5, 0x3, 0x3, &(0x7f0000000580)=[{}, {}, {}], 0x0) io_submit(r5, 0x1, &(0x7f0000000800)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7df, r6, 0x0}]) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x100fb, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r7, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000300)="dcf40f01cb660ff4f0baf80c66b81f3d1e8d66efbafc0cb013eeb85d000f00d067f20f080f71e404660f38819228fb0f00d0cf", 0x33}], 0x1, 0x0, &(0x7f0000000440), 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x47a5, &(0x7f0000000180)={0x0, 0xc38c, 0x200, 0x0, 0x378, 0x0, r6}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE(r8, 0x8001af84, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000109080)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000010a080)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f000010a280)={0x0, 0x0, "7a180a6421142ef3cfce638bb7d98903164d8c20ad8692fd3d19194d2ae2c63306ff13507c888e50f75d26a5fffac73145aaa76a78a3e2a0d37a5a95cd8d0314cc9c4297369eff6cf6f1c3d66b9ea565996ff3e1164628f4f6314cea2acfd355b955f8301775e89a72a6beef24522a46547d2b91c7cd0acae40f78cfe950601f150f2968d54e73b0919e44e42edf1dfbd3c8d94e23febbeb3034500a09d3630292a4b0a575c01893f5df200d7d042348f7bb5213d121911e00def07602c97915c3162778b4028bfc45ff47bd707a4c80f673cfa146c0c48162d61bf53a124b51665da493f2a47c64f2d11a181c3ff45c96530a9e2a7ec9dfb8c141011b265667", "2c3f83906180a3491a243148181d7d86bf40bfa6c83b4772bcd8de0f0f177caeb0131cb6c824ad2c235dc781fd7dcb0460b720d955efd7eafd09f1363d4f6792e718eea6cdc04088a0e8babc56d3aa47f3a2847d844b0e4b5e5791a5b9ec58e60550a5d84969df97c4d0a6c7aeba038e105ec2bb3e51cf8917d06e81e99ae22b443d4d4a1b3b2f844b8821c41f5cea3b098ca98b9d6f8f3649077c7395d404cbbbe9c18a8cc1cb9ff4c3f375af2eba15f30959a3bf3667e3cff87647d28f2d6c75fe79402001a0728132361482bddf2d3b271e25b11f46ffcc7e6872a89d80cc7e6c0e3e0fbf81f9991469ff053da6dab4feef734ed0f9ef89ff97269253944fd62875574c7d0f22eac061e23668ebc7c8911e21275d6007980193a9b048047ed8ffb99068869dada97476f8457d266b851609d0c0c7b5b6cff96443fa9342a2cf17f51435626d461e09416f2b87b4270e0f0cda46012ac206893fb2376fde0f6907d1774d52ae990238e195bb077878948be3a21563822dc2a697d9ceaece530b98ed13b39c77748912979fc694414ca3e71fed1d9595c451d88b3591bc9f8172a78b15818e3265a1e7ace20c04c7e6e20112b580be0eb5c9c396482f0427ea2d69f1f41566f456072223bd9b50babf34430943243079705cd292552991e64803899acfb64f642b2eab9c64457076cef07c28fa6e44108c026c776c92aaee4c50741682692ef0066d8e23e01e4ea6a721f7ba93572a6e8624b43977a64c8f647cca1c1b6727a51e77134e139f2418a6c499c33af23fa193e7bcc0c75fa221b95e29936dc391e2ced30feec1d94e9de1cc4ee1d5ccf6a36f62455fa9810da3e166929f6e5aea4b44e637d258d0b5f59d5029ad99b395c56b71e047f1ad38b6298bb141abc7c38fa68a8928945799b22f0a2c7242038b86757e7b48d4ef2e262964928eedae5e1d36ac0b95e2093c049323f725106090d990bd338d66cf65ebcd3787d95b1e5f55d2866f8b450332933849f0253045e5f00c2676a30d577e7bfffc818d247f53b4c5f87e96b2b214ccefd4ad15373e4686ad32ab1e31384a3c31b7b107b4bb39e3044ff5e2269a4cc0e255a917d6b8d011c0ffe3d5f5704cbb1ba59a38da95f89cefb85ac8bc34857acb8c9befce3bae27719de085f6b020f19712d3d8d3fa74383ba850bbc505067cd5b74d9de13ebc816bce6b3580146d9e740a41a62d52dc198e2fc32895116cd56b7285b4c7cbbbf1e44679e182a1d434ce9c0ab9162051426edfe8d98c6ed3a43b3f948202727c7a5fa0eecd2228993b82460040a7a570d1a47ebfeb735ca4553539716cd5efd82024bfecbdcd51e74b6d9af46f72620f29dcc89ec9496d47de80591a2aefbea18c18791d4959f3d1869ed13604d9cdbd5a7a1ebd166aa199ca1fe61c6fabba1418059e84b3286e52953f9760c297c670ac2894df8e2b3500301e32ca678772c9efacc8e53e122bc237ed4b479e2d3dad2619e222a071452b0bef5eaede5c0a0f68f9c14ab0f24d1ace7e54266aa51d9fda551c3944ca6727eee1143bcd46170b003ba81fbc4e6ff352cc49cecf06102ec3eff9f14b53cfbb15bf6bc4d5fe57c1623d42693acee2a1d151358ea11bef70da68f7948d81a7b97bf8686045ac55c1e4292a9fb0392e8f8d0264d2024594554b4d6e8eafa770c67b08d127d50d9e48df33eadd686c81ff85bcc7d9dfc7bf3a1d065b91458e8246849c96488e2207277a9bbd108f7681237169319bc5f1b24e4817a2a1b2a0f2a60091cb437908645332d8f567920699c8c22fb1750a1d09d74bc5113367bc6472e5b936bd7023279f01695b22455d9021cd67a60c2585e7c89c761c532b4145bffa80de7178e3122eba4d90852ff8efc12a0871ecd35eb0bfd4617758fc62061a0aa22b6a5ea8eca44c0c013b6a7c14a458a6931bf0897ffa104f308b45579a30d6a77661a588d621eec2d3cfe7bca08ad6ba59a49e6bf7f3b01a980b256f545d6c5dec245cdcca16e177497c8b3ea198508ecb403440208dfd8c7ae665b63fab65455002b4400215c019b9a40fc4150e3a854a785428e9b7d70ff612737ad9576bf7427ca0aa83b01e64803d14e663b61421a6505fae7349965a83969cfe4a255eb0feb39d386e2daee8056fc3db3a2e2947910bea1f7935f8b098e0dbeeaaeefdfba01e4bf9f62afc0ab2cf01b8a4b0e080ada52fd233507cca08256bb3a56ea12681d0fbe42774e0159365ac1f12cb5ecbb7e24a45a06da8d90ba6f0d091bae11124e0978d73c9c472e62a816bb59c59a202ee01241898cce1ec8f67a07d45c28b70faa363526fa7d8356e9d7119d11d22ef148ee336fd3bd1e474402de7ab7a35693801a97a60ed726448fe728922dbc18457ca7a7ba46bfeb18d47f265907a64c999864b4b20c8a5ac3734d5aa9178af131f08c46fc505ba0b05f7de7f2acea6492076ace94bf5197831e0561baaa9a086e3988f1a5d1916f80ebebba0deaf7c82ecfcb4705873c0fa33d0cb8dd727c38301f8318db97a1c76b51634a2b537fb6f671888675969e28e014d5cee2fabc5d480e60a341330579cf75d83ff294d76c93cc837faaeec39da989becd616d8d2c147c1ae336f8b83b646069fc6125c290e31eaaf98d2469e409dac899854e992872efda165be8fd6a64de7e5dd9a558f5f731128c41a02280332ecf8c14aac699796808b2befe5c42c60afe2301352fb9367f8a112f04acb57146c30ee11b3eb223c96b1684ec164cb61aa058c94c5062be2ffb71fc8b16c391c0a5c96be360d80b92206465b70f930f28ecf058039ef10b9a8dfe65d88d88af2c1986956e5284ae88b6da09a668d259da035b3870896c5e3bf62a6fcd56292834c5f54f06c7bbcb62c1d426ee5eea660ea0f76f31c77c53841fa474ed234c0857a2b43dc3b8273c390013f3f6860f4027b26b35927ed42752a69bb5377b194b1dec039144af3c728eb3b8191096fcf7696e51135c7d7855f802fdbe15791f27a2240ceef59ee34f85063e49083de7e1b8c577896508ab1d228f3cb61c941a5a7058b96bd1b03358e46457940e40b4d6fe5916663712d39937aa7ff0c04792ad97fc2ae8fdf0adedeac990ebac9567247e4feeacf23d8ccbac90a7b2dc1a88f4ccc5fa1e636c8f52c071850eba99dfba0bc87a15949a708231d7575ed34a568ce63a8a123a228049f9ddedd222f6d4dcb1fa843e48c4e604b9206ce8d0dcbd524102a588f488ded905e3a0611fa86f0da76b2efce5536144302773e0b139125db3594a1eea23097cefdb0c04d09dd39b864fa55118385a3e9707a4d3558e091d55897d15dfaaed1da0545c7d46970bf536d7e9ee891cce0c4dd5c94f45104a39f4124bd39f94ad87e910ee856fdcd4708afc4f606eac8554c81b8bc4e7212e0cb787b87235c250a97dc5c07fcb96539022b05b4e334e43ffdc640f4657abea3e85bbca83f353375fb41ae168b8fbbbf307945d50ab8ee3bc88d446c54580af31ed07d53d462aa07c95b2fc80a0368f57632aafaf676953b0754cc325313adcfe8987ed24dc2e13d88ae48645bb2600518b194bcf31f3590fc40afcf28ee8681bafb0ebaf7d0ae8bf7fdfb548ff1d82d80299dbf1d96746fec477d03b87e34a2fb360c7026dcd5f0364948d2ae054484b4aa3b14daddb3ea40aee30e492693d0fb50ce513a3ace6e2e571014b3c27e7e320a0c1fd9f3bf91903cab419c37fcf40cb2c16f0b644e830ce11fca7ae3f8648dafb817d9b1bf831a78d85cbb8abe53c134f3a031885e8ce64ec1f724ae67145cf22cd4ae119e9a340098af7fad4e1718c36419ffd7fb0d2b3947d2fdd54a353ace6df26f17bb92f52b1c8f6d1c8236e27147352ef9ede78b2c72d5f033d72680754914a35e137c2fbd2790914ca80ffb02c86816faab24814cce0d165e601cb579ffe1447bfc74b82fae5568d4dc3985da5f249bfdfd143c964f6a987e60cd66b8e6dedecf9c695501792916388024fae0ca83f5e58ba077049869ac557ad45f83d766bacde4f80dabbf3606536d13e85c4b5eb603e153871f8b063db6735ef0a394b3dd899a1a0034259d227f98a28f5d629c6866e050f0cb43bd3c2328d66abea290c54178918583202bde0c08d49a2150a7ba0a498d80ca39256699c476b8bc8a0424b72b48fd609cf65005403c6df3c389ce5de378a07ac86c19ef6da18496614daaccb7c0eb87ce3c230179e9775e8ba7ebbaf039240314738c3b638be5a6674d20f74f3a6844e8c0480213a39ffbfd6d71c868ab598cc52449f785ab3a00b7ac9dfb3aa9eac2403387d502497872223f1777f0f7b5664539e524940cb2cbaf6adc8a39c5a18102a4c2a3727e9ee40cba4088d765c484ca842c7e2df756a4dbc1fa8b2092f54336eb7c5a25626dde5524289c0b6ca756101ae8675985c47c193f7eec93de9436eeb3f4c3372d59fe5e8b838c149218fc89b58efaac18cb2d1c8032dcd6cc976dcefc3b70c6230c762fc86d9a31afdace56ce302390bc7ed5362b856df4893b64d8824cf969bfc7870dc53ef2255aa00d7550b8ce84734679139d7c8eee73b54cbc64a415e3795445066cb1f850c3a10b52481f1c65079930766459aa3d0ab2fc60cffd4b8f25bfd84799d67f843588293b0d6faf167095cbd0ab7f0f639dabf13b44d1970e9d6e9f19b783980865e332943e08d10b3d17e6649156d20ae522d2f6b256675a767dfa01de64c971c5f21357f2d79ac9f2f4e7f8af1954050723ec155bd0d58d28fa1f0df1bca6b0a1dfc3514d49dd77dbdc6dc0999f2511c49b55ab79eec4a1df6024a1b53c7b00d075e3a0873154919de640dd3d5b1ff5699491259fee0f1fa6f896b01265bd7d4ed12fd77b51b64525a6e3ddea9651933e5a9a055d229d367819c934ec2f67c07ba9c76a1638bf5759635c3aea4ed90c268fc6aa97cf507114d0a9157b035ddede3ff90af888cdeb4e37f6d6cbae2a89d547c136305527f00029ead7306fa238bed4eb22c668c1c248e149dd6b5101c78195251f8b13afeb836458559e0862880418745e55343f399234d0edc3833a58f4ecb26eb84082bb829ba38d4f4b460c2ee9364583eeb9f2401ce54822d6b303d909dad49ff5eb3d68eef155697882ff5e93e8105e535681c828b1cbaaecf64f9b6320f7d8224c27ef4dfeadd711901cc72be18e919d82d154ab108f7d3f7641a1517787632aa4d32f81f2fb1ec53385baee5e15521d1b06764bd458ab9d86507292081a54d57718b303fc080686a1be3a946bb4eec57b23fbf53208b2d9c24654b2977a5eda70ecb158c1e7bd77636c2423197c39927b693d41ec294858da2a764c0ef546694ef0f7c467bf4366dfd964a49d906654e5e46fd65f155c9e632c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010b280)={0x10000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "3f758542d24c94"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000010c280)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9, r10}, {r11, r13}], 0x6, "1f1ac8efdb8e5f"}) futex$unlock_wake_list64(&(0x7f0000000440)=0x4, 0x20a, 0x8, &(0x7f0000000480)={0x0, 0x3938700}, &(0x7f00000004c0)=0xffffffffffffff81, 0xf) mremap(&(0x7f0000407000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000071c000/0x1000)=nil) executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1d5842, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@sr0, 0x0, &(0x7f00000001c0)={0x8e4, 0x16c, 0x9, 0x0, 0x3, 0x2, 0x9, 0x6, 0x1c09}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x0, 0x850}, 0x30, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) open(&(0x7f0000000400)='./file0\x00', 0xe0841, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="80800000", @ANYRES16=r4, @ANYBLOB="00042abd7000ffdbdf25170000000a00060008021100000100000a00060008021100000000000a001a0008021100000100000a001a00ffffffffffff00000a001a0008021100000100000a001a0008021100000100000a000600ffffffffffff00000a000600ffffffffffff00000a001a000802110000000000"], 0x80}, 0x1, 0x0, 0x0, 0x100}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000160001d7a26bd005b8c3fd000a0000000c00ca8008000b"], 0x20}}, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x230c00, 0x0) read(r6, &(0x7f0000000a00), 0x64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r7, 0x400454ce, 0xa) syz_io_uring_setup(0x3409, &(0x7f0000000080)={0x0, 0xe962, 0x8, 0xfffffffd, 0x136}, 0x0, 0x0, 0x0) close(0x3) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) executing program 34: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1d5842, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@sr0, 0x0, &(0x7f00000001c0)={0x8e4, 0x16c, 0x9, 0x0, 0x3, 0x2, 0x9, 0x6, 0x1c09}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x0, 0x850}, 0x30, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) open(&(0x7f0000000400)='./file0\x00', 0xe0841, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="80800000", @ANYRES16=r4, @ANYBLOB="00042abd7000ffdbdf25170000000a00060008021100000100000a00060008021100000000000a001a0008021100000100000a001a00ffffffffffff00000a001a0008021100000100000a001a0008021100000100000a000600ffffffffffff00000a000600ffffffffffff00000a001a000802110000000000"], 0x80}, 0x1, 0x0, 0x0, 0x100}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000160001d7a26bd005b8c3fd000a0000000c00ca8008000b"], 0x20}}, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x230c00, 0x0) read(r6, &(0x7f0000000a00), 0x64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r7, 0x400454ce, 0xa) syz_io_uring_setup(0x3409, &(0x7f0000000080)={0x0, 0xe962, 0x8, 0xfffffffd, 0x136}, 0x0, 0x0, 0x0) close(0x3) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) executing program 4: sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x114}}, 0x20000000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000700)=""/86, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x83}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (fail_nth: 5) executing program 4: r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f00000002c0)={'ip6gre0\x00', @broadcast}) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc013fd03, &(0x7f0000001000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl(r2, 0xc013fd04, &(0x7f0000000180)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4a, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x14}}, 0x8000) executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0804000000000000010000000100000062e1cf6111809460d79d98166e0894b9dd9be9395ddcb9aeb3d2ba29ddbef3493eb04f7b5e7d41c1440e4d3e76e06dcb279473c858a477abd89249670e258e88bd68e9955963557fdef8e94a34bf76126c3ebd3765c5a83955ea3ec2f549098b104d261b9c0f4def2249970af216ba4eca729bca1dddf06efb5d96db9acbe6d061aee4234cb09d5b02764dd1782f677f42be18722957f39e40afcb0bffd0a77a9ff46216462be4f27aacfefb754fa1e9b9922dc19dcd178849c2b96f075d1541d39d103d92c7153791f9653db140e631e6c006338235225be2c4c99eb14c68db1b6f840600c8a3ee9f6e1b5ac973b14f79141326e3520e368ca262a89fd22ab67ba0b4399304c37bb18756865f6d738162f778015dc09465667be08079e64ddd96d694531996207694039c0b265d7f7ae26746d7082c87889f60603143df207c4a7b87eea1118ff818c50e33a54a107985abdc860d65d7f92a0eeb3889d0647f2bb491e0b9fd77c6f5ec60b2d555017919e02e80fa1bbb9c3009e3262c8f5240d819ed26b9ea263edf4a4dfebde53c87ff6c79ba12bf568ece8f85efe65b50edbc7bc3f9e4205a6a1e714edf7559d1d3c36efd88ba18ad9a4f006b7aa3fe8838129403cc4bae437ccfc0dbc1b7a625a7f48ae50b81a5e1553ae36d2287aad7f1223fdbd3a07e8d8bb5fdcce40a743629cc2c74075a1eaa7833872d5361cfeea1882e36a40272fcaac337b3956d321ec232854efc1b573138bd17fe5a38169cb10fe975521085394af6115a90703f6b24bc2af0c6e4249c13ef465611927f56511c9ab11f205ac6f64e73973d6c0a3875e00189584fba531cf6c931572791e7735a550ced06a2c6ae96c3245a401e89411b14eeeebc73ac2b99af153d71c99e3f29685b8dfd3ccd40bc45b7e8fcd45b79d44ce145ca3195ffd129b15b234c6dfaf0e801d31d683f3486b8d9b9af5c6ebd2b79b329be8d59b0545c3343297ee5e221ea8999980807d0e3e70a5e905d4d53abae5f20a93b1c3fda659c768d9e778755d9ae31bb1f01e3cb88b5e552ef2919b03bb2042a931dce3b8108ccb5b1eed51e2f42ba323f1024243183a2a202b8a733b5f0d3711afb466d7ca6bbf28273f26043c2e0c4308fc3312354b09b1e488372151df88732e01b0fc0af0cdcd91b87934030f18f87133b810ba1208443cfd0652fc195712e915399b01c361096c0b315943b1d5c123505a34c5091c59a124a6ad2566aad9a072d2a77449e418dfb2018b0680784dce9402f35bb3b9bf04381a76f3f63ba85c46da11d77fbc81d51a5f55c3b83575a2aaec4df5c57a534c5f3a6cc6e0f39f4616a4372f0638914dc9971bc596d2636544e9cb40f09982bf7fec24f6a84a694b604c7550371ede29e256d99d5190ad07afc8a2763595bca2676f30000000000000032116c50b97ec6cc045d75e57cd8f150d73afb050ddf051f8ddf9fa2"], 0x408}}], 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001e00210000000000000000000700000005000000000004000a0007"], 0x28}}, 0x0) r3 = gettid() mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a401000026"], 0x1a4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x4, 0x8, 0xfffffffffffffffc, r3}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xffffffffffffffcb) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1032}) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100000000000600d, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) lseek(r7, 0xbfffffffffff7fff, 0x1) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000100000000000208004500003a0000000040117cb17f0000017f00000112"], 0x48) sendto(r5, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x1c}, {&(0x7f0000000700)=""/86, 0x56}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000000040)={0x77359400}) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0x0, 0x24) read$FUSE(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000500)={&(0x7f0000000640)={0x50, 0x0, 0x465a, {0x7, 0x28, 0x4, 0x508818, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40, 0xff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x8000000000000000, {0x7, 0x2b, 0x0, 0x2c000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0x400003, @loopback, 0x2}, 0x1c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x87) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r2, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) userfaultfd(0x801) (async) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x260}) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x260}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmstat\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000140)=""/163, 0xa3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="140100001a000100feffffff00010000ff02000000000000000000000000000000000000000000004e20071c4e2100b5020000203a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc"], 0x154}}, 0x844) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x101a42, 0x57) copy_file_range(r5, &(0x7f0000000000)=0x8, r5, 0x0, 0x4, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) setresuid(r2, r2, r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c000180080001000f0000000c00018008000100040000000c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000004a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004a40)={&(0x7f00000029c0)=ANY=[@ANYBLOB='H \x00\x00', @ANYRES16=r8, @ANYBLOB="080026bd7000fedbdf25110000000c009900050000003d0000000800a400010000000410ac00fb626726db048edc89c17b0d3455ad65d0f31dad9b4408fc61ecef8c8446e916a575ab39bc0a99feaadbfe6b40d0e34d5934b4b7c2368c05ba9e6dd196ca5d62726ded072b6f5a3bcf14fcdcb06b6227e6f857d2fc3a389194da36eabfa3d3815c530b64e5399a19bda99865ec3abb239ba37fe52bff9be043c9373e3cbd9599ad3c9cf28fa9e15f832378b0bc74ff3e26e1e8bb9f6b89e23429e08dcbf5741b4d093adb90b92bbaa794f8bdd6f30fb2467937b30ddd2c497dc476bd2bf69a710aec694ec1f9dd8c02b7bc39116ad1b7090ca252151ec8eaf26d714ef4e4f711c42d9e7a5a2c418d4b8e30c80ebb78c6586b98da515f1e94167bc67ba1495b485945b1828ed6f4c75cfbdb8b110dae79ab13dfeea8d3ffe6f1ec731993f8ff910ea428cf3246e06840137a37eb314806b7d0571b3657d2224eaf48ec4683fc3d3d7343304ad0811a1c49b7b32e0eaf5306458e951a98df440b0cf726ddda0ce278f5a0ca4038ed058342a85940ccc488c7b637edeb9c5f44f2d651eda9811f633d74f2add1610eb546259f0617b36952759744ac5b4617113ee60204525e103cb928dda320bb7f9327cf145ef368f61dd43d5089fb3f19c3b1a89c039ee9fc61ad92aa133b9bbcccaa035e795b8f931df9357e9a371dd6c55a60e3a1cf70e6f2acd21c88888545056cd6ae3f900054132d60fd36f8dee768c01f3b79728f110abddfc00bd2e30578d06f958d8aa32d86e6e1e874f2e3be90398d652bdf1c3bfc17283a1ee4e6dd8f6f3ebbff14aff0dbc5e6fde039b8a32c6ae3f1a64fcb6f493ce1bff342673bdc6a93d39a67d189e213ff0612351ea14444ffa654635ee6aab56e6c6a9aa974680586192b7b8a40dcd696a33c0e49344ef272cf2da02ae26afd72eff4f7859b0a1ff04292be8dce7997f12cb5e35d67c854b4f735d07515dcc0639e6f1cb581e7253ac2b370b586f63411fbdade594c136e5eb9d301c7e95371e0a235c29659d76d4a0d883d590c97052c78d512d67cff96e2429a36f128415a96280e43187c59e8d2109f16ceaf0cd3948dbbf312677a2e4c647934051ba11d673b8eef23988efdb9dd126c82425884f493cde9ff2d833d472dc18425153772502fa96ecf6fc147f6c67696b0d44509b97a4f3dadd1cffce08db0e30cc0b4096361580d7b45efba9aab0062c892c7b4d4bb115361fc5257310f75e3c219e227c58194e929e5fe3f208bb86112d791bd945c143d998f6555789fad237b1b4e81fe65d582efb275626daaba5fe9309a3b548e264ccaa7eab968dd8815baca0cecdb227786657884120c6726447fc81c224ef9b807fbfa8cf41d619f8e7d98feebd5db3c12cb5fd05617b8faa0c64fb109a8cd8dd222da4baebe37b7095dbd4a0cf8da4937208cc32435e8594ea0439ed89f4284555b29bb3febd763fe260a6834b138ae7772a58f4942aa58e12b22efdf6df137cd09e7493799bc7bfb68e4f0eb2f07ce69a5cbd7869bc0885018430e6cf1ea66c74494ca212b9796e67ca28017254203d582b23da6aa201eb0371fee14079a5936f4e4060ef6141e8f73d250a674df8df459d9ccc2ecbf9a181049ffc410397377a7ba1f8ca54c6ad59d0fefbaf8b341fb1b28fea41078b45c1356e1357edf9f8e261b1c585313fa86ce336c7bfb48d08e88a6127e8c0244599e9cde0bf3ee589527aabd83b961cb842a2a7e8b8eb993627c63ff130e48dc2ace5a6e958e11ea85471a51422644592482304d23f99dc5126d2cfa3cf050f545d8d6553c38adbea79fe9e1771c6bb9cf637c0301770e5e39d7434ff6019e4819841c3f7a2f8b1608c48613ed0316ac1fcb7f93d081a2b4cd26e054944521fad50800ea1c63041aa5e5a461b9c836f77978599da495ff2e7f449d7c9d32cbae6495887515a5e136153cfde0890b245523cbd93c554f95897cce83e1bfec0880a1d1cc57443942c88c21dc1714efad44bf2d48bb4ff3b9a743e7690215531be21aa9e218a83448f0eecceb24df31c15bc01dc8604496d6ec1bd415d6b7045376c21995e841360c9c318adbfd448d01e6077381c4a38d87d7827b26eadd0e71c3de5cbce812e7a3f62cf1e2b878b3bb6c58451ddb6cfb6494d937bc7cbfece0a342541c6ca1b11fe98fba57e662197965b010e5c3305fb033232023fceddf42af3998809e52fa3016593363376c57a12cc5b1830814566b9de26894dd2aa5feb6726f7c883c9d0e74d6a7728f12cbfd2b5892530de3f7ad3c3b31a9c997a2228497bd17323ce6195489a8ffdc677495cad46ffebd264d5458a9bacb47233463068145bbb8a9468763936318bb7a7c6804e986c1b7864c07ac6d58f963b2d478fd5d023cb5ad3a5a81ebd7b28a2dade9025fbc29fa3eeb381d73a10991cf004f7193e00bdc68def00ce1ffda24cccb22e3ea94693c5d20c400f50b579dea04271af7507345d5dd01ff7f3c9ab38f2a784660ed4b76e0c6299e1255f087c9f0671780af2753594c9bf2baf55415d0d3e6677276c19867ea82ad7136cdd672655ed3044deff0b61fb7455bcddda7b54eabc6da64160b2d0b8d9293bd337746b534cbfb201f19962640f1e4fcbad6036efe2339a3bca082d96320e203a1ae7f63c142042ee78f4690b554db251221e5025cf2e814c119aa4b45532bcdf8f5dd06bdae4ff1ae78edb1645c1c2fceb94b3ae083d100d98c394cfa548a74b8ac009c773d0de970de1a8b67ad9212b9b32ce9cbf276b6a0e14aac68d9c588534fbcf95b4d97e8323fa01f214d597082939df355733d6c1d612cfd686ddb64e19a10d54cc4b5b6ecae76a0e95022d2226b8d9749e7483f0cc2398f8544e7e83faf06aa0d93f04305f4ab28b6186afd79d0b98b4c2835480f6bea3038b6c6d0cb0b1a2449a880075e02ce7386b3384c331263744b65468512927e3ef63ac082b8bbb526118923974c29f3d002ba847576ac2a01218c1118fb8c14faba1a29a17979c3e4124178560f5e51a1c2f2db3ae904c7f8c87252e9f218eef6c4d975ff21000027b1958a69b31313da629e878f04654d7f338260d2f9c3ce584f46c5b10cf85f49f053f24e89152a47c1d1fbfc03ca78fdc8cfcf60f753d6c7c7a2de3bdb51554f6d63af8ee9dcc86401f282c465bbc452c32fbd96a5588cf478ca0825b7a5c801f9d7b8f924c7a7b361fbd0f3205b1779da354a776d72fa7e4c57a91b35d53f0595a6e985f4b9fd9410701b99726c5cefac6c4f1a3d43dfe34629b9748f49d009fddf084025774ada3d19b5a1f498d73d07333de944bb2392747cbf8fea1d178b8f42b6b9cbe7707f3d75775a3547e52e6d72766f0d2def1c6e140f74fd409d9119a23b386b55d8afed75107eb7494caa4b84b839ee7648d34f3428a8105c6926cbcdbf41daa937a63b20a752a6d64facee8cfaa074e01fa16df55cba074b1a814a2ea27fec90ea0f4a34437f8710675e6c2af6afee0bee8d68a3d49dab832e3a40ccfeb7ef3de48b1ca3c7f15cc053b241567770a793280db72dbf7bba43c2810012206c0f920af05194fad6df02e0a885cbd791855e13a208eb70899f20f88eb6e81fba5587fd622bde6963ce62be0bf70c5d89663f66666dd5f96fe82f66b73d44548259dd6301309f9a3b072c3c267c3a4b25a15275b347187e973c056e2301bce92997ba5b0ce3964ee1fa77b56072d882c27c0576f5c4255eb60a3bf2f2c15db57c63b955a534d9128944b6cbe9b94eeb4ba455861065b345dc8ad16d9553cb8c163cbceacf8787815cba73d0b58b1253d1d458e72ee0fca25f0e5bfd6035112346c968b1225cf16bd267314c3c0e5b479e0b008ba42a74d5bcf84bf47a9fe480050d40acb17f43ddbda1737bf6ac92b5f0cfde33a96591a2e9f15de70547cbbf2b84bb6e8aac3ebdc4e008c2f50461e51a2fddeb5937164507cf3e4cd0fc781a60a6afa5d47404e87354171ec05d8649160e2c4fc504091a45b424b12c6ea79a47662ea36858f09a5e2bac812ae7fbdafadae5d2dbcb39c551e1cf2e36fd343370ec4906d6af180c9ef2537e49594b34569c9238a8648cb284b73a7d4b075c5d767c79998666dfbed023662b9f5f1177f3c0439c9bcfee4da1d215bfc8c8c28f10c3ee30c32a1b553a75610f75c891b5d1d25f4f5e4b46166c7ad2ff60f842cb1eb845d825a35756d8a6f48a6ad3ac803073b8841f376b66681204c366de4a93b2f3e3af781a3af28d0644f63ffe581e6e7c5614fce5a8ecee190b9947c46cd4909907846fc90ce448bf410ad691426b340ba45ddc8008f9c40ffa8a0c23a6e0d2aa1aed368d7a96cd17379cb8fbf227096b953c0e7748a193f682515e8c5b3d3853f2b76c68ccfb770507d6f283e61742db8f3c5a95186c55a2ed2d823d0867e98de4d62470c60fa454c178b302d4c6b9ceffec0ec21fa1abbfebe13432780689de99f56386cdf081e67645745864e6c3b5e2e0075c5f4fa6ff891e69e3b493d0d12445cd3b692955ce0f3c3b0314e7316338a277dca9b2913fe4851032b1bb4d8b2e6c33f59a2811e32f3271387a0548242f3a9c4a010d611499e64cc88829e4eac95eb9f949f5ab1fdeee7cb5c995380879f4152c5f177d5f74da490b8b6e5a2b66269c836704a761eac1255a173da9e88035656b6c6cf2a4bca240e7b488359cbcc6b9cdecda60f65c3698686a45ecd235be17aa63378e190bb13c9d7bf835491846bc52550643067279fef1424b0d17879c1dfd0bb5edd5ed0d1ebd43119cfd4919e89953dc4c5d64e331e3232297c7783e0d3bb6cddfe3a192742b1c356c6874d46012ab93f5c3ddab3ebb7b8e14b62e5ffa6da112a4a597a2b41bf2ab4cf2584a38f8f6be7b5381b40665beaf6eb6a3ff100601bb0b25fc4639703685d47b690f5190e948a5e4be2dde5b660857e0c4d6d0c0a71edf4b617b39ce95f181c2bdb5a07c08d230c84038465e3f7bea2886652da846eac8c0dea6b73f44da5827383d1f3181998cde6ee9a2dac15c41b97bc572e39ad37e79614aba672535f6eec1a5d9bcc24413e62e2775ed68e5fced21dcfd253355ed65b9c215e3fc1d38d082aed9529df13dd30f4bb094bbea748b5e152c643f43204fa0ba3d6ac6d2e5149cf66529e254752edfc39e6029771d405a259af09218ec46e87107d8c4f5cdb1b5afcb88d184e4167f5a8d675225a002a5824ca8b43e8977153b389af8b4e1076d9ac8c6681818ac7c89269a333586db2eb3e050644c60698103f10ecca83c538cc76fd716a610cc9daf480e36f053d36777d17131950790c6f25f5662f0e7f1d5285d9db028045690d5d39eb459a664a2c41100ccafd2bae6a91bfaf2104c0e6d54a197d19cb8d7fc1aa9cb26763d91c9b01ac8e412d970647e1b54950ee86f25aeba0c0babb7aeacd282346d6e5a25295defdbca2358accd7beffe164dcfc54cdbd5461ade74cb533677de793426b2c498da38691a50b2ad59563c031615dbb1fa989368e6a50a10c51454a86fbb664a0161d295d5f831d01fab53e95e14da0714f386cbf30e487d81d9721db0c70370cc5a2fc05f9defc8bcf7095f876fb94861d5a2aff745fcf1132d7ae605cb68a38a98d37c56ed05b99b4769accf32d0f5164c342db0aac54cb2e614316370b5919a0226a4f589b15e12db6443a358c8a8c78a7c042758e53c05addbe576a61550cf95feb055ce9cf844f1c64a004bffafdabd08bf4702536eed0edaa960c6f00e7d5ba252dcc1b41e368ae051faf1a6a01b41031189f7979e43da825dedeeac460410ac001829e6a01826ee3017dbcadaf8adfbeb98e414d92e790175562b79831c31e29f53720a75bcb9d15b5ff0e3c95bd2f6f9be9b5034179845cf90a023dd3367e7600655ca2d3a8a9e5e7d0c23be2316a8bc2759460c1439e54b35b7043927dbb859c70a9264d68f56804ab1491ff820fe33ad3a7850b3f3d413cdce74c514e5cf46e5b62e7df34dcb1a675f09b47a27f184ccc958fb70e0c9108df69007df4c19f79236538bab09ff1425645c23d3aa880c090bec792d8ae4a5fd4af4703ebb8d9f6d21749fa68fc67e14af1896fe16c8014a251fdf24fbd1dc79b38f2b21541fb083575ffbdb83e6b353b87e54714862a95e646744c0d0a4ce581e728c7398181abd8afe993c7244dec4d4a3931e8a2e4187eefd845471cd53d3dcedcaa6a780b6d242000fcb3fc610e2abcc1055b8e9ba9b6d1bd69c33f663240f0aacad6eac675e3db7a5ca2680b4f53f5a30e9df1f950cd9d8ff9aa8e4c488dbfcfe89466f5489a24844236108ab98118c4b54054f84acfe8271dd0ab60945e28c82891370b0e10691b454c909afc5c867082efb8bda57abca82256309326469c0db4a4f202355eb74abe5cef5a417a1e916d2d35a61751310c5a95bd10284f2bf8be3334878d4c503f5d9b5f99eed5f20971f36018a90814eef85ac5a2f219f48ec125404cebae56d888cf42ea1d290ffc359d1ffe5fd363d742d3ef39b45eebba4f967d21308713fcb8864296c7720a8ef909af1fe56c238d97eb3185a2f9369a1447458ca3accdfc3cf55bccc02ad99f58aeeaad424bf51dab92c05b71e60066e6331799ed9d1f7fc2796249d043f500ebd37654406a1183902b7142cfbebadbc5ad5d638bff27af02589d9fca052b5f4ac843208399d7c77be24d65fd61294a97c37a5a2f6b7733f2baf6515fa29abe755800c2f4b313aa94d99999a4fe9a59b6f165b923021d8050dc4c2863e8828e4f2f30b487d9bf888e4cb1a2b5b1bdb10f28b2c226c0878e65500dc1cb4cd12b7abe166f5b34d16b6e9adc9c76c6224347cef7ce640befe423c51c6c28e2b53c21404d9d09712e1dd695604bb986298df1072c9921b50c2e97e2c531900a1118f4e8174db1ef4ea6d566d0927b76c90e7ab1e395f1fca62de6845312d09482968b80c75a3f059ac04bfa032368091d9bb4aaa9f2e2b84ba2c5e9fe0596f9db478b7c5dbd8034016b8cccc657dbc76cbc3a6d65123ce043b54ab4796d8009e7fcc4689175d26bd77cf62f2dcacd88d1d5c9c2c3b044b39ac48b68434b80aa223e96166f14010128d0f7222138a2404d6595601e76b6d03d705cfcd4e8fd9aa198f7a8fab686b082172adf1894a613b86b12b614895eac5df1beaed76b23ce8672f164110d921ef7a56f00b0a22fe404f9bca1c9148fc45026a80f25d8e8fd46a533008cad4920b4124a546842b2c4f069e1234282ebc0cbec6ac5efa1c5c81786bb26bd43ea52b166c44502ed70cbf2df4c296f948a021eac4234f0bf786d803b01daca8cae06eb9e88ac37553cc51343cbdbcdb30885ee238f8ed4204c77f55328d498f9c6569f9e76b513a25472a41aee08ad8e349420c9f1cf639dc9d65665c5e97d4a7e606deba08c4a1c56c6a3fc3409f54522a068146241ebfde5a7282a74a46015fc39c136675bc3c53181111861bdb05cb12070eb5a697c017ca75129390bc45ed0c853cd9bce4fa497b8766736450c76b5be5f947fc87ed299c172f33365d6a8133673d9d40c04c4dc5d191e366bbe40690942ea5055620044caa28a51bd74bdd7937ee50041a8cad78346fda698c9afaf66b114ee867cdc3b35433f8911e7ca5cab495a291c789553737916af6df8d40461e116b6c216ce2a51e76d9d6298cad96b6d8d372ec137859ab0d80a09993e988deb0f63a5185037e1f144841968d73436a3c4b8efda8da675f5f65a556dbaaed27527714be6b3bc758b9902f5465f7d734b0620c261df0482e4c127a98f6f37248e547ff3af2ab0d95d3f8cfb64244acd60a40e657553f70342dcd51e9742ce47dc971055516abf0cd89c94bf6b3080b29c0db810c147c8e9639b96ae2df14f248dae82052bdfbe8fa54adfc7baeee28d2b45b3ad833c6b6ba73cc607161b5bae0aff322757857f0e8bbf24a58fcf4181ea4a1c719e0450822047ea60342b8e0503cbe1e53aa665791c4ea6915f5050317ddbf4071b22ffe39065f5ad9b4676baad07f8f087ac63d9f67a8ac07b8af2fc074027777446b23f5ba41f6687188f2992159c5cf7ba64dc4ff3d886a6e25f5ca02563dbe7cb25385bd277d69c5497f0131e8aa8819055bdfca11d0799581d6039397c8429677faf54d7c27299d0519c1f9d3b2171da4c84cdf69be2362d7622b31700a748dbefd42d290b4abe6cba38e0e032e295b1cbfc566ba17e185d995dd6535c3407b5dd5327b695324d9fd4b17c8dcd1bae8b2e1f5f297513e8ac61ad102e2adc118296628bd954c51cdd8f4a919d97afab68e383962bd1261d12552ce4624b05ec89068016ed7ce4f230ffc27d34a388730abbb1bb6953becf14f3e1d2af8a3189d25edbe05283b318050ebfc5eda462d9b4f462e6d3cbdc45ae7cfa8481040dc553f97ce82ce63910d48435e667a58977b90164b9ad6184145ebbfe0e92673527cf4dbbc9f68c9226564900618ebbe0a812f06867e4f46fa0f90fe15a4c3b034dd513ded4ac1f05ebadca0e76e00b834253c9671ce23a5b3d633bcf1956bc0c990774fd5cc7f03520cebb612226bc190780cde118b1327411e2a35dfda9c01d603c27c1e2b0c11f28b7201e7547af42f7b42b58fc2abbeb81cb132fb7ad402efab31e12e076d304832fc0f0018021c9f6d25bf39208d4b8e9579aeffe9ff30cf3926c26607b3a7878db5a31b404b7ac60ab95df2cabacd82572e38bc0254574d03be41f4d520771b00e49718054b4b6014851f416b02a4e91fa823a05899b27af35209bafacdae1f7915c87f9c6a85b834452752c1cd275f862666e8ff2d9339dd84b31bca41d95bfa263cfc9f07791eb9d4869fa7097ebe28687b6ec5585d703a7f690ce6d928fa627a3ace9534cb2afa1bf0a595f7c9a90de99d15eae577fda0493250b2c48b173cc9cdde4b5b3a3c6fdd3b4e1354ea717801b5b9685f2a3d42cb929c39087dec8b9e2b66c885251bdc5fa24730fb85a6746276957e1cbc8ba77637030bead45bbe35732bcf2cec1f93747dc097c590921f942840702376aa5d6a6792cad438325a3908bd0317298cecf9ec29201e952d6123930951048cf523e0ecd95c1edfa77fa2460099d30f4000e5b3348c265f02e11bb59afab30d638a7aaddcd7b85372c214523c79d29369082c8c6b770d2e8044cce30ea44cc94e499c479629901c4a6e834d3a3338b4c4e498a069b0052dcbab384367f442201643a6938bc8e23afe0f1464da490b86f8bf81aed649a39d83e2312382dfd510216992ea7373f989d6f15148038f427df38db794cd26cb06d103fcaab604bfadb7304a9adab7dd774fd50908cea4266aab6c495210eb7f038c7c89b3d02a78b9036d194ded09215a3f82154ae5963751e2c73de80626b19dab8f7b27089690f67c97e34a4a3f9b189d7ed5a74bac32b4efb63b7cf2a5f116565c8f18e25a05ee2c4f69181735311120a0630ae88345330738d96fae841ad7fc59b19dc0d59bc2ba71e113baa1bd6e91fef11bce9c17527a884ab4cd692247e9ec71143c3caaa2cd8fca92931f1f94bc36e7e7235a1e13d408a78f1251f7127379a73f4f8f8a86b882268d758928202eaf425149b240a2349b62e8ff8e6dcb5aa732b4bc73fb867a4ac93ba8a3f8c21798aab1bfed648d456791e5ab409a580ffd58394830237b5a7841d25e0e002601f73ff849be7ddd668cb6ea41e4359ca0b75178cd270197a42bd65638e914796607b7584804f5a2b41e5ebfe3e4d2ca6829202a34cb0e35f22bf98d9acbb2c9da745c597363d1cc655ad2315d9e290d909e348e10aad66ff7bb48d8b5fb23dda2f588f6e0677f20cb8cf1b04813bbd8868316f8890540d0da7e70dd7a9959759531ccdd6decc2bb552fefa1ab80314f8d2627318cf213c1b0e4f0dc7ea2a254a122f52e175465368fc67cf3b3b2b44cf6dfc9f03927e61437b4f480eb30309f9115c0a7d9239eca869e365a1a9be92a014965dd4cfcbfa32daf483ebfb7e1e08e6ef96f2e8f06648ea7d734b3b6d27806e37bb9550cb7b3d6e1ae280f3b5ce5c7924a936c81e5e760f318aa83633ccbd23a3ba6ed8bde94200d1f42b2231e34abb41c2bc1d9aefa5625daaca0dc87975c982b39381e15170c4708d132dc6ea9bcb97123b9764801c3a9c0c7b366d283ccd61e125e321188fdb0f4ade93a1579e299a70232371582dc410d59c334ffaf5a2ca858215921828de5dadfba6a6dfa5a9bcdfb8ec1572298176676042c3604041159d573fde23f53387939e14798cfce62ce72debea70278ec60e3826fb8f8b1313bd7881c429286f8de9329e5c3d5ec59eab1737e5aee4c1123a20406072cf943b3807d75e5593c68b1f1fcd7097b29f2653479634e3a2c776316a8e2ffcbccff8236abd931d3f459396a54d24b8eaeeecb9f1374208bbb7e71c179074ed05e6ed29a22f6079e6a86808d34ab846a7b158c84592d2e132f82f61fd020ef79dcde69d99fbc5f28451f61824f989e9f300649ea269cab5a7e9e2cb412cd357da615f3b954ddf2a379047c1ed5b48dd47b0ccf68d1db0f7815b49b36911fd6b5303411752a34ceb9aeb2974643d7ae65b71184f15d16fbd6a0eba4bdc48c35d5247bc501c79df6494e92a40142b6f51179616acd3944ca4899256ad7d80b54296d02f0de1db42e9fbdc1c416dea54d5aee39281b3f073d0e1f78a927a7e4bd4959025273b6b44f356dbcee9e3c5d7b9d5ec521206d3f303b892c095d712e2796a15024f2278c25fe1e1c53e2b84a37a0eec12e9a8a1110c09a704ced1d091e416e78df05c6fa88573faffe5cf1aaa6dfe61f16abbdc1c18e3ca0e19a281dd686b4e1f2d88018d15bc278c1b6d7b2007ee7d64d9768a620eecf1c5414382211a583acbf9ef7de50823c2dc63bf06fb2fc10f1a85f3b3ac5539691aeff8212805f0eb6b3bcf3af6f308635f74e5ab053826a4d60d24ed82e25df885e3822ca6f0bfde24bbc0f722e081da9bdd69a3236f28f969e7f780f9eb9f30e595867143ac1e79873c8ff4bcdc7f98ed35412ee8437c31505231632370be0cb1a874bde55a88696914975618acaf3f957639215de18e526fee0350dd7e74cd333f2cb726280aeb89b941e507f83740265eba40afdf5f970c303b0ce8f9dea7f00d5517143e8d12999b6b7cda396b9790476d2e0df0a9a5829538321e9d46963520262f9d79f23999f9320a31bfdf6ed91dd713298ff791a156b3cce52fdd2268e6a98d67dcc7d6a0cf970997a15470987a9e684b0c0944e4bd31217690b00adee3f433e40116be28bcb5642d82fd9161fe3aa067dfb749a3a0cea21c29fb27d54c76e4a292f60d326ff8fae017445410baed0c16aa01146cd7259bbccada6495dd0a3d0afdc078250f35c6bb318bd6f2d2e0df4e8b6cdb60044a40ec4e27c94c56573e9a3b56bd48a2f58e4ece5be78115e5ffa430cba0b88ee6070372ab697b71bf0c7eb0393aa28c57d2b572579f1d475a9c084dce11985d5d9e89918a9dfd93ef6f8346bf7ea4ee0b8df6e4c5fae95df7b9fcc3121f945d9bef4dbc30e62a0ab5a8f2a380dedcce007d357569157028e60de97356544ba060012000900000005007400030000000500740006000000"], 0x2048}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) r9 = fsmount(r4, 0x0, 0x0) fchdir(r9) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000340)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r10, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689", 0x2, 0x20000000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ptrace$ARCH_SHSTK_STATUS(0x1e, r3, &(0x7f00000003c0), 0x5005) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESHEX, @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) executing program 35: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmstat\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000140)=""/163, 0xa3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="140100001a000100feffffff00010000ff02000000000000000000000000000000000000000000004e20071c4e2100b5020000203a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc"], 0x154}}, 0x844) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x101a42, 0x57) copy_file_range(r5, &(0x7f0000000000)=0x8, r5, 0x0, 0x4, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) setresuid(r2, r2, r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c000180080001000f0000000c00018008000100040000000c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000004a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004a40)={&(0x7f00000029c0)=ANY=[@ANYBLOB='H \x00\x00', @ANYRES16=r8, @ANYBLOB="080026bd7000fedbdf25110000000c009900050000003d0000000800a400010000000410ac00fb626726db048edc89c17b0d3455ad65d0f31dad9b4408fc61ecef8c8446e916a575ab39bc0a99feaadbfe6b40d0e34d5934b4b7c2368c05ba9e6dd196ca5d62726ded072b6f5a3bcf14fcdcb06b6227e6f857d2fc3a389194da36eabfa3d3815c530b64e5399a19bda99865ec3abb239ba37fe52bff9be043c9373e3cbd9599ad3c9cf28fa9e15f832378b0bc74ff3e26e1e8bb9f6b89e23429e08dcbf5741b4d093adb90b92bbaa794f8bdd6f30fb2467937b30ddd2c497dc476bd2bf69a710aec694ec1f9dd8c02b7bc39116ad1b7090ca252151ec8eaf26d714ef4e4f711c42d9e7a5a2c418d4b8e30c80ebb78c6586b98da515f1e94167bc67ba1495b485945b1828ed6f4c75cfbdb8b110dae79ab13dfeea8d3ffe6f1ec731993f8ff910ea428cf3246e06840137a37eb314806b7d0571b3657d2224eaf48ec4683fc3d3d7343304ad0811a1c49b7b32e0eaf5306458e951a98df440b0cf726ddda0ce278f5a0ca4038ed058342a85940ccc488c7b637edeb9c5f44f2d651eda9811f633d74f2add1610eb546259f0617b36952759744ac5b4617113ee60204525e103cb928dda320bb7f9327cf145ef368f61dd43d5089fb3f19c3b1a89c039ee9fc61ad92aa133b9bbcccaa035e795b8f931df9357e9a371dd6c55a60e3a1cf70e6f2acd21c88888545056cd6ae3f900054132d60fd36f8dee768c01f3b79728f110abddfc00bd2e30578d06f958d8aa32d86e6e1e874f2e3be90398d652bdf1c3bfc17283a1ee4e6dd8f6f3ebbff14aff0dbc5e6fde039b8a32c6ae3f1a64fcb6f493ce1bff342673bdc6a93d39a67d189e213ff0612351ea14444ffa654635ee6aab56e6c6a9aa974680586192b7b8a40dcd696a33c0e49344ef272cf2da02ae26afd72eff4f7859b0a1ff04292be8dce7997f12cb5e35d67c854b4f735d07515dcc0639e6f1cb581e7253ac2b370b586f63411fbdade594c136e5eb9d301c7e95371e0a235c29659d76d4a0d883d590c97052c78d512d67cff96e2429a36f128415a96280e43187c59e8d2109f16ceaf0cd3948dbbf312677a2e4c647934051ba11d673b8eef23988efdb9dd126c82425884f493cde9ff2d833d472dc18425153772502fa96ecf6fc147f6c67696b0d44509b97a4f3dadd1cffce08db0e30cc0b4096361580d7b45efba9aab0062c892c7b4d4bb115361fc5257310f75e3c219e227c58194e929e5fe3f208bb86112d791bd945c143d998f6555789fad237b1b4e81fe65d582efb275626daaba5fe9309a3b548e264ccaa7eab968dd8815baca0cecdb227786657884120c6726447fc81c224ef9b807fbfa8cf41d619f8e7d98feebd5db3c12cb5fd05617b8faa0c64fb109a8cd8dd222da4baebe37b7095dbd4a0cf8da4937208cc32435e8594ea0439ed89f4284555b29bb3febd763fe260a6834b138ae7772a58f4942aa58e12b22efdf6df137cd09e7493799bc7bfb68e4f0eb2f07ce69a5cbd7869bc0885018430e6cf1ea66c74494ca212b9796e67ca28017254203d582b23da6aa201eb0371fee14079a5936f4e4060ef6141e8f73d250a674df8df459d9ccc2ecbf9a181049ffc410397377a7ba1f8ca54c6ad59d0fefbaf8b341fb1b28fea41078b45c1356e1357edf9f8e261b1c585313fa86ce336c7bfb48d08e88a6127e8c0244599e9cde0bf3ee589527aabd83b961cb842a2a7e8b8eb993627c63ff130e48dc2ace5a6e958e11ea85471a51422644592482304d23f99dc5126d2cfa3cf050f545d8d6553c38adbea79fe9e1771c6bb9cf637c0301770e5e39d7434ff6019e4819841c3f7a2f8b1608c48613ed0316ac1fcb7f93d081a2b4cd26e054944521fad50800ea1c63041aa5e5a461b9c836f77978599da495ff2e7f449d7c9d32cbae6495887515a5e136153cfde0890b245523cbd93c554f95897cce83e1bfec0880a1d1cc57443942c88c21dc1714efad44bf2d48bb4ff3b9a743e7690215531be21aa9e218a83448f0eecceb24df31c15bc01dc8604496d6ec1bd415d6b7045376c21995e841360c9c318adbfd448d01e6077381c4a38d87d7827b26eadd0e71c3de5cbce812e7a3f62cf1e2b878b3bb6c58451ddb6cfb6494d937bc7cbfece0a342541c6ca1b11fe98fba57e662197965b010e5c3305fb033232023fceddf42af3998809e52fa3016593363376c57a12cc5b1830814566b9de26894dd2aa5feb6726f7c883c9d0e74d6a7728f12cbfd2b5892530de3f7ad3c3b31a9c997a2228497bd17323ce6195489a8ffdc677495cad46ffebd264d5458a9bacb47233463068145bbb8a9468763936318bb7a7c6804e986c1b7864c07ac6d58f963b2d478fd5d023cb5ad3a5a81ebd7b28a2dade9025fbc29fa3eeb381d73a10991cf004f7193e00bdc68def00ce1ffda24cccb22e3ea94693c5d20c400f50b579dea04271af7507345d5dd01ff7f3c9ab38f2a784660ed4b76e0c6299e1255f087c9f0671780af2753594c9bf2baf55415d0d3e6677276c19867ea82ad7136cdd672655ed3044deff0b61fb7455bcddda7b54eabc6da64160b2d0b8d9293bd337746b534cbfb201f19962640f1e4fcbad6036efe2339a3bca082d96320e203a1ae7f63c142042ee78f4690b554db251221e5025cf2e814c119aa4b45532bcdf8f5dd06bdae4ff1ae78edb1645c1c2fceb94b3ae083d100d98c394cfa548a74b8ac009c773d0de970de1a8b67ad9212b9b32ce9cbf276b6a0e14aac68d9c588534fbcf95b4d97e8323fa01f214d597082939df355733d6c1d612cfd686ddb64e19a10d54cc4b5b6ecae76a0e95022d2226b8d9749e7483f0cc2398f8544e7e83faf06aa0d93f04305f4ab28b6186afd79d0b98b4c2835480f6bea3038b6c6d0cb0b1a2449a880075e02ce7386b3384c331263744b65468512927e3ef63ac082b8bbb526118923974c29f3d002ba847576ac2a01218c1118fb8c14faba1a29a17979c3e4124178560f5e51a1c2f2db3ae904c7f8c87252e9f218eef6c4d975ff21000027b1958a69b31313da629e878f04654d7f338260d2f9c3ce584f46c5b10cf85f49f053f24e89152a47c1d1fbfc03ca78fdc8cfcf60f753d6c7c7a2de3bdb51554f6d63af8ee9dcc86401f282c465bbc452c32fbd96a5588cf478ca0825b7a5c801f9d7b8f924c7a7b361fbd0f3205b1779da354a776d72fa7e4c57a91b35d53f0595a6e985f4b9fd9410701b99726c5cefac6c4f1a3d43dfe34629b9748f49d009fddf084025774ada3d19b5a1f498d73d07333de944bb2392747cbf8fea1d178b8f42b6b9cbe7707f3d75775a3547e52e6d72766f0d2def1c6e140f74fd409d9119a23b386b55d8afed75107eb7494caa4b84b839ee7648d34f3428a8105c6926cbcdbf41daa937a63b20a752a6d64facee8cfaa074e01fa16df55cba074b1a814a2ea27fec90ea0f4a34437f8710675e6c2af6afee0bee8d68a3d49dab832e3a40ccfeb7ef3de48b1ca3c7f15cc053b241567770a793280db72dbf7bba43c2810012206c0f920af05194fad6df02e0a885cbd791855e13a208eb70899f20f88eb6e81fba5587fd622bde6963ce62be0bf70c5d89663f66666dd5f96fe82f66b73d44548259dd6301309f9a3b072c3c267c3a4b25a15275b347187e973c056e2301bce92997ba5b0ce3964ee1fa77b56072d882c27c0576f5c4255eb60a3bf2f2c15db57c63b955a534d9128944b6cbe9b94eeb4ba455861065b345dc8ad16d9553cb8c163cbceacf8787815cba73d0b58b1253d1d458e72ee0fca25f0e5bfd6035112346c968b1225cf16bd267314c3c0e5b479e0b008ba42a74d5bcf84bf47a9fe480050d40acb17f43ddbda1737bf6ac92b5f0cfde33a96591a2e9f15de70547cbbf2b84bb6e8aac3ebdc4e008c2f50461e51a2fddeb5937164507cf3e4cd0fc781a60a6afa5d47404e87354171ec05d8649160e2c4fc504091a45b424b12c6ea79a47662ea36858f09a5e2bac812ae7fbdafadae5d2dbcb39c551e1cf2e36fd343370ec4906d6af180c9ef2537e49594b34569c9238a8648cb284b73a7d4b075c5d767c79998666dfbed023662b9f5f1177f3c0439c9bcfee4da1d215bfc8c8c28f10c3ee30c32a1b553a75610f75c891b5d1d25f4f5e4b46166c7ad2ff60f842cb1eb845d825a35756d8a6f48a6ad3ac803073b8841f376b66681204c366de4a93b2f3e3af781a3af28d0644f63ffe581e6e7c5614fce5a8ecee190b9947c46cd4909907846fc90ce448bf410ad691426b340ba45ddc8008f9c40ffa8a0c23a6e0d2aa1aed368d7a96cd17379cb8fbf227096b953c0e7748a193f682515e8c5b3d3853f2b76c68ccfb770507d6f283e61742db8f3c5a95186c55a2ed2d823d0867e98de4d62470c60fa454c178b302d4c6b9ceffec0ec21fa1abbfebe13432780689de99f56386cdf081e67645745864e6c3b5e2e0075c5f4fa6ff891e69e3b493d0d12445cd3b692955ce0f3c3b0314e7316338a277dca9b2913fe4851032b1bb4d8b2e6c33f59a2811e32f3271387a0548242f3a9c4a010d611499e64cc88829e4eac95eb9f949f5ab1fdeee7cb5c995380879f4152c5f177d5f74da490b8b6e5a2b66269c836704a761eac1255a173da9e88035656b6c6cf2a4bca240e7b488359cbcc6b9cdecda60f65c3698686a45ecd235be17aa63378e190bb13c9d7bf835491846bc52550643067279fef1424b0d17879c1dfd0bb5edd5ed0d1ebd43119cfd4919e89953dc4c5d64e331e3232297c7783e0d3bb6cddfe3a192742b1c356c6874d46012ab93f5c3ddab3ebb7b8e14b62e5ffa6da112a4a597a2b41bf2ab4cf2584a38f8f6be7b5381b40665beaf6eb6a3ff100601bb0b25fc4639703685d47b690f5190e948a5e4be2dde5b660857e0c4d6d0c0a71edf4b617b39ce95f181c2bdb5a07c08d230c84038465e3f7bea2886652da846eac8c0dea6b73f44da5827383d1f3181998cde6ee9a2dac15c41b97bc572e39ad37e79614aba672535f6eec1a5d9bcc24413e62e2775ed68e5fced21dcfd253355ed65b9c215e3fc1d38d082aed9529df13dd30f4bb094bbea748b5e152c643f43204fa0ba3d6ac6d2e5149cf66529e254752edfc39e6029771d405a259af09218ec46e87107d8c4f5cdb1b5afcb88d184e4167f5a8d675225a002a5824ca8b43e8977153b389af8b4e1076d9ac8c6681818ac7c89269a333586db2eb3e050644c60698103f10ecca83c538cc76fd716a610cc9daf480e36f053d36777d17131950790c6f25f5662f0e7f1d5285d9db028045690d5d39eb459a664a2c41100ccafd2bae6a91bfaf2104c0e6d54a197d19cb8d7fc1aa9cb26763d91c9b01ac8e412d970647e1b54950ee86f25aeba0c0babb7aeacd282346d6e5a25295defdbca2358accd7beffe164dcfc54cdbd5461ade74cb533677de793426b2c498da38691a50b2ad59563c031615dbb1fa989368e6a50a10c51454a86fbb664a0161d295d5f831d01fab53e95e14da0714f386cbf30e487d81d9721db0c70370cc5a2fc05f9defc8bcf7095f876fb94861d5a2aff745fcf1132d7ae605cb68a38a98d37c56ed05b99b4769accf32d0f5164c342db0aac54cb2e614316370b5919a0226a4f589b15e12db6443a358c8a8c78a7c042758e53c05addbe576a61550cf95feb055ce9cf844f1c64a004bffafdabd08bf4702536eed0edaa960c6f00e7d5ba252dcc1b41e368ae051faf1a6a01b41031189f7979e43da825dedeeac460410ac001829e6a01826ee3017dbcadaf8adfbeb98e414d92e790175562b79831c31e29f53720a75bcb9d15b5ff0e3c95bd2f6f9be9b5034179845cf90a023dd3367e7600655ca2d3a8a9e5e7d0c23be2316a8bc2759460c1439e54b35b7043927dbb859c70a9264d68f56804ab1491ff820fe33ad3a7850b3f3d413cdce74c514e5cf46e5b62e7df34dcb1a675f09b47a27f184ccc958fb70e0c9108df69007df4c19f79236538bab09ff1425645c23d3aa880c090bec792d8ae4a5fd4af4703ebb8d9f6d21749fa68fc67e14af1896fe16c8014a251fdf24fbd1dc79b38f2b21541fb083575ffbdb83e6b353b87e54714862a95e646744c0d0a4ce581e728c7398181abd8afe993c7244dec4d4a3931e8a2e4187eefd845471cd53d3dcedcaa6a780b6d242000fcb3fc610e2abcc1055b8e9ba9b6d1bd69c33f663240f0aacad6eac675e3db7a5ca2680b4f53f5a30e9df1f950cd9d8ff9aa8e4c488dbfcfe89466f5489a24844236108ab98118c4b54054f84acfe8271dd0ab60945e28c82891370b0e10691b454c909afc5c867082efb8bda57abca82256309326469c0db4a4f202355eb74abe5cef5a417a1e916d2d35a61751310c5a95bd10284f2bf8be3334878d4c503f5d9b5f99eed5f20971f36018a90814eef85ac5a2f219f48ec125404cebae56d888cf42ea1d290ffc359d1ffe5fd363d742d3ef39b45eebba4f967d21308713fcb8864296c7720a8ef909af1fe56c238d97eb3185a2f9369a1447458ca3accdfc3cf55bccc02ad99f58aeeaad424bf51dab92c05b71e60066e6331799ed9d1f7fc2796249d043f500ebd37654406a1183902b7142cfbebadbc5ad5d638bff27af02589d9fca052b5f4ac843208399d7c77be24d65fd61294a97c37a5a2f6b7733f2baf6515fa29abe755800c2f4b313aa94d99999a4fe9a59b6f165b923021d8050dc4c2863e8828e4f2f30b487d9bf888e4cb1a2b5b1bdb10f28b2c226c0878e65500dc1cb4cd12b7abe166f5b34d16b6e9adc9c76c6224347cef7ce640befe423c51c6c28e2b53c21404d9d09712e1dd695604bb986298df1072c9921b50c2e97e2c531900a1118f4e8174db1ef4ea6d566d0927b76c90e7ab1e395f1fca62de6845312d09482968b80c75a3f059ac04bfa032368091d9bb4aaa9f2e2b84ba2c5e9fe0596f9db478b7c5dbd8034016b8cccc657dbc76cbc3a6d65123ce043b54ab4796d8009e7fcc4689175d26bd77cf62f2dcacd88d1d5c9c2c3b044b39ac48b68434b80aa223e96166f14010128d0f7222138a2404d6595601e76b6d03d705cfcd4e8fd9aa198f7a8fab686b082172adf1894a613b86b12b614895eac5df1beaed76b23ce8672f164110d921ef7a56f00b0a22fe404f9bca1c9148fc45026a80f25d8e8fd46a533008cad4920b4124a546842b2c4f069e1234282ebc0cbec6ac5efa1c5c81786bb26bd43ea52b166c44502ed70cbf2df4c296f948a021eac4234f0bf786d803b01daca8cae06eb9e88ac37553cc51343cbdbcdb30885ee238f8ed4204c77f55328d498f9c6569f9e76b513a25472a41aee08ad8e349420c9f1cf639dc9d65665c5e97d4a7e606deba08c4a1c56c6a3fc3409f54522a068146241ebfde5a7282a74a46015fc39c136675bc3c53181111861bdb05cb12070eb5a697c017ca75129390bc45ed0c853cd9bce4fa497b8766736450c76b5be5f947fc87ed299c172f33365d6a8133673d9d40c04c4dc5d191e366bbe40690942ea5055620044caa28a51bd74bdd7937ee50041a8cad78346fda698c9afaf66b114ee867cdc3b35433f8911e7ca5cab495a291c789553737916af6df8d40461e116b6c216ce2a51e76d9d6298cad96b6d8d372ec137859ab0d80a09993e988deb0f63a5185037e1f144841968d73436a3c4b8efda8da675f5f65a556dbaaed27527714be6b3bc758b9902f5465f7d734b0620c261df0482e4c127a98f6f37248e547ff3af2ab0d95d3f8cfb64244acd60a40e657553f70342dcd51e9742ce47dc971055516abf0cd89c94bf6b3080b29c0db810c147c8e9639b96ae2df14f248dae82052bdfbe8fa54adfc7baeee28d2b45b3ad833c6b6ba73cc607161b5bae0aff322757857f0e8bbf24a58fcf4181ea4a1c719e0450822047ea60342b8e0503cbe1e53aa665791c4ea6915f5050317ddbf4071b22ffe39065f5ad9b4676baad07f8f087ac63d9f67a8ac07b8af2fc074027777446b23f5ba41f6687188f2992159c5cf7ba64dc4ff3d886a6e25f5ca02563dbe7cb25385bd277d69c5497f0131e8aa8819055bdfca11d0799581d6039397c8429677faf54d7c27299d0519c1f9d3b2171da4c84cdf69be2362d7622b31700a748dbefd42d290b4abe6cba38e0e032e295b1cbfc566ba17e185d995dd6535c3407b5dd5327b695324d9fd4b17c8dcd1bae8b2e1f5f297513e8ac61ad102e2adc118296628bd954c51cdd8f4a919d97afab68e383962bd1261d12552ce4624b05ec89068016ed7ce4f230ffc27d34a388730abbb1bb6953becf14f3e1d2af8a3189d25edbe05283b318050ebfc5eda462d9b4f462e6d3cbdc45ae7cfa8481040dc553f97ce82ce63910d48435e667a58977b90164b9ad6184145ebbfe0e92673527cf4dbbc9f68c9226564900618ebbe0a812f06867e4f46fa0f90fe15a4c3b034dd513ded4ac1f05ebadca0e76e00b834253c9671ce23a5b3d633bcf1956bc0c990774fd5cc7f03520cebb612226bc190780cde118b1327411e2a35dfda9c01d603c27c1e2b0c11f28b7201e7547af42f7b42b58fc2abbeb81cb132fb7ad402efab31e12e076d304832fc0f0018021c9f6d25bf39208d4b8e9579aeffe9ff30cf3926c26607b3a7878db5a31b404b7ac60ab95df2cabacd82572e38bc0254574d03be41f4d520771b00e49718054b4b6014851f416b02a4e91fa823a05899b27af35209bafacdae1f7915c87f9c6a85b834452752c1cd275f862666e8ff2d9339dd84b31bca41d95bfa263cfc9f07791eb9d4869fa7097ebe28687b6ec5585d703a7f690ce6d928fa627a3ace9534cb2afa1bf0a595f7c9a90de99d15eae577fda0493250b2c48b173cc9cdde4b5b3a3c6fdd3b4e1354ea717801b5b9685f2a3d42cb929c39087dec8b9e2b66c885251bdc5fa24730fb85a6746276957e1cbc8ba77637030bead45bbe35732bcf2cec1f93747dc097c590921f942840702376aa5d6a6792cad438325a3908bd0317298cecf9ec29201e952d6123930951048cf523e0ecd95c1edfa77fa2460099d30f4000e5b3348c265f02e11bb59afab30d638a7aaddcd7b85372c214523c79d29369082c8c6b770d2e8044cce30ea44cc94e499c479629901c4a6e834d3a3338b4c4e498a069b0052dcbab384367f442201643a6938bc8e23afe0f1464da490b86f8bf81aed649a39d83e2312382dfd510216992ea7373f989d6f15148038f427df38db794cd26cb06d103fcaab604bfadb7304a9adab7dd774fd50908cea4266aab6c495210eb7f038c7c89b3d02a78b9036d194ded09215a3f82154ae5963751e2c73de80626b19dab8f7b27089690f67c97e34a4a3f9b189d7ed5a74bac32b4efb63b7cf2a5f116565c8f18e25a05ee2c4f69181735311120a0630ae88345330738d96fae841ad7fc59b19dc0d59bc2ba71e113baa1bd6e91fef11bce9c17527a884ab4cd692247e9ec71143c3caaa2cd8fca92931f1f94bc36e7e7235a1e13d408a78f1251f7127379a73f4f8f8a86b882268d758928202eaf425149b240a2349b62e8ff8e6dcb5aa732b4bc73fb867a4ac93ba8a3f8c21798aab1bfed648d456791e5ab409a580ffd58394830237b5a7841d25e0e002601f73ff849be7ddd668cb6ea41e4359ca0b75178cd270197a42bd65638e914796607b7584804f5a2b41e5ebfe3e4d2ca6829202a34cb0e35f22bf98d9acbb2c9da745c597363d1cc655ad2315d9e290d909e348e10aad66ff7bb48d8b5fb23dda2f588f6e0677f20cb8cf1b04813bbd8868316f8890540d0da7e70dd7a9959759531ccdd6decc2bb552fefa1ab80314f8d2627318cf213c1b0e4f0dc7ea2a254a122f52e175465368fc67cf3b3b2b44cf6dfc9f03927e61437b4f480eb30309f9115c0a7d9239eca869e365a1a9be92a014965dd4cfcbfa32daf483ebfb7e1e08e6ef96f2e8f06648ea7d734b3b6d27806e37bb9550cb7b3d6e1ae280f3b5ce5c7924a936c81e5e760f318aa83633ccbd23a3ba6ed8bde94200d1f42b2231e34abb41c2bc1d9aefa5625daaca0dc87975c982b39381e15170c4708d132dc6ea9bcb97123b9764801c3a9c0c7b366d283ccd61e125e321188fdb0f4ade93a1579e299a70232371582dc410d59c334ffaf5a2ca858215921828de5dadfba6a6dfa5a9bcdfb8ec1572298176676042c3604041159d573fde23f53387939e14798cfce62ce72debea70278ec60e3826fb8f8b1313bd7881c429286f8de9329e5c3d5ec59eab1737e5aee4c1123a20406072cf943b3807d75e5593c68b1f1fcd7097b29f2653479634e3a2c776316a8e2ffcbccff8236abd931d3f459396a54d24b8eaeeecb9f1374208bbb7e71c179074ed05e6ed29a22f6079e6a86808d34ab846a7b158c84592d2e132f82f61fd020ef79dcde69d99fbc5f28451f61824f989e9f300649ea269cab5a7e9e2cb412cd357da615f3b954ddf2a379047c1ed5b48dd47b0ccf68d1db0f7815b49b36911fd6b5303411752a34ceb9aeb2974643d7ae65b71184f15d16fbd6a0eba4bdc48c35d5247bc501c79df6494e92a40142b6f51179616acd3944ca4899256ad7d80b54296d02f0de1db42e9fbdc1c416dea54d5aee39281b3f073d0e1f78a927a7e4bd4959025273b6b44f356dbcee9e3c5d7b9d5ec521206d3f303b892c095d712e2796a15024f2278c25fe1e1c53e2b84a37a0eec12e9a8a1110c09a704ced1d091e416e78df05c6fa88573faffe5cf1aaa6dfe61f16abbdc1c18e3ca0e19a281dd686b4e1f2d88018d15bc278c1b6d7b2007ee7d64d9768a620eecf1c5414382211a583acbf9ef7de50823c2dc63bf06fb2fc10f1a85f3b3ac5539691aeff8212805f0eb6b3bcf3af6f308635f74e5ab053826a4d60d24ed82e25df885e3822ca6f0bfde24bbc0f722e081da9bdd69a3236f28f969e7f780f9eb9f30e595867143ac1e79873c8ff4bcdc7f98ed35412ee8437c31505231632370be0cb1a874bde55a88696914975618acaf3f957639215de18e526fee0350dd7e74cd333f2cb726280aeb89b941e507f83740265eba40afdf5f970c303b0ce8f9dea7f00d5517143e8d12999b6b7cda396b9790476d2e0df0a9a5829538321e9d46963520262f9d79f23999f9320a31bfdf6ed91dd713298ff791a156b3cce52fdd2268e6a98d67dcc7d6a0cf970997a15470987a9e684b0c0944e4bd31217690b00adee3f433e40116be28bcb5642d82fd9161fe3aa067dfb749a3a0cea21c29fb27d54c76e4a292f60d326ff8fae017445410baed0c16aa01146cd7259bbccada6495dd0a3d0afdc078250f35c6bb318bd6f2d2e0df4e8b6cdb60044a40ec4e27c94c56573e9a3b56bd48a2f58e4ece5be78115e5ffa430cba0b88ee6070372ab697b71bf0c7eb0393aa28c57d2b572579f1d475a9c084dce11985d5d9e89918a9dfd93ef6f8346bf7ea4ee0b8df6e4c5fae95df7b9fcc3121f945d9bef4dbc30e62a0ab5a8f2a380dedcce007d357569157028e60de97356544ba060012000900000005007400030000000500740006000000"], 0x2048}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) r9 = fsmount(r4, 0x0, 0x0) fchdir(r9) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000340)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r10, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689", 0x2, 0x20000000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ptrace$ARCH_SHSTK_STATUS(0x1e, r3, &(0x7f00000003c0), 0x5005) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESHEX, @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_vlan\x00'}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='f2fs\x00', 0x500020, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[]) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3d, &(0x7f0000000040)=0x10, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x148}, 0x1, 0x7}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000000)=""/12, &(0x7f0000000100)=0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188ca", 0xe) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f00000012c0), 0x800, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x16) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) executing program 2: r0 = syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x100) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/acpi/parameters/ec_event_clearing\x00', 0x0, 0xa4) read(r1, &(0x7f0000000500), 0x64) r2 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0xff03) syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x100) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/acpi/parameters/ec_event_clearing\x00', 0x0, 0xa4) (async) read(r1, &(0x7f0000000500), 0x64) (async) syz_pidfd_open(r0, 0x0) (async) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0xff03) (async) executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000400030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x1000) executing program 36: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000400030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x1000) executing program 8: r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000040), &(0x7f0000000080)) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_usb_control_io(r0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2710}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000000)={0x20, 0x18, 0x7, "9ad5798929b15c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0x8800, 0x0) close(r2) socket(0x4, 0x80000, 0xc) clock_adjtime(0x2, &(0x7f0000000140)={0x0, 0x2f1d6431, 0x5, 0x9, 0x7f, 0x8, 0x4, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x8, 0x1, 0x8, 0x89f, 0x2, 0x6, 0xcc6, 0x6, 0x5, 0xb, 0x0, 0x7, 0x2, 0x2}) mount$binderfs(0x0, &(0x7f0000000300)='./binderfs\x00', 0x0, 0x100000, 0x0) executing program 8: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet(0x2, 0x802, 0x1) connect$inet(r1, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000140)=0x4, 0x4) write(r1, &(0x7f0000000000)="08001800000020a3", 0x8) read(r1, &(0x7f00000003c0)=""/14, 0xe) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0xb, 0x82]) executing program 8: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xd8ed, 0x0, 0x2, 0x156}, &(0x7f00000002c0), &(0x7f00000003c0), &(0x7f0000000140)) (async) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xd8ed, 0x0, 0x2, 0x156}, &(0x7f00000002c0)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) unshare(0x24020400) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x8591, 0x80, 0x3, 0x3d9}, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb470, 0x200, 0x1ffe, 0x10000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b98, 0x10000, 0x0, 0x30b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfb10, 0x10, 0x1, 0x1af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc56e, 0x40, 0x0, 0x30f}}], 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0xfff8, 0x4, 0x0, 0x0}}, 0x0) socket(0x4, 0x80000, 0xc) executing program 8: unshare(0x22020600) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000580)=0x44c8e9627c047c53) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff, 0x0, 0xff, 0x5, 0xda73, 0x5}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000585000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="01031e0003001400060066f7cb6e00030601fc000000000000000000000000000000ff020000000000000000000000000001", @ANYRES32=0x41424344], 0x4c) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ppoll(&(0x7f0000000240)=[{r4, 0x2127}], 0x1, 0x0, 0x0, 0x0) executing program 8: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x40104d00, &(0x7f0000000900)="00000100000000000000010001") r2 = dup(r0) read$FUSE(r2, &(0x7f0000008280)={0x2020}, 0x2020) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000080)={0x2, "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"}) ptrace(0x10, r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000104, 0x0, 0x7}]}) ptrace$pokeuser(0x6, r3, 0x388, 0x7a092814) ptrace$pokeuser(0x6, r3, 0x358, 0xffffffeffffffffe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000fedbdf", @ANYRES32=r3, @ANYBLOB="06000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:usbmon_device_t:s0\x00', 0x1001, 0x2) executing program 6: syz_ublk_setup_io_uring(0x1a, &(0x7f0000000040)={0x0, 0x32b5, 0x10, 0x2, 0x158}, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000ff0c05060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb0000060003003039000008000300"], 0xbc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) executing program 37: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000fedbdf", @ANYRES32=r3, @ANYBLOB="06000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:usbmon_device_t:s0\x00', 0x1001, 0x2) executing program 6: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x102, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 6: prctl$PR_SET_IO_FLUSHER(0x41, 0x1) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e0000010000000000000c000800080008040101000a"], 0xc4}, 0x1, 0x0, 0x0, 0x19}, 0x4) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000000)={{0x0, 0x0}, {0x0, 0x0}}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES64=r2, @ANYRES16=r3, @ANYRES16=r4], 0x33) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4e20, @local}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)="2116fa", 0x3) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x3ffd, 0x0, 0x1, [@generic="00101e5738"]}]}, 0x24}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt/ioports\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000240)='./proc_mnt\x00', &(0x7f0000000280), 0x410, &(0x7f0000002380)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}, {@inode64}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x2d, 0x25]}}], [{@uid_gt={'uid>', r12}}, {@seclabel}, {@appraise}]}) prctl$PR_MCE_KILL_GET(0x3d) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x17) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r13, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20004004) executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0, 0x300}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = open$dir(&(0x7f00000002c0)='./my_sys/bus/pci/devices/0000:00:01.0/config/file0\x00', 0x40202, 0x56) openat(r4, &(0x7f0000000340)='./file0\x00', 0x90000, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) fallocate(r2, 0x1, 0x3, 0x8) write$uinput_user_dev(r2, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x40, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x0, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbc, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x1, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000201, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x8000003, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x2000000, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x7, 0xe, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x433, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0xec00000, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x5, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0xffff, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x461f, 0x400004, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) executing program 6: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x401, 0x2, 0x5, 0x5}, {0xb31c, 0x5, 0xbf, 0x8001}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x35, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0xffff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x1000f, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x41, 0x2000803, 0xffffffff, 0x10000, 0x4, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x0, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r1, 0x5211}, {r1, 0x2}, {r0, 0x1000}], 0x3, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={[0x5]}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r4, &(0x7f0000000740), 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000080)='4', 0x1) cachestat(r4, &(0x7f0000000100)={0x4, 0x5296}, &(0x7f0000000180), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) executing program 38: socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x35, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0xffff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x1000f, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x41, 0x2000803, 0xffffffff, 0x10000, 0x4, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x0, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r1, 0x5211}, {r1, 0x2}, {r0, 0x1000}], 0x3, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={[0x5]}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r4, &(0x7f0000000740), 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000080)='4', 0x1) cachestat(r4, &(0x7f0000000100)={0x4, 0x5296}, &(0x7f0000000180), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 9: r0 = gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xca60, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000e80), 0x2041, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xea, 0x200000a, 0x12, r2, 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 9: r0 = socket$netlink(0x10, 0x3, 0xf) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002c00)) executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0x7, 0x80, 0x8, 0x1, 0x2f42, 0x1}, 0x1c) executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') read$FUSE(r0, 0x0, 0x0) executing program 9: pipe(&(0x7f0000000040)={0xffffffffffffffff}) bind$inet6(r0, 0x0, 0x0) executing program 9: fchown(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) syz_open_procfs(0x0, &(0x7f0000000640)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x0, r0, 0xf2) executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) shutdown(r0, 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 9: syz_clone3(0x0, 0x0) epoll_create1(0x80000) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x84080) setns(0xffffffffffffffff, 0x4000000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x801fffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) readlink(0x0, 0x0, 0x0) executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) executing program 7: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) executing program 9: syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x1, 0x1fb}, 0x0) fsopen(0x0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x1) inotify_init1(0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) executing program 7: syz_open_procfs(0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0xa0b84111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000001c0)) executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) executing program 5: madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x64) executing program 5: pivot_root(&(0x7f00000000c0)='./cgroup\x00', 0x0) executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000280)) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 5: socket$inet6(0xa, 0x800000000000002, 0x1) program crashed: SYZFAIL: open(/proc/self/ns/net) failed bisect: bisecting 67 programs bisect: split chunks (needed=false): <67> bisect: split chunk #0 of len 67 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 1, 7, 14, 3, 3, 15, 7, 17, 19, 17, 9, 9, 9, 11, 30, 27, 13, 28, 28, 20, 20, 8, 20, 2, 2, 2, 2, 10, 2, 20, 10, 6, 3, 20, 2, 8, 6, 2, 1, 1, 2, 20, 1] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188ca", 0xe) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f00000012c0), 0x800, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x16) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) executing program 2: r0 = syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x100) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/acpi/parameters/ec_event_clearing\x00', 0x0, 0xa4) read(r1, &(0x7f0000000500), 0x64) r2 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0xff03) syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x100) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/acpi/parameters/ec_event_clearing\x00', 0x0, 0xa4) (async) read(r1, &(0x7f0000000500), 0x64) (async) syz_pidfd_open(r0, 0x0) (async) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0xff03) (async) executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000400030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x1000) executing program 36: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000400030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x1000) executing program 8: r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000040), &(0x7f0000000080)) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_usb_control_io(r0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2710}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000000)={0x20, 0x18, 0x7, "9ad5798929b15c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0x8800, 0x0) close(r2) socket(0x4, 0x80000, 0xc) clock_adjtime(0x2, &(0x7f0000000140)={0x0, 0x2f1d6431, 0x5, 0x9, 0x7f, 0x8, 0x4, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x8, 0x1, 0x8, 0x89f, 0x2, 0x6, 0xcc6, 0x6, 0x5, 0xb, 0x0, 0x7, 0x2, 0x2}) mount$binderfs(0x0, &(0x7f0000000300)='./binderfs\x00', 0x0, 0x100000, 0x0) executing program 8: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet(0x2, 0x802, 0x1) connect$inet(r1, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000140)=0x4, 0x4) write(r1, &(0x7f0000000000)="08001800000020a3", 0x8) read(r1, &(0x7f00000003c0)=""/14, 0xe) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0xb, 0x82]) executing program 8: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xd8ed, 0x0, 0x2, 0x156}, &(0x7f00000002c0), &(0x7f00000003c0), &(0x7f0000000140)) (async) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xd8ed, 0x0, 0x2, 0x156}, &(0x7f00000002c0)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) unshare(0x24020400) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x8591, 0x80, 0x3, 0x3d9}, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb470, 0x200, 0x1ffe, 0x10000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b98, 0x10000, 0x0, 0x30b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfb10, 0x10, 0x1, 0x1af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc56e, 0x40, 0x0, 0x30f}}], 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0xfff8, 0x4, 0x0, 0x0}}, 0x0) socket(0x4, 0x80000, 0xc) executing program 8: unshare(0x22020600) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000580)=0x44c8e9627c047c53) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff, 0x0, 0xff, 0x5, 0xda73, 0x5}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000585000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="01031e0003001400060066f7cb6e00030601fc000000000000000000000000000000ff020000000000000000000000000001", @ANYRES32=0x41424344], 0x4c) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ppoll(&(0x7f0000000240)=[{r4, 0x2127}], 0x1, 0x0, 0x0, 0x0) executing program 8: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x40104d00, &(0x7f0000000900)="00000100000000000000010001") r2 = dup(r0) read$FUSE(r2, &(0x7f0000008280)={0x2020}, 0x2020) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000080)={0x2, "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"}) ptrace(0x10, r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000104, 0x0, 0x7}]}) ptrace$pokeuser(0x6, r3, 0x388, 0x7a092814) ptrace$pokeuser(0x6, r3, 0x358, 0xffffffeffffffffe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000fedbdf", @ANYRES32=r3, @ANYBLOB="06000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:usbmon_device_t:s0\x00', 0x1001, 0x2) executing program 6: syz_ublk_setup_io_uring(0x1a, &(0x7f0000000040)={0x0, 0x32b5, 0x10, 0x2, 0x158}, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000ff0c05060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb0000060003003039000008000300"], 0xbc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) executing program 37: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000fedbdf", @ANYRES32=r3, @ANYBLOB="06000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:usbmon_device_t:s0\x00', 0x1001, 0x2) executing program 6: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x102, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 6: prctl$PR_SET_IO_FLUSHER(0x41, 0x1) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e0000010000000000000c000800080008040101000a"], 0xc4}, 0x1, 0x0, 0x0, 0x19}, 0x4) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000000)={{0x0, 0x0}, {0x0, 0x0}}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES64=r2, @ANYRES16=r3, @ANYRES16=r4], 0x33) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4e20, @local}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)="2116fa", 0x3) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x3ffd, 0x0, 0x1, [@generic="00101e5738"]}]}, 0x24}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt/ioports\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000240)='./proc_mnt\x00', &(0x7f0000000280), 0x410, &(0x7f0000002380)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}, {@inode64}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x2d, 0x25]}}], [{@uid_gt={'uid>', r12}}, {@seclabel}, {@appraise}]}) prctl$PR_MCE_KILL_GET(0x3d) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x17) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r13, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20004004) executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0, 0x300}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = open$dir(&(0x7f00000002c0)='./my_sys/bus/pci/devices/0000:00:01.0/config/file0\x00', 0x40202, 0x56) openat(r4, &(0x7f0000000340)='./file0\x00', 0x90000, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) fallocate(r2, 0x1, 0x3, 0x8) write$uinput_user_dev(r2, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x40, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x0, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbc, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x1, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000201, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x8000003, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x2000000, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x7, 0xe, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x433, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0xec00000, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x5, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0xffff, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x461f, 0x400004, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) executing program 6: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x401, 0x2, 0x5, 0x5}, {0xb31c, 0x5, 0xbf, 0x8001}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x35, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0xffff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x1000f, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x41, 0x2000803, 0xffffffff, 0x10000, 0x4, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x0, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r1, 0x5211}, {r1, 0x2}, {r0, 0x1000}], 0x3, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={[0x5]}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r4, &(0x7f0000000740), 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000080)='4', 0x1) cachestat(r4, &(0x7f0000000100)={0x4, 0x5296}, &(0x7f0000000180), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) executing program 38: socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x35, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0xffff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x1000f, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x41, 0x2000803, 0xffffffff, 0x10000, 0x4, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x0, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r1, 0x5211}, {r1, 0x2}, {r0, 0x1000}], 0x3, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={[0x5]}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r4, &(0x7f0000000740), 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000080)='4', 0x1) cachestat(r4, &(0x7f0000000100)={0x4, 0x5296}, &(0x7f0000000180), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 9: r0 = gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xca60, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000e80), 0x2041, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xea, 0x200000a, 0x12, r2, 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 9: r0 = socket$netlink(0x10, 0x3, 0xf) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002c00)) executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0x7, 0x80, 0x8, 0x1, 0x2f42, 0x1}, 0x1c) executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') read$FUSE(r0, 0x0, 0x0) executing program 9: pipe(&(0x7f0000000040)={0xffffffffffffffff}) bind$inet6(r0, 0x0, 0x0) executing program 9: fchown(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) syz_open_procfs(0x0, &(0x7f0000000640)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x0, r0, 0xf2) executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) shutdown(r0, 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 9: syz_clone3(0x0, 0x0) epoll_create1(0x80000) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x84080) setns(0xffffffffffffffff, 0x4000000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x801fffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) readlink(0x0, 0x0, 0x0) executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) executing program 7: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) executing program 9: syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x1, 0x1fb}, 0x0) fsopen(0x0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x1) inotify_init1(0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) executing program 7: syz_open_procfs(0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0xa0b84111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000001c0)) executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) executing program 5: madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x64) executing program 5: pivot_root(&(0x7f00000000c0)='./cgroup\x00', 0x0) executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000280)) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 5: socket$inet6(0xa, 0x800000000000002, 0x1) program crashed: SYZFAIL: posix_spawnp failed bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 2, 2, 2, 2, 10, 2, 20, 10, 6, 3, 20, 2, 8, 6, 2, 1, 1, 2, 20, 1] detailed listing: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 9: r0 = socket$netlink(0x10, 0x3, 0xf) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002c00)) executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0x7, 0x80, 0x8, 0x1, 0x2f42, 0x1}, 0x1c) executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') read$FUSE(r0, 0x0, 0x0) executing program 9: pipe(&(0x7f0000000040)={0xffffffffffffffff}) bind$inet6(r0, 0x0, 0x0) executing program 9: fchown(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) syz_open_procfs(0x0, &(0x7f0000000640)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x0, r0, 0xf2) executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) shutdown(r0, 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 9: syz_clone3(0x0, 0x0) epoll_create1(0x80000) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x84080) setns(0xffffffffffffffff, 0x4000000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x801fffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) readlink(0x0, 0x0, 0x0) executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) executing program 7: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) executing program 9: syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x1, 0x1fb}, 0x0) fsopen(0x0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x1) inotify_init1(0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) executing program 7: syz_open_procfs(0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0xa0b84111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000001c0)) executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) executing program 5: madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x64) executing program 5: pivot_root(&(0x7f00000000c0)='./cgroup\x00', 0x0) executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000280)) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 5: socket$inet6(0xa, 0x800000000000002, 0x1) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 1, 7, 14, 3, 3, 15, 7, 17, 19, 17, 9, 9, 9, 11, 30, 27, 13, 28, 28, 20, 20, 8] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188ca", 0xe) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f00000012c0), 0x800, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x16) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) executing program 2: r0 = syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x100) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/acpi/parameters/ec_event_clearing\x00', 0x0, 0xa4) read(r1, &(0x7f0000000500), 0x64) r2 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0xff03) syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x100) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/acpi/parameters/ec_event_clearing\x00', 0x0, 0xa4) (async) read(r1, &(0x7f0000000500), 0x64) (async) syz_pidfd_open(r0, 0x0) (async) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0xff03) (async) executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000400030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x1000) executing program 36: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000400030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x1000) executing program 8: r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000040), &(0x7f0000000080)) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_usb_control_io(r0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2710}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000000)={0x20, 0x18, 0x7, "9ad5798929b15c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0x8800, 0x0) close(r2) socket(0x4, 0x80000, 0xc) clock_adjtime(0x2, &(0x7f0000000140)={0x0, 0x2f1d6431, 0x5, 0x9, 0x7f, 0x8, 0x4, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x8, 0x1, 0x8, 0x89f, 0x2, 0x6, 0xcc6, 0x6, 0x5, 0xb, 0x0, 0x7, 0x2, 0x2}) mount$binderfs(0x0, &(0x7f0000000300)='./binderfs\x00', 0x0, 0x100000, 0x0) executing program 8: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet(0x2, 0x802, 0x1) connect$inet(r1, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000140)=0x4, 0x4) write(r1, &(0x7f0000000000)="08001800000020a3", 0x8) read(r1, &(0x7f00000003c0)=""/14, 0xe) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0xb, 0x82]) executing program 8: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xd8ed, 0x0, 0x2, 0x156}, &(0x7f00000002c0), &(0x7f00000003c0), &(0x7f0000000140)) (async) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xd8ed, 0x0, 0x2, 0x156}, &(0x7f00000002c0)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) unshare(0x24020400) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x8591, 0x80, 0x3, 0x3d9}, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb470, 0x200, 0x1ffe, 0x10000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b98, 0x10000, 0x0, 0x30b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfb10, 0x10, 0x1, 0x1af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc56e, 0x40, 0x0, 0x30f}}], 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0xfff8, 0x4, 0x0, 0x0}}, 0x0) socket(0x4, 0x80000, 0xc) executing program 8: unshare(0x22020600) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000580)=0x44c8e9627c047c53) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff, 0x0, 0xff, 0x5, 0xda73, 0x5}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000585000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="01031e0003001400060066f7cb6e00030601fc000000000000000000000000000000ff020000000000000000000000000001", @ANYRES32=0x41424344], 0x4c) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ppoll(&(0x7f0000000240)=[{r4, 0x2127}], 0x1, 0x0, 0x0, 0x0) executing program 8: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x40104d00, &(0x7f0000000900)="00000100000000000000010001") r2 = dup(r0) read$FUSE(r2, &(0x7f0000008280)={0x2020}, 0x2020) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000080)={0x2, "d8bc3d628a41bf18566ce24738397fe1513d40ce2dd2e928cb74ff5c2e87113ceb35bf0c193dabf361d9317a3a5f600858e3b487b7fa45e67e9e12f5783d55fdf093ec8f9bce89d5e27ac05db51e4040d11266f72239b0e29e88a3219ce4500c767a9265fde591204e89f8f5fbc71afdc82fdb39b7957ece2453f0be0cee34a3f115ef1d466a59caf61d657f46d4e8362b64a6a711fb7b590b646ef80ee86bc122de9006588b9146256cf4df3bfbf29c7483a98fe483bada875b9436efc6158bd3f104206460f07b9f9414bcde476fbfd4f08af353f9ce27d41f88ae4faff2cac76adda2867fbf616d60e224044f4209e6f5c3c558b0865e6a875cfcd8ebc7ba803b666fcf30b5e143cecfca690a57321952d576360ff8b6d00ab99f44eff74d75674095ba908f58df200ee03ab726393ba9dd308844a80a3aa4883c5317c5b33375da132d8d37aaec16a64fa33fdf950300d8b935d227bf1e23b54c0d3ba0e27df42dbfc0e76494ab1843eaa8e3fb4bf802d7ea87570bbb1272629ee379247f93af114176d84d86932075bcdd0416f8803a357b9d04e9b159cff8f18fd6e680762cbc08b464abb7b785bc905f96f0d761aff6bb133d14824734db9e4b054866fa336e5b36bf9c61a62f0a655f921d9993a20ec6a9047e53b04fe75d865e28d5a7f53f7fdf6d932e9867f92f0446b179dec1322305d97a5b1d90b3a3621d628b"}) ptrace(0x10, r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000104, 0x0, 0x7}]}) ptrace$pokeuser(0x6, r3, 0x388, 0x7a092814) ptrace$pokeuser(0x6, r3, 0x358, 0xffffffeffffffffe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000fedbdf", @ANYRES32=r3, @ANYBLOB="06000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:usbmon_device_t:s0\x00', 0x1001, 0x2) executing program 6: syz_ublk_setup_io_uring(0x1a, &(0x7f0000000040)={0x0, 0x32b5, 0x10, 0x2, 0x158}, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000ff0c05060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb0000060003003039000008000300"], 0xbc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) executing program 37: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000fedbdf", @ANYRES32=r3, @ANYBLOB="06000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:usbmon_device_t:s0\x00', 0x1001, 0x2) executing program 6: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x102, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 6: prctl$PR_SET_IO_FLUSHER(0x41, 0x1) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e0000010000000000000c000800080008040101000a"], 0xc4}, 0x1, 0x0, 0x0, 0x19}, 0x4) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000000)={{0x0, 0x0}, {0x0, 0x0}}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES64=r2, @ANYRES16=r3, @ANYRES16=r4], 0x33) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4e20, @local}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)="2116fa", 0x3) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x3ffd, 0x0, 0x1, [@generic="00101e5738"]}]}, 0x24}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt/ioports\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000240)='./proc_mnt\x00', &(0x7f0000000280), 0x410, &(0x7f0000002380)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}, {@inode64}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x2d, 0x25]}}], [{@uid_gt={'uid>', r12}}, {@seclabel}, {@appraise}]}) prctl$PR_MCE_KILL_GET(0x3d) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x17) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r13, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20004004) executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0, 0x300}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = open$dir(&(0x7f00000002c0)='./my_sys/bus/pci/devices/0000:00:01.0/config/file0\x00', 0x40202, 0x56) openat(r4, &(0x7f0000000340)='./file0\x00', 0x90000, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) fallocate(r2, 0x1, 0x3, 0x8) write$uinput_user_dev(r2, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x40, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x0, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbc, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x1, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000201, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x8000003, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x2000000, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x7, 0xe, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x433, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0xec00000, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x5, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0xffff, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x461f, 0x400004, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) executing program 6: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x401, 0x2, 0x5, 0x5}, {0xb31c, 0x5, 0xbf, 0x8001}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x35, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0xffff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x1000f, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x41, 0x2000803, 0xffffffff, 0x10000, 0x4, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x0, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r1, 0x5211}, {r1, 0x2}, {r0, 0x1000}], 0x3, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={[0x5]}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r4, &(0x7f0000000740), 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000080)='4', 0x1) cachestat(r4, &(0x7f0000000100)={0x4, 0x5296}, &(0x7f0000000180), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) executing program 38: socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x35, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0xffff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x1000f, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x41, 0x2000803, 0xffffffff, 0x10000, 0x4, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x0, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r1, 0x5211}, {r1, 0x2}, {r0, 0x1000}], 0x3, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={[0x5]}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r4, &(0x7f0000000740), 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000080)='4', 0x1) cachestat(r4, &(0x7f0000000100)={0x4, 0x5296}, &(0x7f0000000180), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 9: r0 = gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xca60, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000e80), 0x2041, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xea, 0x200000a, 0x12, r2, 0x0) program crashed: SYZFAIL: posix_spawnp failed bisect: the chunk can be dropped bisect: split chunks (needed=true): <23> bisect: split chunk #0 of len 23 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 9, 11, 30, 27, 13, 28, 28, 20, 20, 8] detailed listing: executing program 6: syz_ublk_setup_io_uring(0x1a, &(0x7f0000000040)={0x0, 0x32b5, 0x10, 0x2, 0x158}, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000ff0c05060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb0000060003003039000008000300"], 0xbc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) executing program 37: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000fedbdf", @ANYRES32=r3, @ANYBLOB="06000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:usbmon_device_t:s0\x00', 0x1001, 0x2) executing program 6: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x102, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 6: prctl$PR_SET_IO_FLUSHER(0x41, 0x1) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e0000010000000000000c000800080008040101000a"], 0xc4}, 0x1, 0x0, 0x0, 0x19}, 0x4) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000000)={{0x0, 0x0}, {0x0, 0x0}}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES64=r2, @ANYRES16=r3, @ANYRES16=r4], 0x33) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4e20, @local}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)="2116fa", 0x3) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x3ffd, 0x0, 0x1, [@generic="00101e5738"]}]}, 0x24}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt/ioports\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000240)='./proc_mnt\x00', &(0x7f0000000280), 0x410, &(0x7f0000002380)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}, {@inode64}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x2d, 0x25]}}], [{@uid_gt={'uid>', r12}}, {@seclabel}, {@appraise}]}) prctl$PR_MCE_KILL_GET(0x3d) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x17) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r13, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20004004) executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0, 0x300}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = open$dir(&(0x7f00000002c0)='./my_sys/bus/pci/devices/0000:00:01.0/config/file0\x00', 0x40202, 0x56) openat(r4, &(0x7f0000000340)='./file0\x00', 0x90000, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) fallocate(r2, 0x1, 0x3, 0x8) write$uinput_user_dev(r2, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x40, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x0, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbc, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x1, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000201, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x8000003, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x2000000, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x7, 0xe, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x433, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0xec00000, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x5, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0xffff, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x461f, 0x400004, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) executing program 6: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x401, 0x2, 0x5, 0x5}, {0xb31c, 0x5, 0xbf, 0x8001}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x35, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0xffff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x1000f, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x41, 0x2000803, 0xffffffff, 0x10000, 0x4, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x0, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r1, 0x5211}, {r1, 0x2}, {r0, 0x1000}], 0x3, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={[0x5]}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r4, &(0x7f0000000740), 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000080)='4', 0x1) cachestat(r4, &(0x7f0000000100)={0x4, 0x5296}, &(0x7f0000000180), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) executing program 38: socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x35, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0xffff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x1000f, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x41, 0x2000803, 0xffffffff, 0x10000, 0x4, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x0, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r1, 0x5211}, {r1, 0x2}, {r0, 0x1000}], 0x3, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={[0x5]}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r4, &(0x7f0000000740), 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000080)='4', 0x1) cachestat(r4, &(0x7f0000000100)={0x4, 0x5296}, &(0x7f0000000180), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 9: r0 = gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xca60, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000e80), 0x2041, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xea, 0x200000a, 0x12, r2, 0x0) program crashed: SYZFAIL: posix_spawnp failed bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <11> bisect: split chunk #0 of len 11 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 28, 20, 20, 8] detailed listing: executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x35, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0xffff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x1000f, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x41, 0x2000803, 0xffffffff, 0x10000, 0x4, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x0, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r1, 0x5211}, {r1, 0x2}, {r0, 0x1000}], 0x3, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={[0x5]}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r4, &(0x7f0000000740), 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000080)='4', 0x1) cachestat(r4, &(0x7f0000000100)={0x4, 0x5296}, &(0x7f0000000180), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) executing program 38: socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x35, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xb, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0xffff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x3, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x1000f, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x3ff, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x41, 0x2000803, 0xffffffff, 0x10000, 0x4, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x0, 0x4, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r1, 0x5211}, {r1, 0x2}, {r0, 0x1000}], 0x3, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={[0x5]}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r4, &(0x7f0000000740), 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000080)='4', 0x1) cachestat(r4, &(0x7f0000000100)={0x4, 0x5296}, &(0x7f0000000180), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffff8e7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff02000000000188", 0xd) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) executing program 9: r0 = gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xca60, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000e80), 0x2041, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xea, 0x200000a, 0x12, r2, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 9, 11, 30, 27, 13] detailed listing: executing program 6: syz_ublk_setup_io_uring(0x1a, &(0x7f0000000040)={0x0, 0x32b5, 0x10, 0x2, 0x158}, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000ff0c05060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb0000060003003039000008000300"], 0xbc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) executing program 37: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000fedbdf", @ANYRES32=r3, @ANYBLOB="06000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:usbmon_device_t:s0\x00', 0x1001, 0x2) executing program 6: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x102, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 6: prctl$PR_SET_IO_FLUSHER(0x41, 0x1) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e0000010000000000000c000800080008040101000a"], 0xc4}, 0x1, 0x0, 0x0, 0x19}, 0x4) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000000)={{0x0, 0x0}, {0x0, 0x0}}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES64=r2, @ANYRES16=r3, @ANYRES16=r4], 0x33) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4e20, @local}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)="2116fa", 0x3) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x3ffd, 0x0, 0x1, [@generic="00101e5738"]}]}, 0x24}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt/ioports\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000240)='./proc_mnt\x00', &(0x7f0000000280), 0x410, &(0x7f0000002380)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}, {@inode64}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x2d, 0x25]}}], [{@uid_gt={'uid>', r12}}, {@seclabel}, {@appraise}]}) prctl$PR_MCE_KILL_GET(0x3d) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x17) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r13, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20004004) executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0, 0x300}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = open$dir(&(0x7f00000002c0)='./my_sys/bus/pci/devices/0000:00:01.0/config/file0\x00', 0x40202, 0x56) openat(r4, &(0x7f0000000340)='./file0\x00', 0x90000, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) fallocate(r2, 0x1, 0x3, 0x8) write$uinput_user_dev(r2, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x40, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x0, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbc, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x1, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000201, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x8000003, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x2000000, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x7, 0xe, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x433, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0xec00000, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x5, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0xffff, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x461f, 0x400004, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) executing program 6: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x401, 0x2, 0x5, 0x5}, {0xb31c, 0x5, 0xbf, 0x8001}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) program crashed: SYZFAIL: open(/proc/self/ns/net) failed bisect: the chunk can be dropped bisect: split chunks (needed=true): <6> bisect: split chunk #0 of len 6 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 27, 13] detailed listing: executing program 6: prctl$PR_SET_IO_FLUSHER(0x41, 0x1) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e0000010000000000000c000800080008040101000a"], 0xc4}, 0x1, 0x0, 0x0, 0x19}, 0x4) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000000)={{0x0, 0x0}, {0x0, 0x0}}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES64=r2, @ANYRES16=r3, @ANYRES16=r4], 0x33) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4e20, @local}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)="2116fa", 0x3) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x3ffd, 0x0, 0x1, [@generic="00101e5738"]}]}, 0x24}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt/ioports\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000240)='./proc_mnt\x00', &(0x7f0000000280), 0x410, &(0x7f0000002380)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}, {@inode64}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x2d, 0x25]}}], [{@uid_gt={'uid>', r12}}, {@seclabel}, {@appraise}]}) prctl$PR_MCE_KILL_GET(0x3d) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x17) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r13, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20004004) executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0, 0x300}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = open$dir(&(0x7f00000002c0)='./my_sys/bus/pci/devices/0000:00:01.0/config/file0\x00', 0x40202, 0x56) openat(r4, &(0x7f0000000340)='./file0\x00', 0x90000, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) fallocate(r2, 0x1, 0x3, 0x8) write$uinput_user_dev(r2, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x40, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x0, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbc, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x1, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000201, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x8000003, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x2000000, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x7, 0xe, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x433, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0xec00000, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x5, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0xffff, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x461f, 0x400004, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) executing program 6: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x401, 0x2, 0x5, 0x5}, {0xb31c, 0x5, 0xbf, 0x8001}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) program crashed: SYZFAIL: open(/proc/self/ns/net) failed bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$bt_hci-syz_init_net_socket$bt_hci-ioctl$TUNATTACHFILTER-bind$bt_hci-write$bt_hci-syz_genetlink_get_family_id$tipc2-munmap-socket-setsockopt$packet_tx_ring-sendmmsg-socket$nl_generic-sendmsg$TIPC_NL_LINK_GET-syz_genetlink_get_family_id$devlink detailed listing: executing program 6: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x401, 0x2, 0x5, 0x5}, {0xb31c, 0x5, 0xbf, 0x8001}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 27] detailed listing: executing program 6: prctl$PR_SET_IO_FLUSHER(0x41, 0x1) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e0000010000000000000c000800080008040101000a"], 0xc4}, 0x1, 0x0, 0x0, 0x19}, 0x4) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000000)={{0x0, 0x0}, {0x0, 0x0}}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES64=r2, @ANYRES16=r3, @ANYRES16=r4], 0x33) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4e20, @local}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)="2116fa", 0x3) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x3ffd, 0x0, 0x1, [@generic="00101e5738"]}]}, 0x24}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt/ioports\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000240)='./proc_mnt\x00', &(0x7f0000000280), 0x410, &(0x7f0000002380)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}, {@inode64}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x2d, 0x25]}}], [{@uid_gt={'uid>', r12}}, {@seclabel}, {@appraise}]}) prctl$PR_MCE_KILL_GET(0x3d) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x17) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r13, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20004004) executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0, 0x300}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = open$dir(&(0x7f00000002c0)='./my_sys/bus/pci/devices/0000:00:01.0/config/file0\x00', 0x40202, 0x56) openat(r4, &(0x7f0000000340)='./file0\x00', 0x90000, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) fallocate(r2, 0x1, 0x3, 0x8) write$uinput_user_dev(r2, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x40, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x0, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbc, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x1, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000201, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x8000003, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x2000000, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x7, 0xe, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x433, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0xec00000, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x5, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0xffff, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x461f, 0x400004, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) program crashed: SYZFAIL: open(/proc/self/ns/net) failed bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-syz_genetlink_get_family_id$nl80211-mprotect-chdir-openat-mkdir-renameat-mount-ioperm-syz_clone-ptrace-mprotect-ptrace$getregset-write$binfmt_script-open$dir-openat-sendfile-fallocate-write$uinput_user_dev detailed listing: executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0, 0x300}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = open$dir(&(0x7f00000002c0)='./my_sys/bus/pci/devices/0000:00:01.0/config/file0\x00', 0x40202, 0x56) openat(r4, &(0x7f0000000340)='./file0\x00', 0x90000, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) fallocate(r2, 0x1, 0x3, 0x8) write$uinput_user_dev(r2, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x40, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x0, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbc, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x1, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000201, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x8000003, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x2000000, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x7, 0xe, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x433, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0xec00000, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x5, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0xffff, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x461f, 0x400004, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) program crashed: SYZFAIL: open(/proc/self/ns/net) failed bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 6: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0, 0x300}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = open$dir(&(0x7f00000002c0)='./my_sys/bus/pci/devices/0000:00:01.0/config/file0\x00', 0x40202, 0x56) openat(r4, &(0x7f0000000340)='./file0\x00', 0x90000, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) fallocate(r2, 0x1, 0x3, 0x8) write$uinput_user_dev(r2, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x40, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x0, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbc, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x1, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000201, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x8000003, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x2000000, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x7, 0xe, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x433, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0xec00000, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x5, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0xffff, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x461f, 0x400004, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-syz_genetlink_get_family_id$nl80211-mprotect-chdir-openat-mkdir-renameat-mount-ioperm-syz_clone-ptrace-mprotect-ptrace$getregset-write$binfmt_script-open$dir-openat-sendfile-fallocate-write$uinput_user_dev detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0, 0x300}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = open$dir(&(0x7f00000002c0)='./my_sys/bus/pci/devices/0000:00:01.0/config/file0\x00', 0x40202, 0x56) openat(r4, &(0x7f0000000340)='./file0\x00', 0x90000, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) fallocate(r2, 0x1, 0x3, 0x8) write$uinput_user_dev(r2, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x40, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x0, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbc, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x1, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000201, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x8000003, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x2000000, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x7, 0xe, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x433, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0xec00000, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x5, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0xffff, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x461f, 0x400004, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) program crashed: SYZFAIL: open(/proc/self/ns/net) failed bisect: concatenation succeeded found reproducer with 27 syscalls minimizing guilty program testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-syz_genetlink_get_family_id$nl80211-mprotect-chdir-openat-mkdir-renameat-mount-ioperm-syz_clone-ptrace-mprotect-ptrace$getregset-write$binfmt_script-open$dir-openat-sendfile-fallocate detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0, 0x300}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = open$dir(&(0x7f00000002c0)='./my_sys/bus/pci/devices/0000:00:01.0/config/file0\x00', 0x40202, 0x56) openat(r4, &(0x7f0000000340)='./file0\x00', 0x90000, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) fallocate(r2, 0x1, 0x3, 0x8) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-syz_genetlink_get_family_id$nl80211-mprotect-chdir-openat-mkdir-renameat-mount-ioperm-syz_clone-ptrace-mprotect-ptrace$getregset-write$binfmt_script-open$dir-openat-sendfile detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0, 0x300}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = open$dir(&(0x7f00000002c0)='./my_sys/bus/pci/devices/0000:00:01.0/config/file0\x00', 0x40202, 0x56) openat(r4, &(0x7f0000000340)='./file0\x00', 0x90000, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-syz_genetlink_get_family_id$nl80211-mprotect-chdir-openat-mkdir-renameat-mount-ioperm-syz_clone-ptrace-mprotect-ptrace$getregset-write$binfmt_script-open$dir-openat detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0, 0x300}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = open$dir(&(0x7f00000002c0)='./my_sys/bus/pci/devices/0000:00:01.0/config/file0\x00', 0x40202, 0x56) openat(r4, &(0x7f0000000340)='./file0\x00', 0x90000, 0x10) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-syz_genetlink_get_family_id$nl80211-mprotect-chdir-openat-mkdir-renameat-mount-ioperm-syz_clone-ptrace-mprotect-ptrace$getregset-write$binfmt_script-open$dir detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0, 0x300}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f00000002c0)='./my_sys/bus/pci/devices/0000:00:01.0/config/file0\x00', 0x40202, 0x56) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-syz_genetlink_get_family_id$nl80211-mprotect-chdir-openat-mkdir-renameat-mount-ioperm-syz_clone-ptrace-mprotect-ptrace$getregset-write$binfmt_script detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0, 0x300}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-syz_genetlink_get_family_id$nl80211-mprotect-chdir-openat-mkdir-renameat-mount-ioperm-syz_clone-ptrace-mprotect-ptrace$getregset detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0, 0x300}) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-syz_genetlink_get_family_id$nl80211-mprotect-chdir-openat-mkdir-renameat-mount-ioperm-syz_clone-ptrace-mprotect detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-syz_genetlink_get_family_id$nl80211-mprotect-chdir-openat-mkdir-renameat-mount-ioperm-syz_clone-ptrace detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-syz_genetlink_get_family_id$nl80211-mprotect-chdir-openat-mkdir-renameat-mount-ioperm-syz_clone detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-syz_genetlink_get_family_id$nl80211-mprotect-chdir-openat-mkdir-renameat-mount-ioperm detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioperm(0x1, 0x3, 0x163f) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-syz_genetlink_get_family_id$nl80211-mprotect-chdir-openat-mkdir-renameat-mount-syz_clone detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-syz_genetlink_get_family_id$nl80211-mprotect-chdir-openat-mkdir-renameat-syz_clone detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-syz_genetlink_get_family_id$nl80211-mprotect-chdir-openat-mkdir-syz_clone detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-syz_genetlink_get_family_id$nl80211-mprotect-chdir-openat-syz_clone detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-syz_genetlink_get_family_id$nl80211-mprotect-chdir-syz_clone detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-syz_genetlink_get_family_id$nl80211-mprotect-syz_clone detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-syz_genetlink_get_family_id$nl80211-chdir-syz_clone detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r1 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-socket-mprotect-chdir-syz_clone detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) socket(0x11, 0xa, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mkdirat-mprotect-chdir-syz_clone detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mount-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-ioctl$TUNSETIFF-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-prctl$PR_SET_SECUREBITS-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BLKRASET-mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', 0x0, 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone program did not crash simplifying guilty program options testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed extracting C reproducer testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone program did not crash testing program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: posix_spawnp failed extracting C reproducer testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone program did not crash testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: posix_spawnp failed validation run: crashed=true testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: posix_spawnp failed validation run: crashed=true testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: SYZFAIL: posix_spawnp failed validation run: crashed=true reproducing took 1h5m35.13767019s repro crashed as (corrupted=false): SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF final repro crashed as (corrupted=false): SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF