Extracting prog: 5h50m57.902937398s Minimizing prog: 1h3m25.067863861s Simplifying prog options: 7m25.360035933s Extracting C: 3m45.702057109s Simplifying C: 0s extracting reproducer from 68 programs testing a last program of every proc single: executing 18 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$ETHTOOL_MSG_LINKMODES_SET detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-openat$md_new_array-write$md_new_array-openat$md-ioctl$SET_ARRAY_INFO-ioctl$ADD_NEW_DISK-ioctl$ADD_NEW_DISK-ioctl$RUN_ARRAY detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_write$ath9k_ep2-syz_open_dev$evdev-ioctl$EVIOCSFF detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000380)={0x0, 0x0, 0x560c, {0x803, 0x5d3}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x71, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000500)={[{0x3d, 0x4e00, "c4eaf25b88ffacbf6f56fc6a2876659c363fad62f286759a082f2f09b64147f31c772e2635a3c595eeeb8450ccff5e79a548b591d2724d899c1b59af65"}]}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$EBT_SO_SET_ENTRIES detailed listing: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4100, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x0, 0x200000000400, 0x200000000518, 0x200000000660], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x88fb, 'batadv0\x00', 'veth1_to_bond\x00', 'xfrm0\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x0, 0xd2d, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'wlan1\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0xb8, 0xe8, 0x118, [@ip={{'ip\x00', 0x0, 0x20}, {{@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0xfe, 0x5e, 0x4e84ee8874ed0a2d, 0x4, 0x4e20, 0x4e23, 0x4e24, 0x4e24}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa}}}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$EBT_SO_SET_ENTRIES detailed listing: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4100, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x0, 0x200000000400, 0x200000000518, 0x200000000660], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x88fb, 'batadv0\x00', 'veth1_to_bond\x00', 'xfrm0\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x0, 0xd2d, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'wlan1\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0xb8, 0xe8, 0x118, [@ip={{'ip\x00', 0x0, 0x20}, {{@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0xfe, 0x5e, 0x4e84ee8874ed0a2d, 0x4, 0x4e20, 0x4e23, 0x4e24, 0x4e24}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa}}}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-preadv detailed listing: executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/trace\x00', 0x0, 0x42) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-preadv detailed listing: executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/trace\x00', 0x0, 0x42) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-socket$inet6_tcp-close-socket$inet6_mptcp-openat$uhid-mount-mkdirat-mount-setxattr$system_posix_acl-write$UHID_DESTROY-bind$inet6-listen-socket$inet_mptcp-fsopen-fsconfig$FSCONFIG_SET_STRING-connect$inet-socket$nl_netfilter-write-write$binfmt_misc-splice-accept-sendmsg$TEAM_CMD_OPTIONS_SET-socket$nl_xfrm-sendmsg$nl_xfrm-recvfrom-landlock_create_ruleset-landlock_restrict_self detailed listing: executing program 0: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-getegid-openat-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_ATOMIC-read detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) getegid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000004980), 0x7f, 0x8125c1) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000005100)={0x301, 0x5, &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004b00)=[0x9], &(0x7f0000005080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000050c0)=[0x8000000000000000, 0x0], 0x0, 0xffffffff}) read(r0, &(0x7f00000004c0)=""/16384, 0x4000) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-socket$netlink-setsockopt$netlink_NETLINK_DROP_MEMBERSHIP-sendmsg$netlink-getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS-prctl$PR_MCE_KILL-prctl$PR_MCE_KILL-mkdirat-mremap-munmap-mremap-munmap-openat-socket$inet6_tcp-connect$inet6-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-close_range-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-eventfd2-syz_open_dev$amidi-syz_ublk_setup_io_uring-syz_ublk_add_dev-socket$inet6_tcp-dup-syz_ublk_setup_queues-setsockopt$SO_TIMESTAMPING-read$FUSE-getsockopt$inet_sctp6_SCTP_EVENT-setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED detailed listing: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000001c0)=0x1a, 0x4) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000001220010026bd7000fedbdf25100000000c00ce00400000e8bcd8bd0004003780"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./nfsd\x00', 0x1ff) mremap(&(0x7f00005c9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000be6000/0x2000)=nil) munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) mremap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000f91000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) eventfd2(0xc59, 0x80001) syz_open_dev$amidi(&(0x7f0000000880), 0x3, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, r6, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x4, 0x26b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x305}}}, &(0x7f0000000580)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x8000002, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x200, 0x2, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x2, 0x36f}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x307ea, 0x4) read$FUSE(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000080)={0x2, 0x8001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000100)={r10, 0x7}, 0x8) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-socket$inet6_tcp-close-socket$inet6_mptcp-openat$uhid-mount-mkdirat-mount-setxattr$system_posix_acl-write$UHID_DESTROY-bind$inet6-listen-socket$inet_mptcp-fsopen-fsconfig$FSCONFIG_SET_STRING-connect$inet-socket$nl_netfilter-write-write$binfmt_misc-splice-accept-sendmsg$TEAM_CMD_OPTIONS_SET-socket$nl_xfrm-sendmsg$nl_xfrm-recvfrom-landlock_create_ruleset-landlock_restrict_self detailed listing: executing program 0: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-getegid-openat-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_ATOMIC-read detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) getegid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000004980), 0x7f, 0x8125c1) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000005100)={0x301, 0x5, &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004b00)=[0x9], &(0x7f0000005080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000050c0)=[0x8000000000000000, 0x0], 0x0, 0xffffffff}) read(r0, &(0x7f00000004c0)=""/16384, 0x4000) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-socket$netlink-setsockopt$netlink_NETLINK_DROP_MEMBERSHIP-sendmsg$netlink-getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS-prctl$PR_MCE_KILL-prctl$PR_MCE_KILL-mkdirat-mremap-munmap-mremap-munmap-openat-socket$inet6_tcp-connect$inet6-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-close_range-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-eventfd2-syz_open_dev$amidi-syz_ublk_setup_io_uring-syz_ublk_add_dev-socket$inet6_tcp-dup-syz_ublk_setup_queues-setsockopt$SO_TIMESTAMPING-read$FUSE-getsockopt$inet_sctp6_SCTP_EVENT-setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED detailed listing: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000001c0)=0x1a, 0x4) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000001220010026bd7000fedbdf25100000000c00ce00400000e8bcd8bd0004003780"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./nfsd\x00', 0x1ff) mremap(&(0x7f00005c9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000be6000/0x2000)=nil) munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) mremap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000f91000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) eventfd2(0xc59, 0x80001) syz_open_dev$amidi(&(0x7f0000000880), 0x3, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, r6, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x4, 0x26b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x305}}}, &(0x7f0000000580)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x8000002, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x200, 0x2, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x2, 0x36f}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x307ea, 0x4) read$FUSE(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000080)={0x2, 0x8001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000100)={r10, 0x7}, 0x8) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): keyctl$revoke-socket-socket$igmp-setsockopt$MRT_INIT-setsockopt$MRT_ADD_VIF detailed listing: executing program 0: keyctl$revoke(0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x0, 0xfe, 0x0, @vifc_lcl_addr=@rand_addr=0x64010101, @empty}, 0x10) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): keyctl$revoke-socket-socket$igmp-setsockopt$MRT_INIT-setsockopt$MRT_ADD_VIF detailed listing: executing program 0: keyctl$revoke(0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x0, 0xfe, 0x0, @vifc_lcl_addr=@rand_addr=0x64010101, @empty}, 0x10) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$IPCTNL_MSG_CT_DELETE-syz_open_dev$video-socket$inet-openat$sequencer2-ioctl$SNDCTL_SYNTH_ID-setsockopt$sock_int-setsockopt$sock_int-setreuid-bind$inet-socket$inet-setsockopt$sock_int-setsockopt$sock_int-bind$inet-ioctl$VIDIOC_S_EXT_CTRLS-mprotect-socket$nl_netfilter-sendmsg$IPSET_CMD_FLUSH-socket$inet6_udp-ioctl$sock_inet_SIOCSIFFLAGS-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c0002800500010000000000470002800500010001"], 0xe4}}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000180), 0x40, 0x30d080) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x8200, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f0000000480)={"a3b46dbd0636b5b6392dceee49490567f4188dd0a1f71d8ac682a9ad9c8a", 0x3d2, 0x0, 0x601, 0x6, 0x2, 0x10, 0x7fffffff, 0x2, [0xf, 0x8, 0x80, 0x3, 0x20, 0xa5d, 0x80000001, 0x7fff, 0xdf, 0x9, 0x2, 0x3ff, 0x80000001, 0x6f, 0xa, 0x5, 0x3, 0x7, 0xfffff075]}) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000300)=0x7f, 0x4) setreuid(0xee01, 0xee01) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000380)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000003c0)=0x7f, 0x4) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000280)}}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$md_sysfs-write$md_sysfs detailed listing: executing program 0: r0 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000580)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r0, &(0x7f00000005c0)=@str='active', 0x6) program did not crash single: failed to extract reproducer bisect: bisecting 68 programs with base timeout 30s testing program (duration=47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 20, 9, 17, 5, 12, 3, 5, 5, 2, 29, 3, 18, 19, 30, 9, 1, 37, 25, 30, 20, 7, 30, 3, 5, 19, 27, 30, 7, 27, 6, 7, 4, 2, 18, 2, 2, 7, 30, 7, 26, 5, 2, 2, 4, 19, 10, 3, 4, 16, 2, 2, 4, 9, 4, 8, 13, 4, 3, 8, 5, 6, 15, 4, 2, 16, 8, 5] detailed listing: executing program 32: r0 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000580)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r0, &(0x7f00000005c0)=@str='active', 0x6) executing program 33: sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c0002800500010000000000470002800500010001"], 0xe4}}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000180), 0x40, 0x30d080) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x8200, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f0000000480)={"a3b46dbd0636b5b6392dceee49490567f4188dd0a1f71d8ac682a9ad9c8a", 0x3d2, 0x0, 0x601, 0x6, 0x2, 0x10, 0x7fffffff, 0x2, [0xf, 0x8, 0x80, 0x3, 0x20, 0xa5d, 0x80000001, 0x7fff, 0xdf, 0x9, 0x2, 0x3ff, 0x80000001, 0x6f, 0xa, 0x5, 0x3, 0x7, 0xfffff075]}) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000300)=0x7f, 0x4) setreuid(0xee01, 0xee01) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000380)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000003c0)=0x7f, 0x4) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000280)}}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) executing program 4: mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000500080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d", 0x96}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f0001006970763668656164657200000800020000000000070003"], 0xec}}, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(0x0, 0x2) ftruncate(0xffffffffffffffff, 0x0) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x4000}) executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000003c0)={0xc, r2}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0xa, r4, 0x0, r5}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$packet(0x11, 0x3, 0x300) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @multicast}) write$tun(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec950001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000018a"], 0xfdef) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000540)) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r6, 0xc0205866, &(0x7f0000000e40)={&(0x7f0000000300)=0x1, 0x9, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000e00)}) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x1b4, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0xd10}, {0x0, 0x0, 0x200000000}, {}, 0x70bd29, 0x3503, 0xa, 0x2}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @algo_auth_trunc={0xb4, 0x14, {{'poly1305-arm\x00'}, 0x340, 0x0, "f8c2825db1c4d409cb3471aae437fab2981c63fa51b5b619dd7c0a232417230716b29db84f7355612e7229bf72d203f414e5c19c765fd2621d6f1c77dd2c3c286d2b85be3558371b28eb6cdaa817686ab2b5ff43e685efa1748c15af5a4c94fd71dbc98fa338cb6a"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1}]}, 0x1b4}}, 0x200080d4) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r1, 0x1) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x20, 0x29, 0x1, 0x0, 0x0, {0x8}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfff}]}, 0x20}}, 0x0) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000004c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='27', 0x2) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x200040, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.swap.current\x00', 0x275a, 0x0) executing program 4: r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000600)="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", 0x559, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f0000000c80)) executing program 4: keyctl$revoke(0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x0, 0xfe, 0x0, @vifc_lcl_addr=@rand_addr=0x64010101, @empty}, 0x10) executing program 34: keyctl$revoke(0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x0, 0xfe, 0x0, @vifc_lcl_addr=@rand_addr=0x64010101, @empty}, 0x10) executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8d, 0x156, 0x3000000, 0x1, 0xd59f80, 0x19f5, 0x4, 0x19ef, 0x3, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0x14, 0x7, {0xb, 0xffffffff}, 0xcd, 0x7}}) executing program 1: symlink(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1c0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a300000000028000480240001800a0001407175657565000000140002800600024000010000060001400002000014000000110001"], 0xdc}}, 0x0) fcntl$setpipe(r0, 0x407, 0xfffffffffffffffd) r2 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000440), 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000005c0)=0xc, 0x2) r3 = fsopen(&(0x7f0000000180)='ceph\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='3', 0x4e) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000b80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x354}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x12c01, 0xc, 0x4, 0x1315a, 0xa}, 0x30, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x202000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f00000004c0)={0x1004, r6}, 0x0) landlock_restrict_self(r5, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000080)={0x5e0e, 0x1, 0x1, 0x0, 0x0, 0x3}, 0x30, 0x0) landlock_restrict_self(r5, 0xc) landlock_restrict_self(r7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./proc_mnt\x00', &(0x7f0000000c40)='proc\x00', 0xa, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./proc_mnt/sys/crypto/af_alg_restrict\x00', 0x1, 0x0) write(r8, &(0x7f0000000cc0)='0\n', 0x2) close(r8) socket$alg(0x26, 0x5, 0x0) executing program 1: r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000002600), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000002640)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4200, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x218, 0x138, 0x1, 0x32, 0x0, 0x0, 0x0, @by_dev={r1}, [@crypt={0x0, 0x2000, 0x0, 0xe0, 'crypt\x00', {'capi:xts(aes)-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@ram_num={'1:', 0x0}, 0x20, '0'}, ' 2 sector_size:4096 iv_large_sectors'}}]}) executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x4212, r1, 0x80000001, 0x4) sendto(r0, &(0x7f0000000200)="120000001a00e7efa8ff1b3fc329c94a41bc", 0x12, 0x24008000, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r1, &(0x7f0000000300)) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x6a) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r3, &(0x7f00000029c0)=""/102400, 0x19000, 0xffffffff8) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f000001ba00)={{0x9, 0x0, 0x6, 0x9, 'syz0\x00'}, 0x3, 0x2, 0x4, r1, 0x1, 0xfffffffc, 'syz1\x00', &(0x7f000001b9c0)=['\x00'], 0x1}) close(r2) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000019c0)=""/4090, 0xffa}, {&(0x7f00000004c0)=""/261, 0x105}, {&(0x7f0000000e40)=""/198, 0xc6}], 0x3}, 0x2}], 0x1, 0x10100, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000001c0)={0x0, 0x80000001, {r1}, {r4}, 0xc}) move_pages(r5, 0x8, &(0x7f0000000240)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000280)=[0x1, 0x8, 0x18000000], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x20049, 0x80) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0xb50, 0xd, @name="9b6154dbd0c646db726492e1a39b984f781a2e0fe14ea7b2a02aab01e07a9145"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000002c0)={&(0x7f00000004c0)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000580)={0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) read(r3, &(0x7f00000001c0)=""/256, 0x100) write(r1, &(0x7f0000000480)='27', 0x2) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000002600)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000002640)={@my=0x0}) executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000001c0)=0x1a, 0x4) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000001220010026bd7000fedbdf25100000000c00ce00400000e8bcd8bd0004003780"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./nfsd\x00', 0x1ff) mremap(&(0x7f00005c9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000be6000/0x2000)=nil) munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) mremap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000f91000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) eventfd2(0xc59, 0x80001) syz_open_dev$amidi(&(0x7f0000000880), 0x3, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, r6, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x4, 0x26b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x305}}}, &(0x7f0000000580)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x8000002, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x200, 0x2, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x2, 0x36f}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x307ea, 0x4) read$FUSE(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000080)={0x2, 0x8001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000100)={r10, 0x7}, 0x8) executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x99) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) (async) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000200)={0x40, 0xb, 0x4, "b7939de2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) executing program 5: fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001000000000010000000e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000002ee0000000000001910be1a000000000000000000000000000000000000000008000000000000000000000000000000fdfffffffffeffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00000100010000000008001f0001"], 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @mcast2, 0x9}}, 0x24) (async) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @mcast2, 0x9}}, 0x24) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000a40)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x81000, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000940)={[0x804, 0x4, 0x81, 0x4, 0x8, 0x800000, 0x7, 0x12, 0x400, 0x80000004, 0xfffffffffffffffc, 0x1000, 0x3, 0x6, 0x100000000001], 0xc000, 0x4fb40}) open_tree(0xffffffffffffff9c, &(0x7f0000000a00)='./file0/file0\x00', 0x88101) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000a00)='./file0/file0\x00', 0x88101) ioctl$KVM_RUN(r6, 0xae80, 0x0) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000800)={0x28, 0x4, 0x0, {0x6, 0x6}}, 0x28) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x3, @mcast2, 0x7fffffff}, 0x1c) sendmmsg$inet(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="c954", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="1366979f8e027546a2915e850a8b58a1d1f1a845405b18", 0x17}], 0x1}}], 0x4, 0x40480c0) (async) sendmmsg$inet(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="c954", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="1366979f8e027546a2915e850a8b58a1d1f1a845405b18", 0x17}], 0x1}}], 0x4, 0x40480c0) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$FUSE_OPEN(r9, &(0x7f0000000880)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) (async) write$FUSE_OPEN(r9, &(0x7f0000000880)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x891c, &(0x7f00000008c0)={'ipvlan0\x00', @random="02000600"}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES64=r1, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001", @ANYRES8=r8, @ANYRES8=0x0], 0xd4}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}, @NFTA_MATCH_INFO={0x18, 0x3, "000000000000000000000000ffff000002000000"}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r1 = socket$inet(0x2, 0x2, 0x11) sendto$inet(r1, &(0x7f0000000440)="1234", 0x4, 0x0, &(0x7f0000000480)={0x2, 0x1234, @local}, 0x10) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = mq_open(&(0x7f0000000080)='eth0\x00', 0x40, 0x0, 0x0) lseek(r3, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') read$FUSE(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000140), 0x51) io_getevents(0x0, 0xfff, 0x0, &(0x7f0000000100), &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x5) executing program 5: r0 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_batadv\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000640)={0x4000, 0x1002}, 0xffffffffffffff15) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f00000002c0)={0x11, 0x0, r1, 0x1, 0xff, 0x6, @random="27738d50c7f5"}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write$P9_RCREATE(r3, &(0x7f0000000280)={0x18, 0x73, 0x1, {{0x0, 0x5, 0x8}, 0x85}}, 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000040)="b8010000000f01d9440f07660f3a638a0d00008063460f781b0f77440f2085c462fd0809430f015800f3a7643e3666410fc7b70f000000", 0x37}], 0x1, 0x47, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000440), 0x40800, 0x0) ioctl$RNDADDENTROPY(r8, 0x40085203, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000000010"]) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) r13 = syz_open_dev$video4linux(&(0x7f00000005c0), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r13, 0x4020565a, &(0x7f0000000600)={0x0, 0x10, 0x2}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000500)={0x0, 0x64, &(0x7f0000000540)={&(0x7f0000000a40)=ANY=[@ANYBLOB="af617abec176d67bc94c138d0aec048825b7c8ce295496467757cb6271e6d4610c7627a3c81908e2444bd029cbc120a7317815b77b34feb2104ec40826d6a7fb5a9d5c67af2adcf6d3391359364048ae325d7a730cf588ac60557b3719e9e4bf271532506a44ea922d3c5155ee64acbd3836cf7facf6d21997767c8319cf06d67b3ce89cd96405ef5fb8678bf353ea76033b6f505658c25600eafe8e7935752e5708a3a0b3412499522699309bc051fc634d0a06c1fafdedff03995db96653eaafce991367ebb7d9cd0c16", @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r12, @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x0) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip_mr_vif\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000540)=""/121, 0x79}], 0x1, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./security\x00', &(0x7f0000000640)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./security/apparmor/.replace\x00', 0x1, 0x0) keyctl$session_to_parent(0x12) write(r3, &(0x7f00000006c0)="04080076657273696f6e00020500000004080070726f66696c650007050400", 0x1f) pipe2$watch_queue(&(0x7f0000000700), 0x80) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800800034000000002"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r5, 0x4048aecb, &(0x7f0000000080)=@arm64_ccsidr={0x6020000000110009, &(0x7f00000000c0)=0xd8}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) getegid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000004980), 0x7f, 0x8125c1) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000005100)={0x301, 0x5, &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004b00)=[0x9], &(0x7f0000005080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000050c0)=[0x8000000000000000, 0x0], 0x0, 0xffffffff}) read(r0, &(0x7f00000004c0)=""/16384, 0x4000) executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1740, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000060000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600894f00000c0003"], 0x68}}, 0x0) syz_usb_connect(0x0, 0x38, &(0x7f00000003c0)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e517bb0009050402090000000009058802", @ANYRESDEC=r0], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x5e, {0x40000001, 0x203f}}], 0x40}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f00000004c0)={&(0x7f0000000500)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000580)="88", 0x1}], 0x1}, 0x48043) r5 = dup(r3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000005c0)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000600)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x3, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000700)={0x7, 0x1b, 0x2}, 0xffffff9a) munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000cc0)={{0x8, @rand_addr=0x64010102, 0x4e20, 0x2, 'wrr\x00', 0x1, 0x6, 0x46}, {@multicast2, 0x4e23, 0x5, 0x5, 0x10000, 0x67c}}, 0x44) splice(r6, 0x0, r3, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000b80)={'ip6gre0\x00', 0x0}) write$binfmt_script(r5, &(0x7f0000000740)={'#! ', './file0', [], 0xa, "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"}, 0x411) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r11 = fsopen(&(0x7f0000000d40)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000240)='secret\x00', &(0x7f0000000280)='AQB1234+6789l/\x83\'/-\x82\xe2\x9a\x9c\x89>0123456789\x02\x0023456\a\x00\x00\x00\x00\x00\x00\x00567=\x00K\x1e\x13x\xbe\x0e\x9b,\xa7\xcc\xfa\x00?#E#\xdb\x7f1\')\xfd}\xaa\xcd1\xe7\xa3c\xad\x99\x97q\x9f\x82\x99\xbd\xfdt\xa2~\x18\v\xcc\xd4\x81\x9a\xe8\xe5\a\xc4\x11\xc5\xfc\xefw\xe4\xdd\x1f\r\xb3z\xd5\xbe\xf0\xaac\xc2%\x90\xd4\xad\xe7\x1f\xd0\x11\x82\xa4_m\xde]+E\xb3J\xd0\x1d\xbaAS\xa0\x80m\xe8\xf1\x99\x86m\x02\xa7\xd9.FcS\xcdI\xc5\xd7\x88\x96\b\xf6\b@\xc6\xb68k8E\xf9\x1b\xf0\x86(\x83\xd8\xea\xa7\xb2\xa7k\x8cN\x02\xb5\x97\x14\xc7~\x96\xf5\xd1\xc1TO\xf2\xf0@~*t\xe6\xa2_:\xd8\xd4\xa1\x04\xa6o\x9b\xe2\x98\x94\x12;\xd79sg6>=Bz/\x06\xbc\xcfI\x97.\x93\x187\xaf\x13X\fL\xcd\x83t\xd2 \xf35\xf3\x114\n\xa0\xcd\xe6F<\a\xe3\xf1L\'&\xee\x95c\xce\xdc\x10\xe4>\xfd\x91\x93%\xe2\x84\"\xd2p\x84\xcd\x16\xa1+W\xd8', 0x0) executing program 6: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_NEW(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000000)={0x0, 0x4389d}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0xffffff6f, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) executing program 6: memfd_create(&(0x7f0000000280)='-_~\x00\x00\x00\x00\x04\x00go\xa7\xb1\x8fqtZ\xe5v\xf8[5\x14\xc5.\x92\xe5\xbd\x94 U\x8dk;Bfk\xbbq,\xa4\"2#c\xe4\xf3i31&\x1d?\xdc\x99s)\x0e\xe1\x10E]&(\xcf\xf0\xec\x95\xa2\x84\x8c\xd2\xf5\xc9h?\x18\x99,\xaa9M\xdc[F\x82t\xa5)\x06{ua\xa9\xdc:*P\x13\xe4\xba\x10\xbd9\xdf\x97\x1fz\xc6\xc1\xb17\xd5SQ\xe8\\7:l\xc6\xd7,Px\xd4\xd7\'\xb5\xae\xfa\xe3\x83EP\x8f1\xb9x\\fZ\xee\xca\xa3\xed\xac\x82\xb2\xea=\xf0\xd53\x9d0nOH\xaew4\xb2\xf5\xfb\x0f\xea\xc3\x8b[YF\x1a\x96K\x1dJ\xee\xe4\xc3\xc2\x1bBz\xbf\xda\x10\x14\xbb9\xbe\fx\xee5W\x15\xe01\x1d\f\xcd\x12\xa5\xf0Y{\x8c\xf9\xbf}\xa3=\xc9s1\xf2q\x88-\"\xe3\xe6\x1d\x85\x83\xd2\xec\xb8O}9\xb4\x7f\xcf\xbc\xf5\x90{\xe7P\xcb\xa3)\xa0^he\xc4\xe0\xe3Au1]4\xa3\xce#\xfbq\xe6\xefW\xe5\xf1\x12\xad\xf9+\xd7\xa6_j\x84\x13R\x18\x1b q8\xc5\xe8z\xa0\x92\xdf\x8e', 0xd) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x20049, 0x80) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0xb50, 0xd, @name="9b6154dbd0c646db726492e1a39b984f781a2e0fe14ea7b2a02aab01e07a9145"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000002c0)={&(0x7f00000004c0)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000580)={0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) read(r3, &(0x7f00000001c0)=""/256, 0x100) write(r1, &(0x7f0000000480)='27', 0x2) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000002600)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000002640)={@my=0x0}) executing program 6: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) executing program 35: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000001c0)=0x1a, 0x4) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000001220010026bd7000fedbdf25100000000c00ce00400000e8bcd8bd0004003780"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./nfsd\x00', 0x1ff) mremap(&(0x7f00005c9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000be6000/0x2000)=nil) munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) mremap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000f91000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) eventfd2(0xc59, 0x80001) syz_open_dev$amidi(&(0x7f0000000880), 0x3, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, r6, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x4, 0x26b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x305}}}, &(0x7f0000000580)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x8000002, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x200, 0x2, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x2, 0x36f}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x307ea, 0x4) read$FUSE(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000080)={0x2, 0x8001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000100)={r10, 0x7}, 0x8) executing program 36: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) getegid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000004980), 0x7f, 0x8125c1) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000005100)={0x301, 0x5, &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004b00)=[0x9], &(0x7f0000005080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000050c0)=[0x8000000000000000, 0x0], 0x0, 0xffffffff}) read(r0, &(0x7f00000004c0)=""/16384, 0x4000) executing program 37: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) executing program 7: mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='my_debugfs/asoc/components\x00', 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @multicast2}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x9}}}, 0xffffffffffffff20) executing program 7: mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x25, 0x0, 0x2, 0xfffffffe}, {0x6}, {}, {0x6}]}) ioctl$ADD_NEW_DISK(r0, 0x40140921, 0x0) executing program 7: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0x5, 0xa, 0x4}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0xa, @pix={0x8, 0x9, 0x30323953, 0x2, 0x5, 0x400, 0x20, 0x2, 0x1, 0x4, 0x0, 0x5}}) executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x20, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x40004) executing program 7: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(0x3) ioctl$MEMSETBADBLOCK(r3, 0x40084d0c, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000000)) executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/trace\x00', 0x0, 0x42) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) executing program 38: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/trace\x00', 0x0, 0x42) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/kcm\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000002200)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x4000, @in={0x2, 0x5e22, @loopback}}}, 0x90) executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async, rerun: 32) r1 = syz_clone(0x25088000, 0x0, 0x1b, 0x0, 0x0, 0x0) (async) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r2 = syz_clone(0x14880, 0x0, 0x39, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) rt_tgsigqueueinfo(r1, r1, 0x5, &(0x7f0000000080)={0x3e, 0x8, 0x3}) (async, rerun: 64) shutdown(0xffffffffffffffff, 0x0) (async, rerun: 32) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x80, @remote, 0x10001}, 0x1c) (async, rerun: 32) socket$inet(0x2, 0xa, 0x8000) (async) tgkill(0x0, 0x0, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x16, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_DISABLE_QUIRKS2(r5, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x48}) (async) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000280)={0x0, &(0x7f0000000700)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0xffffffffffffff7e}) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x0) syz_usb_ep_read(r8, 0xf, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) executing program 3: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b0001006578746864720000140002800800064000000002080007500000000e0900020073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) socket$netlink(0x10, 0x3, 0x9) ioctl(r0, 0x40009916, &(0x7f0000000040)="000000001a6250d3f89cc1de1dcd382004c1e04bc758a2d2a4665272049baa594530fd62991d1d30d398d8979bd057a2039aaa46886ed3b1098ba9c0e7c70f17f1b9eb3f57a946e340f6735cd8eecbb41629cf247639cb7b3a0025c3d2e54106881d4f254058faf28e5b1f7cdaf5a822e8a3318e23d44fd9ea8d2a89c07e0a5178d9d0ee68de") executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000e40)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000940), 0x800000000000082, 0x20000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/118, 0x76}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./sys/bus/machinecheck\x00', 0x0, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000700)={0x8, 0xfffffffd, 0x40, 0x6}) r3 = openat(r2, &(0x7f0000000ec0)='drivers_probe\x00', 0x1, 0x0) r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, &(0x7f0000000300)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x3, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f00000003c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000400)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f3}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x1, 0x1, 0xbab, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x83dd9045d6f57276, 0x40040005, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000ec4b, 0x200, 0x1, 0x391}}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r8}}, 0xc) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), r3) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f00000007c0)={@initdev, @multicast1, 0x0}, &(0x7f0000000800)=0xc) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r9, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) write(r3, &(0x7f0000000f00)='machinecheck1', 0xd) executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x200) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000) munlockall() mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f00000005c0)='nilfs2\x00', 0x81001f, 0x0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4100, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x0, 0x200000000400, 0x200000000518, 0x200000000660], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x88fb, 'batadv0\x00', 'veth1_to_bond\x00', 'xfrm0\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x0, 0xd2d, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'wlan1\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0xb8, 0xe8, 0x118, [@ip={{'ip\x00', 0x0, 0x20}, {{@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0xfe, 0x5e, 0x4e84ee8874ed0a2d, 0x4, 0x4e20, 0x4e23, 0x4e24, 0x4e24}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa}}}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) executing program 39: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4100, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x0, 0x200000000400, 0x200000000518, 0x200000000660], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x88fb, 'batadv0\x00', 'veth1_to_bond\x00', 'xfrm0\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x0, 0xd2d, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'wlan1\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0xb8, 0xe8, 0x118, [@ip={{'ip\x00', 0x0, 0x20}, {{@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0xfe, 0x5e, 0x4e84ee8874ed0a2d, 0x4, 0x4e20, 0x4e23, 0x4e24, 0x4e24}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa}}}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) executing program 9: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 9: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) getpgid(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000019340)=0xc74, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019180)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000191c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000019200)='./proc\x00', &(0x7f0000019240)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019280)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write$P9_RWALK(r4, 0x0, 0xffffff28) executing program 9: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) writev(r0, &(0x7f0000002ac0)=[{&(0x7f0000001640)='}', 0x1}], 0x1) pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0xfb2200) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x29a}) executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 9: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000000980)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x42, 0x0) r4 = fanotify_init(0xef0, 0x40000) fanotify_mark(r4, 0x105, 0x40009965, r3, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x39d) executing program 0: r0 = mq_open(&(0x7f0000002a40)='\a\x05\x00\x00', 0xa167ad740cb9a351, 0x3c, 0x0) fcntl$setflags(r0, 0x2, 0x0) executing program 9: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES8=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="200704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000440)={0x0, 0x3, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = gettid() timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x3, 0x58) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x1ffffffff000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0x0, @mcast2, 0x2}, 0x1c, 0x0}}, {{&(0x7f0000000380)={0xa, 0x4e24, 0x7, @mcast1, 0x543}, 0x1c, 0x0, 0x0, 0x0, 0x30}}], 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f00000028c0)={0x2020}, 0x2020) executing program 9: r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000500)={[{0x3d, 0x4e00, "c4eaf25b88ffacbf6f56fc6a2876659c363fad62f286759a082f2f09b64147f31c772e2635a3c595eeeb8450ccff5e79a548b591d2724d899c1b59af65"}]}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) executing program 0: r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000380)={0x0, 0x0, 0x560c, {0x803, 0x5d3}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x71, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) executing program 8: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000b00)={0x18, {"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", 0x1000}}, 0x1006) executing program 8: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/ip_vs\x00') openat(0xffffffffffffff9c, 0x0, 0x80143, 0x1ff) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000009c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000a00)=0xffb) r1 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000f40)={{0x1088, 0x6, 0x2, 0x40, 'syz0\x00', 0x200000}, 0x1, 0x20, 0x1, r1, 0x0, 0x4, 'syz1\x00', 0x0}) executing program 8: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x10, 0x1, 0xc, 0x0, 0x0, 0xfe, 0xc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0x8000, 0xa41, 0x8, 0x8d2, 0x8}, 0x14) executing program 8: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304, 0x38}, '\x00\x00Q\x00\b\x009\x00', '\x00', '^\x00\x00F', "00000000000000fd"}, 0x28) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000280)="004f63d107ec288868081b2841cf2cda29422f015d6a1fae2652e7e725304d947a450e8de7dd65b0a4fb25ca2975fe4ba594dae93919002793efefe7aaaa1417185daa79a4998ab9d5d46ca88fc30a8f8a42aa7fa01570cef52ff91e4175b748d5192b80", 0x64}, {&(0x7f0000000140)="c1d8c827763ad9038ba2c1a0c461aef99cbe5110a63d545a376193", 0x1b}], 0x2) executing program 8: truncate(&(0x7f0000002840)='./file1\x00', 0xfc0) mount(0x0, &(0x7f0000000400)='./tracing\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2800, 0x24) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000280), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000300), 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000005c0)=""/222, &(0x7f00000006c0)=0xde) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast2, 0x4e20, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x5, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x6}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x48, 0x4, 0x8000, 0x2}, {{@in=@loopback, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffcf9, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000d000)=""/102392, 0x18ff8) connect$inet(r0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x88) fcntl$setlease(r5, 0x400, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) program did not crash replaying the whole log did not cause a kernel crash single: executing 18 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$ETHTOOL_MSG_LINKMODES_SET detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-openat$md_new_array-write$md_new_array-openat$md-ioctl$SET_ARRAY_INFO-ioctl$ADD_NEW_DISK-ioctl$ADD_NEW_DISK-ioctl$RUN_ARRAY detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_write$ath9k_ep2-syz_open_dev$evdev-ioctl$EVIOCSFF detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000380)={0x0, 0x0, 0x560c, {0x803, 0x5d3}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x71, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000500)={[{0x3d, 0x4e00, "c4eaf25b88ffacbf6f56fc6a2876659c363fad62f286759a082f2f09b64147f31c772e2635a3c595eeeb8450ccff5e79a548b591d2724d899c1b59af65"}]}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$EBT_SO_SET_ENTRIES detailed listing: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4100, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x0, 0x200000000400, 0x200000000518, 0x200000000660], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x88fb, 'batadv0\x00', 'veth1_to_bond\x00', 'xfrm0\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x0, 0xd2d, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'wlan1\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0xb8, 0xe8, 0x118, [@ip={{'ip\x00', 0x0, 0x20}, {{@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0xfe, 0x5e, 0x4e84ee8874ed0a2d, 0x4, 0x4e20, 0x4e23, 0x4e24, 0x4e24}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa}}}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$EBT_SO_SET_ENTRIES detailed listing: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4100, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x0, 0x200000000400, 0x200000000518, 0x200000000660], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x88fb, 'batadv0\x00', 'veth1_to_bond\x00', 'xfrm0\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x0, 0xd2d, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'wlan1\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0xb8, 0xe8, 0x118, [@ip={{'ip\x00', 0x0, 0x20}, {{@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0xfe, 0x5e, 0x4e84ee8874ed0a2d, 0x4, 0x4e20, 0x4e23, 0x4e24, 0x4e24}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa}}}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-preadv detailed listing: executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/trace\x00', 0x0, 0x42) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-preadv detailed listing: executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/trace\x00', 0x0, 0x42) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-socket$inet6_tcp-close-socket$inet6_mptcp-openat$uhid-mount-mkdirat-mount-setxattr$system_posix_acl-write$UHID_DESTROY-bind$inet6-listen-socket$inet_mptcp-fsopen-fsconfig$FSCONFIG_SET_STRING-connect$inet-socket$nl_netfilter-write-write$binfmt_misc-splice-accept-sendmsg$TEAM_CMD_OPTIONS_SET-socket$nl_xfrm-sendmsg$nl_xfrm-recvfrom-landlock_create_ruleset-landlock_restrict_self detailed listing: executing program 0: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-getegid-openat-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_ATOMIC-read detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) getegid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000004980), 0x7f, 0x8125c1) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000005100)={0x301, 0x5, &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004b00)=[0x9], &(0x7f0000005080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000050c0)=[0x8000000000000000, 0x0], 0x0, 0xffffffff}) read(r0, &(0x7f00000004c0)=""/16384, 0x4000) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-socket$netlink-setsockopt$netlink_NETLINK_DROP_MEMBERSHIP-sendmsg$netlink-getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS-prctl$PR_MCE_KILL-prctl$PR_MCE_KILL-mkdirat-mremap-munmap-mremap-munmap-openat-socket$inet6_tcp-connect$inet6-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-close_range-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-eventfd2-syz_open_dev$amidi-syz_ublk_setup_io_uring-syz_ublk_add_dev-socket$inet6_tcp-dup-syz_ublk_setup_queues-setsockopt$SO_TIMESTAMPING-read$FUSE-getsockopt$inet_sctp6_SCTP_EVENT-setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED detailed listing: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000001c0)=0x1a, 0x4) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000001220010026bd7000fedbdf25100000000c00ce00400000e8bcd8bd0004003780"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./nfsd\x00', 0x1ff) mremap(&(0x7f00005c9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000be6000/0x2000)=nil) munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) mremap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000f91000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) eventfd2(0xc59, 0x80001) syz_open_dev$amidi(&(0x7f0000000880), 0x3, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, r6, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x4, 0x26b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x305}}}, &(0x7f0000000580)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x8000002, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x200, 0x2, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x2, 0x36f}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x307ea, 0x4) read$FUSE(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000080)={0x2, 0x8001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000100)={r10, 0x7}, 0x8) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-socket$inet6_tcp-close-socket$inet6_mptcp-openat$uhid-mount-mkdirat-mount-setxattr$system_posix_acl-write$UHID_DESTROY-bind$inet6-listen-socket$inet_mptcp-fsopen-fsconfig$FSCONFIG_SET_STRING-connect$inet-socket$nl_netfilter-write-write$binfmt_misc-splice-accept-sendmsg$TEAM_CMD_OPTIONS_SET-socket$nl_xfrm-sendmsg$nl_xfrm-recvfrom-landlock_create_ruleset-landlock_restrict_self detailed listing: executing program 0: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-getegid-openat-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_ATOMIC-read detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) getegid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000004980), 0x7f, 0x8125c1) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000005100)={0x301, 0x5, &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004b00)=[0x9], &(0x7f0000005080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000050c0)=[0x8000000000000000, 0x0], 0x0, 0xffffffff}) read(r0, &(0x7f00000004c0)=""/16384, 0x4000) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-socket$netlink-setsockopt$netlink_NETLINK_DROP_MEMBERSHIP-sendmsg$netlink-getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS-prctl$PR_MCE_KILL-prctl$PR_MCE_KILL-mkdirat-mremap-munmap-mremap-munmap-openat-socket$inet6_tcp-connect$inet6-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-close_range-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-eventfd2-syz_open_dev$amidi-syz_ublk_setup_io_uring-syz_ublk_add_dev-socket$inet6_tcp-dup-syz_ublk_setup_queues-setsockopt$SO_TIMESTAMPING-read$FUSE-getsockopt$inet_sctp6_SCTP_EVENT-setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED detailed listing: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000001c0)=0x1a, 0x4) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000001220010026bd7000fedbdf25100000000c00ce00400000e8bcd8bd0004003780"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./nfsd\x00', 0x1ff) mremap(&(0x7f00005c9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000be6000/0x2000)=nil) munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) mremap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000f91000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) eventfd2(0xc59, 0x80001) syz_open_dev$amidi(&(0x7f0000000880), 0x3, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, r6, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x4, 0x26b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x305}}}, &(0x7f0000000580)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x8000002, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x200, 0x2, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x2, 0x36f}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x307ea, 0x4) read$FUSE(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000080)={0x2, 0x8001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000100)={r10, 0x7}, 0x8) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): keyctl$revoke-socket-socket$igmp-setsockopt$MRT_INIT-setsockopt$MRT_ADD_VIF detailed listing: executing program 0: keyctl$revoke(0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x0, 0xfe, 0x0, @vifc_lcl_addr=@rand_addr=0x64010101, @empty}, 0x10) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): keyctl$revoke-socket-socket$igmp-setsockopt$MRT_INIT-setsockopt$MRT_ADD_VIF detailed listing: executing program 0: keyctl$revoke(0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x0, 0xfe, 0x0, @vifc_lcl_addr=@rand_addr=0x64010101, @empty}, 0x10) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$IPCTNL_MSG_CT_DELETE-syz_open_dev$video-socket$inet-openat$sequencer2-ioctl$SNDCTL_SYNTH_ID-setsockopt$sock_int-setsockopt$sock_int-setreuid-bind$inet-socket$inet-setsockopt$sock_int-setsockopt$sock_int-bind$inet-ioctl$VIDIOC_S_EXT_CTRLS-mprotect-socket$nl_netfilter-sendmsg$IPSET_CMD_FLUSH-socket$inet6_udp-ioctl$sock_inet_SIOCSIFFLAGS-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c0002800500010000000000470002800500010001"], 0xe4}}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000180), 0x40, 0x30d080) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x8200, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f0000000480)={"a3b46dbd0636b5b6392dceee49490567f4188dd0a1f71d8ac682a9ad9c8a", 0x3d2, 0x0, 0x601, 0x6, 0x2, 0x10, 0x7fffffff, 0x2, [0xf, 0x8, 0x80, 0x3, 0x20, 0xa5d, 0x80000001, 0x7fff, 0xdf, 0x9, 0x2, 0x3ff, 0x80000001, 0x6f, 0xa, 0x5, 0x3, 0x7, 0xfffff075]}) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000300)=0x7f, 0x4) setreuid(0xee01, 0xee01) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000380)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000003c0)=0x7f, 0x4) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000280)}}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$md_sysfs-write$md_sysfs detailed listing: executing program 0: r0 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000580)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r0, &(0x7f00000005c0)=@str='active', 0x6) program did not crash single: failed to extract reproducer bisect: bisecting 68 programs with base timeout 1m40s testing program (duration=1m57s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 20, 9, 17, 5, 12, 3, 5, 5, 2, 29, 3, 18, 19, 30, 9, 1, 37, 25, 30, 20, 7, 30, 3, 5, 19, 27, 30, 7, 27, 6, 7, 4, 2, 18, 2, 2, 7, 30, 7, 26, 5, 2, 2, 4, 19, 10, 3, 4, 16, 2, 2, 4, 9, 4, 8, 13, 4, 3, 8, 5, 6, 15, 4, 2, 16, 8, 5] detailed listing: executing program 32: r0 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000580)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r0, &(0x7f00000005c0)=@str='active', 0x6) executing program 33: sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c0002800500010000000000470002800500010001"], 0xe4}}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000180), 0x40, 0x30d080) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x8200, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f0000000480)={"a3b46dbd0636b5b6392dceee49490567f4188dd0a1f71d8ac682a9ad9c8a", 0x3d2, 0x0, 0x601, 0x6, 0x2, 0x10, 0x7fffffff, 0x2, [0xf, 0x8, 0x80, 0x3, 0x20, 0xa5d, 0x80000001, 0x7fff, 0xdf, 0x9, 0x2, 0x3ff, 0x80000001, 0x6f, 0xa, 0x5, 0x3, 0x7, 0xfffff075]}) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000300)=0x7f, 0x4) setreuid(0xee01, 0xee01) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000380)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000003c0)=0x7f, 0x4) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000280)}}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) executing program 4: mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000500080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d", 0x96}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f0001006970763668656164657200000800020000000000070003"], 0xec}}, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(0x0, 0x2) ftruncate(0xffffffffffffffff, 0x0) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x4000}) executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000003c0)={0xc, r2}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0xa, r4, 0x0, r5}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$packet(0x11, 0x3, 0x300) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @multicast}) write$tun(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec950001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000018a"], 0xfdef) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000540)) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r6, 0xc0205866, &(0x7f0000000e40)={&(0x7f0000000300)=0x1, 0x9, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000e00)}) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x1b4, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0xd10}, {0x0, 0x0, 0x200000000}, {}, 0x70bd29, 0x3503, 0xa, 0x2}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @algo_auth_trunc={0xb4, 0x14, {{'poly1305-arm\x00'}, 0x340, 0x0, "f8c2825db1c4d409cb3471aae437fab2981c63fa51b5b619dd7c0a232417230716b29db84f7355612e7229bf72d203f414e5c19c765fd2621d6f1c77dd2c3c286d2b85be3558371b28eb6cdaa817686ab2b5ff43e685efa1748c15af5a4c94fd71dbc98fa338cb6a"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1}]}, 0x1b4}}, 0x200080d4) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r1, 0x1) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x20, 0x29, 0x1, 0x0, 0x0, {0x8}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfff}]}, 0x20}}, 0x0) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000004c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='27', 0x2) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x200040, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.swap.current\x00', 0x275a, 0x0) executing program 4: r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000600)="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", 0x559, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f0000000c80)) executing program 4: keyctl$revoke(0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x0, 0xfe, 0x0, @vifc_lcl_addr=@rand_addr=0x64010101, @empty}, 0x10) executing program 34: keyctl$revoke(0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x0, 0xfe, 0x0, @vifc_lcl_addr=@rand_addr=0x64010101, @empty}, 0x10) executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8d, 0x156, 0x3000000, 0x1, 0xd59f80, 0x19f5, 0x4, 0x19ef, 0x3, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0x14, 0x7, {0xb, 0xffffffff}, 0xcd, 0x7}}) executing program 1: symlink(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1c0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a300000000028000480240001800a0001407175657565000000140002800600024000010000060001400002000014000000110001"], 0xdc}}, 0x0) fcntl$setpipe(r0, 0x407, 0xfffffffffffffffd) r2 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000440), 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000005c0)=0xc, 0x2) r3 = fsopen(&(0x7f0000000180)='ceph\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='3', 0x4e) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000b80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x354}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x12c01, 0xc, 0x4, 0x1315a, 0xa}, 0x30, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x202000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f00000004c0)={0x1004, r6}, 0x0) landlock_restrict_self(r5, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000080)={0x5e0e, 0x1, 0x1, 0x0, 0x0, 0x3}, 0x30, 0x0) landlock_restrict_self(r5, 0xc) landlock_restrict_self(r7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./proc_mnt\x00', &(0x7f0000000c40)='proc\x00', 0xa, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./proc_mnt/sys/crypto/af_alg_restrict\x00', 0x1, 0x0) write(r8, &(0x7f0000000cc0)='0\n', 0x2) close(r8) socket$alg(0x26, 0x5, 0x0) executing program 1: r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000002600), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000002640)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4200, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x218, 0x138, 0x1, 0x32, 0x0, 0x0, 0x0, @by_dev={r1}, [@crypt={0x0, 0x2000, 0x0, 0xe0, 'crypt\x00', {'capi:xts(aes)-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@ram_num={'1:', 0x0}, 0x20, '0'}, ' 2 sector_size:4096 iv_large_sectors'}}]}) executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x4212, r1, 0x80000001, 0x4) sendto(r0, &(0x7f0000000200)="120000001a00e7efa8ff1b3fc329c94a41bc", 0x12, 0x24008000, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r1, &(0x7f0000000300)) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x6a) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r3, &(0x7f00000029c0)=""/102400, 0x19000, 0xffffffff8) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f000001ba00)={{0x9, 0x0, 0x6, 0x9, 'syz0\x00'}, 0x3, 0x2, 0x4, r1, 0x1, 0xfffffffc, 'syz1\x00', &(0x7f000001b9c0)=['\x00'], 0x1}) close(r2) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000019c0)=""/4090, 0xffa}, {&(0x7f00000004c0)=""/261, 0x105}, {&(0x7f0000000e40)=""/198, 0xc6}], 0x3}, 0x2}], 0x1, 0x10100, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000001c0)={0x0, 0x80000001, {r1}, {r4}, 0xc}) move_pages(r5, 0x8, &(0x7f0000000240)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000280)=[0x1, 0x8, 0x18000000], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x20049, 0x80) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0xb50, 0xd, @name="9b6154dbd0c646db726492e1a39b984f781a2e0fe14ea7b2a02aab01e07a9145"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000002c0)={&(0x7f00000004c0)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000580)={0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) read(r3, &(0x7f00000001c0)=""/256, 0x100) write(r1, &(0x7f0000000480)='27', 0x2) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000002600)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000002640)={@my=0x0}) executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000001c0)=0x1a, 0x4) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000001220010026bd7000fedbdf25100000000c00ce00400000e8bcd8bd0004003780"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./nfsd\x00', 0x1ff) mremap(&(0x7f00005c9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000be6000/0x2000)=nil) munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) mremap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000f91000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) eventfd2(0xc59, 0x80001) syz_open_dev$amidi(&(0x7f0000000880), 0x3, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, r6, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x4, 0x26b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x305}}}, &(0x7f0000000580)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x8000002, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x200, 0x2, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x2, 0x36f}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x307ea, 0x4) read$FUSE(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000080)={0x2, 0x8001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000100)={r10, 0x7}, 0x8) executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x99) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) (async) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000200)={0x40, 0xb, 0x4, "b7939de2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) executing program 5: fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001000000000010000000e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000002ee0000000000001910be1a000000000000000000000000000000000000000008000000000000000000000000000000fdfffffffffeffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00000100010000000008001f0001"], 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @mcast2, 0x9}}, 0x24) (async) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @mcast2, 0x9}}, 0x24) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000a40)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x81000, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000940)={[0x804, 0x4, 0x81, 0x4, 0x8, 0x800000, 0x7, 0x12, 0x400, 0x80000004, 0xfffffffffffffffc, 0x1000, 0x3, 0x6, 0x100000000001], 0xc000, 0x4fb40}) open_tree(0xffffffffffffff9c, &(0x7f0000000a00)='./file0/file0\x00', 0x88101) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000a00)='./file0/file0\x00', 0x88101) ioctl$KVM_RUN(r6, 0xae80, 0x0) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000800)={0x28, 0x4, 0x0, {0x6, 0x6}}, 0x28) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x3, @mcast2, 0x7fffffff}, 0x1c) sendmmsg$inet(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="c954", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="1366979f8e027546a2915e850a8b58a1d1f1a845405b18", 0x17}], 0x1}}], 0x4, 0x40480c0) (async) sendmmsg$inet(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="c954", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="1366979f8e027546a2915e850a8b58a1d1f1a845405b18", 0x17}], 0x1}}], 0x4, 0x40480c0) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$FUSE_OPEN(r9, &(0x7f0000000880)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) (async) write$FUSE_OPEN(r9, &(0x7f0000000880)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x891c, &(0x7f00000008c0)={'ipvlan0\x00', @random="02000600"}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES64=r1, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001", @ANYRES8=r8, @ANYRES8=0x0], 0xd4}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}, @NFTA_MATCH_INFO={0x18, 0x3, "000000000000000000000000ffff000002000000"}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r1 = socket$inet(0x2, 0x2, 0x11) sendto$inet(r1, &(0x7f0000000440)="1234", 0x4, 0x0, &(0x7f0000000480)={0x2, 0x1234, @local}, 0x10) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = mq_open(&(0x7f0000000080)='eth0\x00', 0x40, 0x0, 0x0) lseek(r3, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') read$FUSE(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000140), 0x51) io_getevents(0x0, 0xfff, 0x0, &(0x7f0000000100), &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x5) executing program 5: r0 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_batadv\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000640)={0x4000, 0x1002}, 0xffffffffffffff15) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f00000002c0)={0x11, 0x0, r1, 0x1, 0xff, 0x6, @random="27738d50c7f5"}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write$P9_RCREATE(r3, &(0x7f0000000280)={0x18, 0x73, 0x1, {{0x0, 0x5, 0x8}, 0x85}}, 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000040)="b8010000000f01d9440f07660f3a638a0d00008063460f781b0f77440f2085c462fd0809430f015800f3a7643e3666410fc7b70f000000", 0x37}], 0x1, 0x47, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000440), 0x40800, 0x0) ioctl$RNDADDENTROPY(r8, 0x40085203, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000000010"]) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) r13 = syz_open_dev$video4linux(&(0x7f00000005c0), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r13, 0x4020565a, &(0x7f0000000600)={0x0, 0x10, 0x2}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000500)={0x0, 0x64, &(0x7f0000000540)={&(0x7f0000000a40)=ANY=[@ANYBLOB="af617abec176d67bc94c138d0aec048825b7c8ce295496467757cb6271e6d4610c7627a3c81908e2444bd029cbc120a7317815b77b34feb2104ec40826d6a7fb5a9d5c67af2adcf6d3391359364048ae325d7a730cf588ac60557b3719e9e4bf271532506a44ea922d3c5155ee64acbd3836cf7facf6d21997767c8319cf06d67b3ce89cd96405ef5fb8678bf353ea76033b6f505658c25600eafe8e7935752e5708a3a0b3412499522699309bc051fc634d0a06c1fafdedff03995db96653eaafce991367ebb7d9cd0c16", @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r12, @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x0) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip_mr_vif\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000540)=""/121, 0x79}], 0x1, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./security\x00', &(0x7f0000000640)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./security/apparmor/.replace\x00', 0x1, 0x0) keyctl$session_to_parent(0x12) write(r3, &(0x7f00000006c0)="04080076657273696f6e00020500000004080070726f66696c650007050400", 0x1f) pipe2$watch_queue(&(0x7f0000000700), 0x80) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800800034000000002"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r5, 0x4048aecb, &(0x7f0000000080)=@arm64_ccsidr={0x6020000000110009, &(0x7f00000000c0)=0xd8}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) getegid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000004980), 0x7f, 0x8125c1) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000005100)={0x301, 0x5, &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004b00)=[0x9], &(0x7f0000005080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000050c0)=[0x8000000000000000, 0x0], 0x0, 0xffffffff}) read(r0, &(0x7f00000004c0)=""/16384, 0x4000) executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1740, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000060000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600894f00000c0003"], 0x68}}, 0x0) syz_usb_connect(0x0, 0x38, &(0x7f00000003c0)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e517bb0009050402090000000009058802", @ANYRESDEC=r0], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x5e, {0x40000001, 0x203f}}], 0x40}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f00000004c0)={&(0x7f0000000500)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000580)="88", 0x1}], 0x1}, 0x48043) r5 = dup(r3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000005c0)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000600)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x3, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000700)={0x7, 0x1b, 0x2}, 0xffffff9a) munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000cc0)={{0x8, @rand_addr=0x64010102, 0x4e20, 0x2, 'wrr\x00', 0x1, 0x6, 0x46}, {@multicast2, 0x4e23, 0x5, 0x5, 0x10000, 0x67c}}, 0x44) splice(r6, 0x0, r3, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000b80)={'ip6gre0\x00', 0x0}) write$binfmt_script(r5, &(0x7f0000000740)={'#! ', './file0', [], 0xa, "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"}, 0x411) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r11 = fsopen(&(0x7f0000000d40)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000240)='secret\x00', &(0x7f0000000280)='AQB1234+6789l/\x83\'/-\x82\xe2\x9a\x9c\x89>0123456789\x02\x0023456\a\x00\x00\x00\x00\x00\x00\x00567=\x00K\x1e\x13x\xbe\x0e\x9b,\xa7\xcc\xfa\x00?#E#\xdb\x7f1\')\xfd}\xaa\xcd1\xe7\xa3c\xad\x99\x97q\x9f\x82\x99\xbd\xfdt\xa2~\x18\v\xcc\xd4\x81\x9a\xe8\xe5\a\xc4\x11\xc5\xfc\xefw\xe4\xdd\x1f\r\xb3z\xd5\xbe\xf0\xaac\xc2%\x90\xd4\xad\xe7\x1f\xd0\x11\x82\xa4_m\xde]+E\xb3J\xd0\x1d\xbaAS\xa0\x80m\xe8\xf1\x99\x86m\x02\xa7\xd9.FcS\xcdI\xc5\xd7\x88\x96\b\xf6\b@\xc6\xb68k8E\xf9\x1b\xf0\x86(\x83\xd8\xea\xa7\xb2\xa7k\x8cN\x02\xb5\x97\x14\xc7~\x96\xf5\xd1\xc1TO\xf2\xf0@~*t\xe6\xa2_:\xd8\xd4\xa1\x04\xa6o\x9b\xe2\x98\x94\x12;\xd79sg6>=Bz/\x06\xbc\xcfI\x97.\x93\x187\xaf\x13X\fL\xcd\x83t\xd2 \xf35\xf3\x114\n\xa0\xcd\xe6F<\a\xe3\xf1L\'&\xee\x95c\xce\xdc\x10\xe4>\xfd\x91\x93%\xe2\x84\"\xd2p\x84\xcd\x16\xa1+W\xd8', 0x0) executing program 6: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_NEW(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000000)={0x0, 0x4389d}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0xffffff6f, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) executing program 6: memfd_create(&(0x7f0000000280)='-_~\x00\x00\x00\x00\x04\x00go\xa7\xb1\x8fqtZ\xe5v\xf8[5\x14\xc5.\x92\xe5\xbd\x94 U\x8dk;Bfk\xbbq,\xa4\"2#c\xe4\xf3i31&\x1d?\xdc\x99s)\x0e\xe1\x10E]&(\xcf\xf0\xec\x95\xa2\x84\x8c\xd2\xf5\xc9h?\x18\x99,\xaa9M\xdc[F\x82t\xa5)\x06{ua\xa9\xdc:*P\x13\xe4\xba\x10\xbd9\xdf\x97\x1fz\xc6\xc1\xb17\xd5SQ\xe8\\7:l\xc6\xd7,Px\xd4\xd7\'\xb5\xae\xfa\xe3\x83EP\x8f1\xb9x\\fZ\xee\xca\xa3\xed\xac\x82\xb2\xea=\xf0\xd53\x9d0nOH\xaew4\xb2\xf5\xfb\x0f\xea\xc3\x8b[YF\x1a\x96K\x1dJ\xee\xe4\xc3\xc2\x1bBz\xbf\xda\x10\x14\xbb9\xbe\fx\xee5W\x15\xe01\x1d\f\xcd\x12\xa5\xf0Y{\x8c\xf9\xbf}\xa3=\xc9s1\xf2q\x88-\"\xe3\xe6\x1d\x85\x83\xd2\xec\xb8O}9\xb4\x7f\xcf\xbc\xf5\x90{\xe7P\xcb\xa3)\xa0^he\xc4\xe0\xe3Au1]4\xa3\xce#\xfbq\xe6\xefW\xe5\xf1\x12\xad\xf9+\xd7\xa6_j\x84\x13R\x18\x1b q8\xc5\xe8z\xa0\x92\xdf\x8e', 0xd) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x20049, 0x80) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0xb50, 0xd, @name="9b6154dbd0c646db726492e1a39b984f781a2e0fe14ea7b2a02aab01e07a9145"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000002c0)={&(0x7f00000004c0)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000580)={0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) read(r3, &(0x7f00000001c0)=""/256, 0x100) write(r1, &(0x7f0000000480)='27', 0x2) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000002600)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000002640)={@my=0x0}) executing program 6: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) executing program 35: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000001c0)=0x1a, 0x4) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000001220010026bd7000fedbdf25100000000c00ce00400000e8bcd8bd0004003780"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./nfsd\x00', 0x1ff) mremap(&(0x7f00005c9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000be6000/0x2000)=nil) munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) mremap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000f91000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) eventfd2(0xc59, 0x80001) syz_open_dev$amidi(&(0x7f0000000880), 0x3, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, r6, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x4, 0x26b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x305}}}, &(0x7f0000000580)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x8000002, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x200, 0x2, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x2, 0x36f}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x307ea, 0x4) read$FUSE(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000080)={0x2, 0x8001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000100)={r10, 0x7}, 0x8) executing program 36: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) getegid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000004980), 0x7f, 0x8125c1) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000005100)={0x301, 0x5, &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004b00)=[0x9], &(0x7f0000005080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000050c0)=[0x8000000000000000, 0x0], 0x0, 0xffffffff}) read(r0, &(0x7f00000004c0)=""/16384, 0x4000) executing program 37: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) executing program 7: mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='my_debugfs/asoc/components\x00', 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @multicast2}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x9}}}, 0xffffffffffffff20) executing program 7: mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x25, 0x0, 0x2, 0xfffffffe}, {0x6}, {}, {0x6}]}) ioctl$ADD_NEW_DISK(r0, 0x40140921, 0x0) executing program 7: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0x5, 0xa, 0x4}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0xa, @pix={0x8, 0x9, 0x30323953, 0x2, 0x5, 0x400, 0x20, 0x2, 0x1, 0x4, 0x0, 0x5}}) executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x20, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x40004) executing program 7: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(0x3) ioctl$MEMSETBADBLOCK(r3, 0x40084d0c, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000000)) executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/trace\x00', 0x0, 0x42) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) executing program 38: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/trace\x00', 0x0, 0x42) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/kcm\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000002200)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x4000, @in={0x2, 0x5e22, @loopback}}}, 0x90) executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async, rerun: 32) r1 = syz_clone(0x25088000, 0x0, 0x1b, 0x0, 0x0, 0x0) (async) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r2 = syz_clone(0x14880, 0x0, 0x39, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) rt_tgsigqueueinfo(r1, r1, 0x5, &(0x7f0000000080)={0x3e, 0x8, 0x3}) (async, rerun: 64) shutdown(0xffffffffffffffff, 0x0) (async, rerun: 32) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x80, @remote, 0x10001}, 0x1c) (async, rerun: 32) socket$inet(0x2, 0xa, 0x8000) (async) tgkill(0x0, 0x0, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x16, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_DISABLE_QUIRKS2(r5, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x48}) (async) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000280)={0x0, &(0x7f0000000700)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0xffffffffffffff7e}) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x0) syz_usb_ep_read(r8, 0xf, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) executing program 3: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b0001006578746864720000140002800800064000000002080007500000000e0900020073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) socket$netlink(0x10, 0x3, 0x9) ioctl(r0, 0x40009916, &(0x7f0000000040)="000000001a6250d3f89cc1de1dcd382004c1e04bc758a2d2a4665272049baa594530fd62991d1d30d398d8979bd057a2039aaa46886ed3b1098ba9c0e7c70f17f1b9eb3f57a946e340f6735cd8eecbb41629cf247639cb7b3a0025c3d2e54106881d4f254058faf28e5b1f7cdaf5a822e8a3318e23d44fd9ea8d2a89c07e0a5178d9d0ee68de") executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000e40)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000940), 0x800000000000082, 0x20000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/118, 0x76}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./sys/bus/machinecheck\x00', 0x0, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000700)={0x8, 0xfffffffd, 0x40, 0x6}) r3 = openat(r2, &(0x7f0000000ec0)='drivers_probe\x00', 0x1, 0x0) r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, &(0x7f0000000300)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x3, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f00000003c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000400)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f3}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x1, 0x1, 0xbab, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x83dd9045d6f57276, 0x40040005, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000ec4b, 0x200, 0x1, 0x391}}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r8}}, 0xc) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), r3) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f00000007c0)={@initdev, @multicast1, 0x0}, &(0x7f0000000800)=0xc) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r9, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) write(r3, &(0x7f0000000f00)='machinecheck1', 0xd) executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x200) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000) munlockall() mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f00000005c0)='nilfs2\x00', 0x81001f, 0x0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4100, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x0, 0x200000000400, 0x200000000518, 0x200000000660], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x88fb, 'batadv0\x00', 'veth1_to_bond\x00', 'xfrm0\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x0, 0xd2d, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'wlan1\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0xb8, 0xe8, 0x118, [@ip={{'ip\x00', 0x0, 0x20}, {{@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0xfe, 0x5e, 0x4e84ee8874ed0a2d, 0x4, 0x4e20, 0x4e23, 0x4e24, 0x4e24}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa}}}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) executing program 39: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4100, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x0, 0x200000000400, 0x200000000518, 0x200000000660], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x88fb, 'batadv0\x00', 'veth1_to_bond\x00', 'xfrm0\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x0, 0xd2d, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'wlan1\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0xb8, 0xe8, 0x118, [@ip={{'ip\x00', 0x0, 0x20}, {{@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0xfe, 0x5e, 0x4e84ee8874ed0a2d, 0x4, 0x4e20, 0x4e23, 0x4e24, 0x4e24}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa}}}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) executing program 9: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 9: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) getpgid(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000019340)=0xc74, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019180)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000191c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000019200)='./proc\x00', &(0x7f0000019240)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019280)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write$P9_RWALK(r4, 0x0, 0xffffff28) executing program 9: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) writev(r0, &(0x7f0000002ac0)=[{&(0x7f0000001640)='}', 0x1}], 0x1) pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0xfb2200) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x29a}) executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 9: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000000980)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x42, 0x0) r4 = fanotify_init(0xef0, 0x40000) fanotify_mark(r4, 0x105, 0x40009965, r3, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x39d) executing program 0: r0 = mq_open(&(0x7f0000002a40)='\a\x05\x00\x00', 0xa167ad740cb9a351, 0x3c, 0x0) fcntl$setflags(r0, 0x2, 0x0) executing program 9: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES8=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="200704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000440)={0x0, 0x3, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = gettid() timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x3, 0x58) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x1ffffffff000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0x0, @mcast2, 0x2}, 0x1c, 0x0}}, {{&(0x7f0000000380)={0xa, 0x4e24, 0x7, @mcast1, 0x543}, 0x1c, 0x0, 0x0, 0x0, 0x30}}], 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f00000028c0)={0x2020}, 0x2020) executing program 9: r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000500)={[{0x3d, 0x4e00, "c4eaf25b88ffacbf6f56fc6a2876659c363fad62f286759a082f2f09b64147f31c772e2635a3c595eeeb8450ccff5e79a548b591d2724d899c1b59af65"}]}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) executing program 0: r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000380)={0x0, 0x0, 0x560c, {0x803, 0x5d3}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x71, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) executing program 8: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000b00)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f7ac9b36096eff7fc6e5539b9b18098b9b4a1b2538181b080d29308f0e1ac6e7149b3468959b189a242a9b3f6d988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f7227b7ba67e0e78657c2f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850ab8afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a7315c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c0c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe8a3c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f198a037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e251f2409f610b2db8d1f48c13b65df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e10d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b70894902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50a0000fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426dd6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd66555347015daa85f25057f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971f41488b8658a20878b7c1dd7ba021943939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3ef4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a06f8c04ef23d537639a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f7953c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c069595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb92c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939b6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766b0500000000000000a1d998a2017aef0948a68cb0b3e35cb80dd349e891ae04000000080e8ac32a308e15fc37d06aeac289c0523f487e1ff7408c60edddab652f2ef91d4f2b01987b0f46e4034e5c3f745a7ee81087dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a63c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5347d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4fcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe520629b40d7ceee5802cb5e930ed624806c4380b6dc9336d07c2b8081c188d26558f48261f7897084c2a1a9a6613bc18f5a38ff42768af38041efe03d152ef95ff569e76db2391f4509d7f30ad92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f7150b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b35e52600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000204b0a0780d821a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff9576abc9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) executing program 8: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/ip_vs\x00') openat(0xffffffffffffff9c, 0x0, 0x80143, 0x1ff) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000009c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000a00)=0xffb) r1 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000f40)={{0x1088, 0x6, 0x2, 0x40, 'syz0\x00', 0x200000}, 0x1, 0x20, 0x1, r1, 0x0, 0x4, 'syz1\x00', 0x0}) executing program 8: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x10, 0x1, 0xc, 0x0, 0x0, 0xfe, 0xc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0x8000, 0xa41, 0x8, 0x8d2, 0x8}, 0x14) executing program 8: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304, 0x38}, '\x00\x00Q\x00\b\x009\x00', '\x00', '^\x00\x00F', "00000000000000fd"}, 0x28) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000280)="004f63d107ec288868081b2841cf2cda29422f015d6a1fae2652e7e725304d947a450e8de7dd65b0a4fb25ca2975fe4ba594dae93919002793efefe7aaaa1417185daa79a4998ab9d5d46ca88fc30a8f8a42aa7fa01570cef52ff91e4175b748d5192b80", 0x64}, {&(0x7f0000000140)="c1d8c827763ad9038ba2c1a0c461aef99cbe5110a63d545a376193", 0x1b}], 0x2) executing program 8: truncate(&(0x7f0000002840)='./file1\x00', 0xfc0) mount(0x0, &(0x7f0000000400)='./tracing\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2800, 0x24) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000280), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000300), 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000005c0)=""/222, &(0x7f00000006c0)=0xde) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast2, 0x4e20, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x5, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x6}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x48, 0x4, 0x8000, 0x2}, {{@in=@loopback, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffcf9, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000d000)=""/102392, 0x18ff8) connect$inet(r0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x88) fcntl$setlease(r5, 0x400, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) program did not crash replaying the whole log did not cause a kernel crash single: executing 18 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-sendmsg$ETHTOOL_MSG_LINKMODES_SET detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-openat$md_new_array-write$md_new_array-openat$md-ioctl$SET_ARRAY_INFO-ioctl$ADD_NEW_DISK-ioctl$ADD_NEW_DISK-ioctl$RUN_ARRAY detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_write$ath9k_ep2-syz_open_dev$evdev-ioctl$EVIOCSFF detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000380)={0x0, 0x0, 0x560c, {0x803, 0x5d3}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x71, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000500)={[{0x3d, 0x4e00, "c4eaf25b88ffacbf6f56fc6a2876659c363fad62f286759a082f2f09b64147f31c772e2635a3c595eeeb8450ccff5e79a548b591d2724d899c1b59af65"}]}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$EBT_SO_SET_ENTRIES detailed listing: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4100, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x0, 0x200000000400, 0x200000000518, 0x200000000660], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x88fb, 'batadv0\x00', 'veth1_to_bond\x00', 'xfrm0\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x0, 0xd2d, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'wlan1\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0xb8, 0xe8, 0x118, [@ip={{'ip\x00', 0x0, 0x20}, {{@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0xfe, 0x5e, 0x4e84ee8874ed0a2d, 0x4, 0x4e20, 0x4e23, 0x4e24, 0x4e24}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa}}}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$EBT_SO_SET_ENTRIES detailed listing: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4100, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x0, 0x200000000400, 0x200000000518, 0x200000000660], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x88fb, 'batadv0\x00', 'veth1_to_bond\x00', 'xfrm0\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x0, 0xd2d, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'wlan1\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0xb8, 0xe8, 0x118, [@ip={{'ip\x00', 0x0, 0x20}, {{@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0xfe, 0x5e, 0x4e84ee8874ed0a2d, 0x4, 0x4e20, 0x4e23, 0x4e24, 0x4e24}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa}}}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-preadv detailed listing: executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/trace\x00', 0x0, 0x42) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-preadv detailed listing: executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/trace\x00', 0x0, 0x42) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-socket$inet6_tcp-close-socket$inet6_mptcp-openat$uhid-mount-mkdirat-mount-setxattr$system_posix_acl-write$UHID_DESTROY-bind$inet6-listen-socket$inet_mptcp-fsopen-fsconfig$FSCONFIG_SET_STRING-connect$inet-socket$nl_netfilter-write-write$binfmt_misc-splice-accept-sendmsg$TEAM_CMD_OPTIONS_SET-socket$nl_xfrm-sendmsg$nl_xfrm-recvfrom-landlock_create_ruleset-landlock_restrict_self detailed listing: executing program 0: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-getegid-openat-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_ATOMIC-read detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) getegid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000004980), 0x7f, 0x8125c1) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000005100)={0x301, 0x5, &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004b00)=[0x9], &(0x7f0000005080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000050c0)=[0x8000000000000000, 0x0], 0x0, 0xffffffff}) read(r0, &(0x7f00000004c0)=""/16384, 0x4000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-socket$netlink-setsockopt$netlink_NETLINK_DROP_MEMBERSHIP-sendmsg$netlink-getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS-prctl$PR_MCE_KILL-prctl$PR_MCE_KILL-mkdirat-mremap-munmap-mremap-munmap-openat-socket$inet6_tcp-connect$inet6-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-close_range-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-eventfd2-syz_open_dev$amidi-syz_ublk_setup_io_uring-syz_ublk_add_dev-socket$inet6_tcp-dup-syz_ublk_setup_queues-setsockopt$SO_TIMESTAMPING-read$FUSE-getsockopt$inet_sctp6_SCTP_EVENT-setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED detailed listing: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000001c0)=0x1a, 0x4) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000001220010026bd7000fedbdf25100000000c00ce00400000e8bcd8bd0004003780"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./nfsd\x00', 0x1ff) mremap(&(0x7f00005c9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000be6000/0x2000)=nil) munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) mremap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000f91000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) eventfd2(0xc59, 0x80001) syz_open_dev$amidi(&(0x7f0000000880), 0x3, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, r6, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x4, 0x26b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x305}}}, &(0x7f0000000580)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x8000002, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x200, 0x2, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x2, 0x36f}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x307ea, 0x4) read$FUSE(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000080)={0x2, 0x8001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000100)={r10, 0x7}, 0x8) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-socket$inet6_tcp-close-socket$inet6_mptcp-openat$uhid-mount-mkdirat-mount-setxattr$system_posix_acl-write$UHID_DESTROY-bind$inet6-listen-socket$inet_mptcp-fsopen-fsconfig$FSCONFIG_SET_STRING-connect$inet-socket$nl_netfilter-write-write$binfmt_misc-splice-accept-sendmsg$TEAM_CMD_OPTIONS_SET-socket$nl_xfrm-sendmsg$nl_xfrm-recvfrom-landlock_create_ruleset-landlock_restrict_self detailed listing: executing program 0: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-getegid-openat-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_ATOMIC-read detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) getegid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000004980), 0x7f, 0x8125c1) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000005100)={0x301, 0x5, &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004b00)=[0x9], &(0x7f0000005080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000050c0)=[0x8000000000000000, 0x0], 0x0, 0xffffffff}) read(r0, &(0x7f00000004c0)=""/16384, 0x4000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-socket$netlink-setsockopt$netlink_NETLINK_DROP_MEMBERSHIP-sendmsg$netlink-getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS-prctl$PR_MCE_KILL-prctl$PR_MCE_KILL-mkdirat-mremap-munmap-mremap-munmap-openat-socket$inet6_tcp-connect$inet6-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-close_range-mmap$IORING_OFF_SQ_RING-syz_ublk_add_dev-eventfd2-syz_open_dev$amidi-syz_ublk_setup_io_uring-syz_ublk_add_dev-socket$inet6_tcp-dup-syz_ublk_setup_queues-setsockopt$SO_TIMESTAMPING-read$FUSE-getsockopt$inet_sctp6_SCTP_EVENT-setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED detailed listing: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000001c0)=0x1a, 0x4) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000001220010026bd7000fedbdf25100000000c00ce00400000e8bcd8bd0004003780"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./nfsd\x00', 0x1ff) mremap(&(0x7f00005c9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000be6000/0x2000)=nil) munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) mremap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000f91000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) eventfd2(0xc59, 0x80001) syz_open_dev$amidi(&(0x7f0000000880), 0x3, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, r6, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x4, 0x26b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x305}}}, &(0x7f0000000580)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x8000002, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x200, 0x2, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x2, 0x36f}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x307ea, 0x4) read$FUSE(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000080)={0x2, 0x8001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000100)={r10, 0x7}, 0x8) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): keyctl$revoke-socket-socket$igmp-setsockopt$MRT_INIT-setsockopt$MRT_ADD_VIF detailed listing: executing program 0: keyctl$revoke(0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x0, 0xfe, 0x0, @vifc_lcl_addr=@rand_addr=0x64010101, @empty}, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): keyctl$revoke-socket-socket$igmp-setsockopt$MRT_INIT-setsockopt$MRT_ADD_VIF detailed listing: executing program 0: keyctl$revoke(0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x0, 0xfe, 0x0, @vifc_lcl_addr=@rand_addr=0x64010101, @empty}, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$IPCTNL_MSG_CT_DELETE-syz_open_dev$video-socket$inet-openat$sequencer2-ioctl$SNDCTL_SYNTH_ID-setsockopt$sock_int-setsockopt$sock_int-setreuid-bind$inet-socket$inet-setsockopt$sock_int-setsockopt$sock_int-bind$inet-ioctl$VIDIOC_S_EXT_CTRLS-mprotect-socket$nl_netfilter-sendmsg$IPSET_CMD_FLUSH-socket$inet6_udp-ioctl$sock_inet_SIOCSIFFLAGS-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c0002800500010000000000470002800500010001"], 0xe4}}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000180), 0x40, 0x30d080) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x8200, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f0000000480)={"a3b46dbd0636b5b6392dceee49490567f4188dd0a1f71d8ac682a9ad9c8a", 0x3d2, 0x0, 0x601, 0x6, 0x2, 0x10, 0x7fffffff, 0x2, [0xf, 0x8, 0x80, 0x3, 0x20, 0xa5d, 0x80000001, 0x7fff, 0xdf, 0x9, 0x2, 0x3ff, 0x80000001, 0x6f, 0xa, 0x5, 0x3, 0x7, 0xfffff075]}) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000300)=0x7f, 0x4) setreuid(0xee01, 0xee01) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000380)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000003c0)=0x7f, 0x4) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000280)}}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$md_sysfs-write$md_sysfs detailed listing: executing program 0: r0 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000580)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r0, &(0x7f00000005c0)=@str='active', 0x6) program did not crash single: failed to extract reproducer bisect: bisecting 68 programs with base timeout 6m0s testing program (duration=6m17s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 20, 9, 17, 5, 12, 3, 5, 5, 2, 29, 3, 18, 19, 30, 9, 1, 37, 25, 30, 20, 7, 30, 3, 5, 19, 27, 30, 7, 27, 6, 7, 4, 2, 18, 2, 2, 7, 30, 7, 26, 5, 2, 2, 4, 19, 10, 3, 4, 16, 2, 2, 4, 9, 4, 8, 13, 4, 3, 8, 5, 6, 15, 4, 2, 16, 8, 5] detailed listing: executing program 32: r0 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000580)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r0, &(0x7f00000005c0)=@str='active', 0x6) executing program 33: sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c0002800500010000000000470002800500010001"], 0xe4}}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000180), 0x40, 0x30d080) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x8200, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f0000000480)={"a3b46dbd0636b5b6392dceee49490567f4188dd0a1f71d8ac682a9ad9c8a", 0x3d2, 0x0, 0x601, 0x6, 0x2, 0x10, 0x7fffffff, 0x2, [0xf, 0x8, 0x80, 0x3, 0x20, 0xa5d, 0x80000001, 0x7fff, 0xdf, 0x9, 0x2, 0x3ff, 0x80000001, 0x6f, 0xa, 0x5, 0x3, 0x7, 0xfffff075]}) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000300)=0x7f, 0x4) setreuid(0xee01, 0xee01) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000380)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000003c0)=0x7f, 0x4) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000280)}}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) executing program 4: mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000500080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d", 0x96}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f0001006970763668656164657200000800020000000000070003"], 0xec}}, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(0x0, 0x2) ftruncate(0xffffffffffffffff, 0x0) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x4000}) executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000003c0)={0xc, r2}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0xa, r4, 0x0, r5}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$packet(0x11, 0x3, 0x300) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @multicast}) write$tun(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec950001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000018a"], 0xfdef) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000540)) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r6, 0xc0205866, &(0x7f0000000e40)={&(0x7f0000000300)=0x1, 0x9, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000e00)}) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x1b4, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0xd10}, {0x0, 0x0, 0x200000000}, {}, 0x70bd29, 0x3503, 0xa, 0x2}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @algo_auth_trunc={0xb4, 0x14, {{'poly1305-arm\x00'}, 0x340, 0x0, "f8c2825db1c4d409cb3471aae437fab2981c63fa51b5b619dd7c0a232417230716b29db84f7355612e7229bf72d203f414e5c19c765fd2621d6f1c77dd2c3c286d2b85be3558371b28eb6cdaa817686ab2b5ff43e685efa1748c15af5a4c94fd71dbc98fa338cb6a"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1}]}, 0x1b4}}, 0x200080d4) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r1, 0x1) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x20, 0x29, 0x1, 0x0, 0x0, {0x8}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfff}]}, 0x20}}, 0x0) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000004c0)='./bus\x00') mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='27', 0x2) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x200040, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.swap.current\x00', 0x275a, 0x0) executing program 4: r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000600)="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", 0x559, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f0000000c80)) executing program 4: keyctl$revoke(0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x0, 0xfe, 0x0, @vifc_lcl_addr=@rand_addr=0x64010101, @empty}, 0x10) executing program 34: keyctl$revoke(0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x0, 0xfe, 0x0, @vifc_lcl_addr=@rand_addr=0x64010101, @empty}, 0x10) executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8d, 0x156, 0x3000000, 0x1, 0xd59f80, 0x19f5, 0x4, 0x19ef, 0x3, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0x14, 0x7, {0xb, 0xffffffff}, 0xcd, 0x7}}) executing program 1: symlink(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1c0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a300000000028000480240001800a0001407175657565000000140002800600024000010000060001400002000014000000110001"], 0xdc}}, 0x0) fcntl$setpipe(r0, 0x407, 0xfffffffffffffffd) r2 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000440), 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000005c0)=0xc, 0x2) r3 = fsopen(&(0x7f0000000180)='ceph\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='3', 0x4e) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000b80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x354}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x12c01, 0xc, 0x4, 0x1315a, 0xa}, 0x30, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x202000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f00000004c0)={0x1004, r6}, 0x0) landlock_restrict_self(r5, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000080)={0x5e0e, 0x1, 0x1, 0x0, 0x0, 0x3}, 0x30, 0x0) landlock_restrict_self(r5, 0xc) landlock_restrict_self(r7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./proc_mnt\x00', &(0x7f0000000c40)='proc\x00', 0xa, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./proc_mnt/sys/crypto/af_alg_restrict\x00', 0x1, 0x0) write(r8, &(0x7f0000000cc0)='0\n', 0x2) close(r8) socket$alg(0x26, 0x5, 0x0) executing program 1: r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000002600), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000002640)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4200, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x218, 0x138, 0x1, 0x32, 0x0, 0x0, 0x0, @by_dev={r1}, [@crypt={0x0, 0x2000, 0x0, 0xe0, 'crypt\x00', {'capi:xts(aes)-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@ram_num={'1:', 0x0}, 0x20, '0'}, ' 2 sector_size:4096 iv_large_sectors'}}]}) executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x4212, r1, 0x80000001, 0x4) sendto(r0, &(0x7f0000000200)="120000001a00e7efa8ff1b3fc329c94a41bc", 0x12, 0x24008000, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r1, &(0x7f0000000300)) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x6a) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r3, &(0x7f00000029c0)=""/102400, 0x19000, 0xffffffff8) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f000001ba00)={{0x9, 0x0, 0x6, 0x9, 'syz0\x00'}, 0x3, 0x2, 0x4, r1, 0x1, 0xfffffffc, 'syz1\x00', &(0x7f000001b9c0)=['\x00'], 0x1}) close(r2) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000019c0)=""/4090, 0xffa}, {&(0x7f00000004c0)=""/261, 0x105}, {&(0x7f0000000e40)=""/198, 0xc6}], 0x3}, 0x2}], 0x1, 0x10100, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000001c0)={0x0, 0x80000001, {r1}, {r4}, 0xc}) move_pages(r5, 0x8, &(0x7f0000000240)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000280)=[0x1, 0x8, 0x18000000], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x20049, 0x80) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0xb50, 0xd, @name="9b6154dbd0c646db726492e1a39b984f781a2e0fe14ea7b2a02aab01e07a9145"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000002c0)={&(0x7f00000004c0)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000580)={0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) read(r3, &(0x7f00000001c0)=""/256, 0x100) write(r1, &(0x7f0000000480)='27', 0x2) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000002600)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000002640)={@my=0x0}) executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000001c0)=0x1a, 0x4) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000001220010026bd7000fedbdf25100000000c00ce00400000e8bcd8bd0004003780"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./nfsd\x00', 0x1ff) mremap(&(0x7f00005c9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000be6000/0x2000)=nil) munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) mremap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000f91000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) eventfd2(0xc59, 0x80001) syz_open_dev$amidi(&(0x7f0000000880), 0x3, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, r6, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x4, 0x26b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x305}}}, &(0x7f0000000580)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x8000002, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x200, 0x2, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x2, 0x36f}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x307ea, 0x4) read$FUSE(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000080)={0x2, 0x8001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000100)={r10, 0x7}, 0x8) executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x99) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) (async) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000200)={0x40, 0xb, 0x4, "b7939de2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) executing program 5: fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001000000000010000000e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000002ee0000000000001910be1a000000000000000000000000000000000000000008000000000000000000000000000000fdfffffffffeffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00000100010000000008001f0001"], 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @mcast2, 0x9}}, 0x24) (async) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @mcast2, 0x9}}, 0x24) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000a40)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x81000, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000940)={[0x804, 0x4, 0x81, 0x4, 0x8, 0x800000, 0x7, 0x12, 0x400, 0x80000004, 0xfffffffffffffffc, 0x1000, 0x3, 0x6, 0x100000000001], 0xc000, 0x4fb40}) open_tree(0xffffffffffffff9c, &(0x7f0000000a00)='./file0/file0\x00', 0x88101) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000a00)='./file0/file0\x00', 0x88101) ioctl$KVM_RUN(r6, 0xae80, 0x0) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000800)={0x28, 0x4, 0x0, {0x6, 0x6}}, 0x28) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x3, @mcast2, 0x7fffffff}, 0x1c) sendmmsg$inet(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="c954", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="1366979f8e027546a2915e850a8b58a1d1f1a845405b18", 0x17}], 0x1}}], 0x4, 0x40480c0) (async) sendmmsg$inet(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="c954", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="1366979f8e027546a2915e850a8b58a1d1f1a845405b18", 0x17}], 0x1}}], 0x4, 0x40480c0) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$FUSE_OPEN(r9, &(0x7f0000000880)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) (async) write$FUSE_OPEN(r9, &(0x7f0000000880)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x891c, &(0x7f00000008c0)={'ipvlan0\x00', @random="02000600"}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES64=r1, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001", @ANYRES8=r8, @ANYRES8=0x0], 0xd4}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}, @NFTA_MATCH_INFO={0x18, 0x3, "000000000000000000000000ffff000002000000"}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r1 = socket$inet(0x2, 0x2, 0x11) sendto$inet(r1, &(0x7f0000000440)="1234", 0x4, 0x0, &(0x7f0000000480)={0x2, 0x1234, @local}, 0x10) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = mq_open(&(0x7f0000000080)='eth0\x00', 0x40, 0x0, 0x0) lseek(r3, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') read$FUSE(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000140), 0x51) io_getevents(0x0, 0xfff, 0x0, &(0x7f0000000100), &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x5) executing program 5: r0 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_batadv\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000640)={0x4000, 0x1002}, 0xffffffffffffff15) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f00000002c0)={0x11, 0x0, r1, 0x1, 0xff, 0x6, @random="27738d50c7f5"}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write$P9_RCREATE(r3, &(0x7f0000000280)={0x18, 0x73, 0x1, {{0x0, 0x5, 0x8}, 0x85}}, 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000040)="b8010000000f01d9440f07660f3a638a0d00008063460f781b0f77440f2085c462fd0809430f015800f3a7643e3666410fc7b70f000000", 0x37}], 0x1, 0x47, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000440), 0x40800, 0x0) ioctl$RNDADDENTROPY(r8, 0x40085203, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000000010"]) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) r13 = syz_open_dev$video4linux(&(0x7f00000005c0), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r13, 0x4020565a, &(0x7f0000000600)={0x0, 0x10, 0x2}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000500)={0x0, 0x64, &(0x7f0000000540)={&(0x7f0000000a40)=ANY=[@ANYBLOB="af617abec176d67bc94c138d0aec048825b7c8ce295496467757cb6271e6d4610c7627a3c81908e2444bd029cbc120a7317815b77b34feb2104ec40826d6a7fb5a9d5c67af2adcf6d3391359364048ae325d7a730cf588ac60557b3719e9e4bf271532506a44ea922d3c5155ee64acbd3836cf7facf6d21997767c8319cf06d67b3ce89cd96405ef5fb8678bf353ea76033b6f505658c25600eafe8e7935752e5708a3a0b3412499522699309bc051fc634d0a06c1fafdedff03995db96653eaafce991367ebb7d9cd0c16", @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r12, @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x0) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip_mr_vif\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000540)=""/121, 0x79}], 0x1, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./security\x00', &(0x7f0000000640)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./security/apparmor/.replace\x00', 0x1, 0x0) keyctl$session_to_parent(0x12) write(r3, &(0x7f00000006c0)="04080076657273696f6e00020500000004080070726f66696c650007050400", 0x1f) pipe2$watch_queue(&(0x7f0000000700), 0x80) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800800034000000002"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r5, 0x4048aecb, &(0x7f0000000080)=@arm64_ccsidr={0x6020000000110009, &(0x7f00000000c0)=0xd8}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) getegid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000004980), 0x7f, 0x8125c1) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000005100)={0x301, 0x5, &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004b00)=[0x9], &(0x7f0000005080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000050c0)=[0x8000000000000000, 0x0], 0x0, 0xffffffff}) read(r0, &(0x7f00000004c0)=""/16384, 0x4000) executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1740, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000060000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600894f00000c0003"], 0x68}}, 0x0) syz_usb_connect(0x0, 0x38, &(0x7f00000003c0)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e517bb0009050402090000000009058802", @ANYRESDEC=r0], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x5e, {0x40000001, 0x203f}}], 0x40}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f00000004c0)={&(0x7f0000000500)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000580)="88", 0x1}], 0x1}, 0x48043) r5 = dup(r3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000005c0)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000600)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x3, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000700)={0x7, 0x1b, 0x2}, 0xffffff9a) munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000cc0)={{0x8, @rand_addr=0x64010102, 0x4e20, 0x2, 'wrr\x00', 0x1, 0x6, 0x46}, {@multicast2, 0x4e23, 0x5, 0x5, 0x10000, 0x67c}}, 0x44) splice(r6, 0x0, r3, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000b80)={'ip6gre0\x00', 0x0}) write$binfmt_script(r5, &(0x7f0000000740)={'#! ', './file0', [], 0xa, "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"}, 0x411) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r11 = fsopen(&(0x7f0000000d40)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000240)='secret\x00', &(0x7f0000000280)='AQB1234+6789l/\x83\'/-\x82\xe2\x9a\x9c\x89>0123456789\x02\x0023456\a\x00\x00\x00\x00\x00\x00\x00567=\x00K\x1e\x13x\xbe\x0e\x9b,\xa7\xcc\xfa\x00?#E#\xdb\x7f1\')\xfd}\xaa\xcd1\xe7\xa3c\xad\x99\x97q\x9f\x82\x99\xbd\xfdt\xa2~\x18\v\xcc\xd4\x81\x9a\xe8\xe5\a\xc4\x11\xc5\xfc\xefw\xe4\xdd\x1f\r\xb3z\xd5\xbe\xf0\xaac\xc2%\x90\xd4\xad\xe7\x1f\xd0\x11\x82\xa4_m\xde]+E\xb3J\xd0\x1d\xbaAS\xa0\x80m\xe8\xf1\x99\x86m\x02\xa7\xd9.FcS\xcdI\xc5\xd7\x88\x96\b\xf6\b@\xc6\xb68k8E\xf9\x1b\xf0\x86(\x83\xd8\xea\xa7\xb2\xa7k\x8cN\x02\xb5\x97\x14\xc7~\x96\xf5\xd1\xc1TO\xf2\xf0@~*t\xe6\xa2_:\xd8\xd4\xa1\x04\xa6o\x9b\xe2\x98\x94\x12;\xd79sg6>=Bz/\x06\xbc\xcfI\x97.\x93\x187\xaf\x13X\fL\xcd\x83t\xd2 \xf35\xf3\x114\n\xa0\xcd\xe6F<\a\xe3\xf1L\'&\xee\x95c\xce\xdc\x10\xe4>\xfd\x91\x93%\xe2\x84\"\xd2p\x84\xcd\x16\xa1+W\xd8', 0x0) executing program 6: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_NEW(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000000)={0x0, 0x4389d}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0xffffff6f, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) executing program 6: memfd_create(&(0x7f0000000280)='-_~\x00\x00\x00\x00\x04\x00go\xa7\xb1\x8fqtZ\xe5v\xf8[5\x14\xc5.\x92\xe5\xbd\x94 U\x8dk;Bfk\xbbq,\xa4\"2#c\xe4\xf3i31&\x1d?\xdc\x99s)\x0e\xe1\x10E]&(\xcf\xf0\xec\x95\xa2\x84\x8c\xd2\xf5\xc9h?\x18\x99,\xaa9M\xdc[F\x82t\xa5)\x06{ua\xa9\xdc:*P\x13\xe4\xba\x10\xbd9\xdf\x97\x1fz\xc6\xc1\xb17\xd5SQ\xe8\\7:l\xc6\xd7,Px\xd4\xd7\'\xb5\xae\xfa\xe3\x83EP\x8f1\xb9x\\fZ\xee\xca\xa3\xed\xac\x82\xb2\xea=\xf0\xd53\x9d0nOH\xaew4\xb2\xf5\xfb\x0f\xea\xc3\x8b[YF\x1a\x96K\x1dJ\xee\xe4\xc3\xc2\x1bBz\xbf\xda\x10\x14\xbb9\xbe\fx\xee5W\x15\xe01\x1d\f\xcd\x12\xa5\xf0Y{\x8c\xf9\xbf}\xa3=\xc9s1\xf2q\x88-\"\xe3\xe6\x1d\x85\x83\xd2\xec\xb8O}9\xb4\x7f\xcf\xbc\xf5\x90{\xe7P\xcb\xa3)\xa0^he\xc4\xe0\xe3Au1]4\xa3\xce#\xfbq\xe6\xefW\xe5\xf1\x12\xad\xf9+\xd7\xa6_j\x84\x13R\x18\x1b q8\xc5\xe8z\xa0\x92\xdf\x8e', 0xd) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x20049, 0x80) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0xb50, 0xd, @name="9b6154dbd0c646db726492e1a39b984f781a2e0fe14ea7b2a02aab01e07a9145"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000002c0)={&(0x7f00000004c0)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000580)={0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) read(r3, &(0x7f00000001c0)=""/256, 0x100) write(r1, &(0x7f0000000480)='27', 0x2) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000002600)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000002640)={@my=0x0}) executing program 6: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) executing program 35: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000001c0)=0x1a, 0x4) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000001220010026bd7000fedbdf25100000000c00ce00400000e8bcd8bd0004003780"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./nfsd\x00', 0x1ff) mremap(&(0x7f00005c9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000be6000/0x2000)=nil) munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) mremap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000f91000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) eventfd2(0xc59, 0x80001) syz_open_dev$amidi(&(0x7f0000000880), 0x3, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, r6, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x4, 0x26b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x305}}}, &(0x7f0000000580)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x8000002, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x200, 0x2, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x2, 0x36f}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x307ea, 0x4) read$FUSE(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000080)={0x2, 0x8001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000100)={r10, 0x7}, 0x8) executing program 36: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) getegid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000004980), 0x7f, 0x8125c1) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000005100)={0x301, 0x5, &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004b00)=[0x9], &(0x7f0000005080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000050c0)=[0x8000000000000000, 0x0], 0x0, 0xffffffff}) read(r0, &(0x7f00000004c0)=""/16384, 0x4000) executing program 37: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) executing program 7: mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='my_debugfs/asoc/components\x00', 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @multicast2}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x9}}}, 0xffffffffffffff20) executing program 7: mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x25, 0x0, 0x2, 0xfffffffe}, {0x6}, {}, {0x6}]}) ioctl$ADD_NEW_DISK(r0, 0x40140921, 0x0) executing program 7: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0x5, 0xa, 0x4}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0xa, @pix={0x8, 0x9, 0x30323953, 0x2, 0x5, 0x400, 0x20, 0x2, 0x1, 0x4, 0x0, 0x5}}) executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x20, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x40004) executing program 7: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(0x3) ioctl$MEMSETBADBLOCK(r3, 0x40084d0c, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000000)) executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/trace\x00', 0x0, 0x42) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) executing program 38: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/trace\x00', 0x0, 0x42) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/kcm\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000002200)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x4000, @in={0x2, 0x5e22, @loopback}}}, 0x90) executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async, rerun: 32) r1 = syz_clone(0x25088000, 0x0, 0x1b, 0x0, 0x0, 0x0) (async) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r2 = syz_clone(0x14880, 0x0, 0x39, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) rt_tgsigqueueinfo(r1, r1, 0x5, &(0x7f0000000080)={0x3e, 0x8, 0x3}) (async, rerun: 64) shutdown(0xffffffffffffffff, 0x0) (async, rerun: 32) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x80, @remote, 0x10001}, 0x1c) (async, rerun: 32) socket$inet(0x2, 0xa, 0x8000) (async) tgkill(0x0, 0x0, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x16, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_DISABLE_QUIRKS2(r5, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x48}) (async) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000280)={0x0, &(0x7f0000000700)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0xffffffffffffff7e}) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x0) syz_usb_ep_read(r8, 0xf, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) executing program 3: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b0001006578746864720000140002800800064000000002080007500000000e0900020073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) socket$netlink(0x10, 0x3, 0x9) ioctl(r0, 0x40009916, &(0x7f0000000040)="000000001a6250d3f89cc1de1dcd382004c1e04bc758a2d2a4665272049baa594530fd62991d1d30d398d8979bd057a2039aaa46886ed3b1098ba9c0e7c70f17f1b9eb3f57a946e340f6735cd8eecbb41629cf247639cb7b3a0025c3d2e54106881d4f254058faf28e5b1f7cdaf5a822e8a3318e23d44fd9ea8d2a89c07e0a5178d9d0ee68de") executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000e40)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000940), 0x800000000000082, 0x20000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/118, 0x76}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./sys/bus/machinecheck\x00', 0x0, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000700)={0x8, 0xfffffffd, 0x40, 0x6}) r3 = openat(r2, &(0x7f0000000ec0)='drivers_probe\x00', 0x1, 0x0) r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, &(0x7f0000000300)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x3, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f00000003c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000400)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f3}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x1, 0x1, 0xbab, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x83dd9045d6f57276, 0x40040005, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000ec4b, 0x200, 0x1, 0x391}}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r8}}, 0xc) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), r3) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f00000007c0)={@initdev, @multicast1, 0x0}, &(0x7f0000000800)=0xc) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r9, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) write(r3, &(0x7f0000000f00)='machinecheck1', 0xd) executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x200) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000) munlockall() mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f00000005c0)='nilfs2\x00', 0x81001f, 0x0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4100, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x0, 0x200000000400, 0x200000000518, 0x200000000660], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x88fb, 'batadv0\x00', 'veth1_to_bond\x00', 'xfrm0\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x0, 0xd2d, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'wlan1\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0xb8, 0xe8, 0x118, [@ip={{'ip\x00', 0x0, 0x20}, {{@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0xfe, 0x5e, 0x4e84ee8874ed0a2d, 0x4, 0x4e20, 0x4e23, 0x4e24, 0x4e24}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa}}}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) executing program 39: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4100, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x0, 0x200000000400, 0x200000000518, 0x200000000660], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x88fb, 'batadv0\x00', 'veth1_to_bond\x00', 'xfrm0\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x0, 0xd2d, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'wlan1\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0xb8, 0xe8, 0x118, [@ip={{'ip\x00', 0x0, 0x20}, {{@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0xfe, 0x5e, 0x4e84ee8874ed0a2d, 0x4, 0x4e20, 0x4e23, 0x4e24, 0x4e24}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa}}}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) executing program 9: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 9: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) getpgid(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000019340)=0xc74, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019180)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000191c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000019200)='./proc\x00', &(0x7f0000019240)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019280)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write$P9_RWALK(r4, 0x0, 0xffffff28) executing program 9: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) writev(r0, &(0x7f0000002ac0)=[{&(0x7f0000001640)='}', 0x1}], 0x1) pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0xfb2200) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x29a}) executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 9: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000000980)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x42, 0x0) r4 = fanotify_init(0xef0, 0x40000) fanotify_mark(r4, 0x105, 0x40009965, r3, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x39d) executing program 0: r0 = mq_open(&(0x7f0000002a40)='\a\x05\x00\x00', 0xa167ad740cb9a351, 0x3c, 0x0) fcntl$setflags(r0, 0x2, 0x0) executing program 9: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES8=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="200704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000440)={0x0, 0x3, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = gettid() timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x3, 0x58) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x1ffffffff000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0x0, @mcast2, 0x2}, 0x1c, 0x0}}, {{&(0x7f0000000380)={0xa, 0x4e24, 0x7, @mcast1, 0x543}, 0x1c, 0x0, 0x0, 0x0, 0x30}}], 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f00000028c0)={0x2020}, 0x2020) executing program 9: r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000500)={[{0x3d, 0x4e00, "c4eaf25b88ffacbf6f56fc6a2876659c363fad62f286759a082f2f09b64147f31c772e2635a3c595eeeb8450ccff5e79a548b591d2724d899c1b59af65"}]}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) executing program 0: r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000380)={0x0, 0x0, 0x560c, {0x803, 0x5d3}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x71, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) executing program 8: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000b00)={0x18, {"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", 0x1000}}, 0x1006) executing program 8: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/ip_vs\x00') openat(0xffffffffffffff9c, 0x0, 0x80143, 0x1ff) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000009c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000a00)=0xffb) r1 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000f40)={{0x1088, 0x6, 0x2, 0x40, 'syz0\x00', 0x200000}, 0x1, 0x20, 0x1, r1, 0x0, 0x4, 'syz1\x00', 0x0}) executing program 8: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x10, 0x1, 0xc, 0x0, 0x0, 0xfe, 0xc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0x8000, 0xa41, 0x8, 0x8d2, 0x8}, 0x14) executing program 8: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304, 0x38}, '\x00\x00Q\x00\b\x009\x00', '\x00', '^\x00\x00F', "00000000000000fd"}, 0x28) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000280)="004f63d107ec288868081b2841cf2cda29422f015d6a1fae2652e7e725304d947a450e8de7dd65b0a4fb25ca2975fe4ba594dae93919002793efefe7aaaa1417185daa79a4998ab9d5d46ca88fc30a8f8a42aa7fa01570cef52ff91e4175b748d5192b80", 0x64}, {&(0x7f0000000140)="c1d8c827763ad9038ba2c1a0c461aef99cbe5110a63d545a376193", 0x1b}], 0x2) executing program 8: truncate(&(0x7f0000002840)='./file1\x00', 0xfc0) mount(0x0, &(0x7f0000000400)='./tracing\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2800, 0x24) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000280), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000300), 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000005c0)=""/222, &(0x7f00000006c0)=0xde) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast2, 0x4e20, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x5, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x6}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x48, 0x4, 0x8000, 0x2}, {{@in=@loopback, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffcf9, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000d000)=""/102392, 0x18ff8) connect$inet(r0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x88) fcntl$setlease(r5, 0x400, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) program crashed: possible deadlock in blk_request_module bisect: bisecting 68 programs bisect: split chunks (needed=false): <68> bisect: split chunk #0 of len 68 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m11s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 5, 19, 27, 30, 7, 27, 6, 7, 4, 2, 18, 2, 2, 7, 30, 7, 26, 5, 2, 2, 4, 19, 10, 3, 4, 16, 2, 2, 4, 9, 4, 8, 13, 4, 3, 8, 5, 6, 15, 4, 2, 16, 8, 5] detailed listing: executing program 6: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_NEW(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000000)={0x0, 0x4389d}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0xffffff6f, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) executing program 6: memfd_create(&(0x7f0000000280)='-_~\x00\x00\x00\x00\x04\x00go\xa7\xb1\x8fqtZ\xe5v\xf8[5\x14\xc5.\x92\xe5\xbd\x94 U\x8dk;Bfk\xbbq,\xa4\"2#c\xe4\xf3i31&\x1d?\xdc\x99s)\x0e\xe1\x10E]&(\xcf\xf0\xec\x95\xa2\x84\x8c\xd2\xf5\xc9h?\x18\x99,\xaa9M\xdc[F\x82t\xa5)\x06{ua\xa9\xdc:*P\x13\xe4\xba\x10\xbd9\xdf\x97\x1fz\xc6\xc1\xb17\xd5SQ\xe8\\7:l\xc6\xd7,Px\xd4\xd7\'\xb5\xae\xfa\xe3\x83EP\x8f1\xb9x\\fZ\xee\xca\xa3\xed\xac\x82\xb2\xea=\xf0\xd53\x9d0nOH\xaew4\xb2\xf5\xfb\x0f\xea\xc3\x8b[YF\x1a\x96K\x1dJ\xee\xe4\xc3\xc2\x1bBz\xbf\xda\x10\x14\xbb9\xbe\fx\xee5W\x15\xe01\x1d\f\xcd\x12\xa5\xf0Y{\x8c\xf9\xbf}\xa3=\xc9s1\xf2q\x88-\"\xe3\xe6\x1d\x85\x83\xd2\xec\xb8O}9\xb4\x7f\xcf\xbc\xf5\x90{\xe7P\xcb\xa3)\xa0^he\xc4\xe0\xe3Au1]4\xa3\xce#\xfbq\xe6\xefW\xe5\xf1\x12\xad\xf9+\xd7\xa6_j\x84\x13R\x18\x1b q8\xc5\xe8z\xa0\x92\xdf\x8e', 0xd) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x20049, 0x80) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0xb50, 0xd, @name="9b6154dbd0c646db726492e1a39b984f781a2e0fe14ea7b2a02aab01e07a9145"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000002c0)={&(0x7f00000004c0)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000580)={0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) read(r3, &(0x7f00000001c0)=""/256, 0x100) write(r1, &(0x7f0000000480)='27', 0x2) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000002600)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000002640)={@my=0x0}) executing program 6: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) executing program 35: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000001c0)=0x1a, 0x4) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000001220010026bd7000fedbdf25100000000c00ce00400000e8bcd8bd0004003780"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./nfsd\x00', 0x1ff) mremap(&(0x7f00005c9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000be6000/0x2000)=nil) munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) mremap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000f91000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) eventfd2(0xc59, 0x80001) syz_open_dev$amidi(&(0x7f0000000880), 0x3, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, r6, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x4, 0x26b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x305}}}, &(0x7f0000000580)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x8000002, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x200, 0x2, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x2, 0x36f}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x307ea, 0x4) read$FUSE(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000080)={0x2, 0x8001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000100)={r10, 0x7}, 0x8) executing program 36: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) getegid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000004980), 0x7f, 0x8125c1) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000005100)={0x301, 0x5, &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004b00)=[0x9], &(0x7f0000005080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000050c0)=[0x8000000000000000, 0x0], 0x0, 0xffffffff}) read(r0, &(0x7f00000004c0)=""/16384, 0x4000) executing program 37: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) executing program 7: mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='my_debugfs/asoc/components\x00', 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @multicast2}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x9}}}, 0xffffffffffffff20) executing program 7: mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x25, 0x0, 0x2, 0xfffffffe}, {0x6}, {}, {0x6}]}) ioctl$ADD_NEW_DISK(r0, 0x40140921, 0x0) executing program 7: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0x5, 0xa, 0x4}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0xa, @pix={0x8, 0x9, 0x30323953, 0x2, 0x5, 0x400, 0x20, 0x2, 0x1, 0x4, 0x0, 0x5}}) executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x20, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x40004) executing program 7: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(0x3) ioctl$MEMSETBADBLOCK(r3, 0x40084d0c, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000000)) executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/trace\x00', 0x0, 0x42) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) executing program 38: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/trace\x00', 0x0, 0x42) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/kcm\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000002200)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x4000, @in={0x2, 0x5e22, @loopback}}}, 0x90) executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async, rerun: 32) r1 = syz_clone(0x25088000, 0x0, 0x1b, 0x0, 0x0, 0x0) (async) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r2 = syz_clone(0x14880, 0x0, 0x39, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) rt_tgsigqueueinfo(r1, r1, 0x5, &(0x7f0000000080)={0x3e, 0x8, 0x3}) (async, rerun: 64) shutdown(0xffffffffffffffff, 0x0) (async, rerun: 32) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x80, @remote, 0x10001}, 0x1c) (async, rerun: 32) socket$inet(0x2, 0xa, 0x8000) (async) tgkill(0x0, 0x0, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x16, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_DISABLE_QUIRKS2(r5, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x48}) (async) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000280)={0x0, &(0x7f0000000700)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0xffffffffffffff7e}) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x0) syz_usb_ep_read(r8, 0xf, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) executing program 3: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b0001006578746864720000140002800800064000000002080007500000000e0900020073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) socket$netlink(0x10, 0x3, 0x9) ioctl(r0, 0x40009916, &(0x7f0000000040)="000000001a6250d3f89cc1de1dcd382004c1e04bc758a2d2a4665272049baa594530fd62991d1d30d398d8979bd057a2039aaa46886ed3b1098ba9c0e7c70f17f1b9eb3f57a946e340f6735cd8eecbb41629cf247639cb7b3a0025c3d2e54106881d4f254058faf28e5b1f7cdaf5a822e8a3318e23d44fd9ea8d2a89c07e0a5178d9d0ee68de") executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000e40)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000940), 0x800000000000082, 0x20000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/118, 0x76}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./sys/bus/machinecheck\x00', 0x0, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000700)={0x8, 0xfffffffd, 0x40, 0x6}) r3 = openat(r2, &(0x7f0000000ec0)='drivers_probe\x00', 0x1, 0x0) r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, &(0x7f0000000300)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x3, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f00000003c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000400)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f3}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x1, 0x1, 0xbab, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x83dd9045d6f57276, 0x40040005, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000ec4b, 0x200, 0x1, 0x391}}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r8}}, 0xc) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), r3) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f00000007c0)={@initdev, @multicast1, 0x0}, &(0x7f0000000800)=0xc) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r9, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) write(r3, &(0x7f0000000f00)='machinecheck1', 0xd) executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x200) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000) munlockall() mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f00000005c0)='nilfs2\x00', 0x81001f, 0x0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4100, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x0, 0x200000000400, 0x200000000518, 0x200000000660], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x88fb, 'batadv0\x00', 'veth1_to_bond\x00', 'xfrm0\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x0, 0xd2d, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'wlan1\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0xb8, 0xe8, 0x118, [@ip={{'ip\x00', 0x0, 0x20}, {{@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0xfe, 0x5e, 0x4e84ee8874ed0a2d, 0x4, 0x4e20, 0x4e23, 0x4e24, 0x4e24}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa}}}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) executing program 39: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4100, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x0, 0x200000000400, 0x200000000518, 0x200000000660], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x88fb, 'batadv0\x00', 'veth1_to_bond\x00', 'xfrm0\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x0, 0xd2d, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'wlan1\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0xb8, 0xe8, 0x118, [@ip={{'ip\x00', 0x0, 0x20}, {{@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0xfe, 0x5e, 0x4e84ee8874ed0a2d, 0x4, 0x4e20, 0x4e23, 0x4e24, 0x4e24}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa}}}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) executing program 9: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 9: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) getpgid(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000019340)=0xc74, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019180)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000191c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000019200)='./proc\x00', &(0x7f0000019240)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019280)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write$P9_RWALK(r4, 0x0, 0xffffff28) executing program 9: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) writev(r0, &(0x7f0000002ac0)=[{&(0x7f0000001640)='}', 0x1}], 0x1) pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0xfb2200) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x29a}) executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 9: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000000980)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x42, 0x0) r4 = fanotify_init(0xef0, 0x40000) fanotify_mark(r4, 0x105, 0x40009965, r3, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x39d) executing program 0: r0 = mq_open(&(0x7f0000002a40)='\a\x05\x00\x00', 0xa167ad740cb9a351, 0x3c, 0x0) fcntl$setflags(r0, 0x2, 0x0) executing program 9: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES8=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="200704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000440)={0x0, 0x3, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = gettid() timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x3, 0x58) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x1ffffffff000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0x0, @mcast2, 0x2}, 0x1c, 0x0}}, {{&(0x7f0000000380)={0xa, 0x4e24, 0x7, @mcast1, 0x543}, 0x1c, 0x0, 0x0, 0x0, 0x30}}], 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f00000028c0)={0x2020}, 0x2020) executing program 9: r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000500)={[{0x3d, 0x4e00, "c4eaf25b88ffacbf6f56fc6a2876659c363fad62f286759a082f2f09b64147f31c772e2635a3c595eeeb8450ccff5e79a548b591d2724d899c1b59af65"}]}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) executing program 0: r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000380)={0x0, 0x0, 0x560c, {0x803, 0x5d3}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x71, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) executing program 8: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000b00)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f7ac9b36096eff7fc6e5539b9b18098b9b4a1b2538181b080d29308f0e1ac6e7149b3468959b189a242a9b3f6d988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f7227b7ba67e0e78657c2f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850ab8afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a7315c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c0c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe8a3c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f198a037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e251f2409f610b2db8d1f48c13b65df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e10d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b70894902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50a0000fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426dd6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd66555347015daa85f25057f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971f41488b8658a20878b7c1dd7ba021943939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3ef4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a06f8c04ef23d537639a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f7953c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c069595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb92c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939b6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766b0500000000000000a1d998a2017aef0948a68cb0b3e35cb80dd349e891ae04000000080e8ac32a308e15fc37d06aeac289c0523f487e1ff7408c60edddab652f2ef91d4f2b01987b0f46e4034e5c3f745a7ee81087dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a63c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5347d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4fcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe520629b40d7ceee5802cb5e930ed624806c4380b6dc9336d07c2b8081c188d26558f48261f7897084c2a1a9a6613bc18f5a38ff42768af38041efe03d152ef95ff569e76db2391f4509d7f30ad92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f7150b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b35e52600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000204b0a0780d821a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff9576abc9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) executing program 8: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/ip_vs\x00') openat(0xffffffffffffff9c, 0x0, 0x80143, 0x1ff) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000009c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000a00)=0xffb) r1 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000f40)={{0x1088, 0x6, 0x2, 0x40, 'syz0\x00', 0x200000}, 0x1, 0x20, 0x1, r1, 0x0, 0x4, 'syz1\x00', 0x0}) executing program 8: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x10, 0x1, 0xc, 0x0, 0x0, 0xfe, 0xc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0x8000, 0xa41, 0x8, 0x8d2, 0x8}, 0x14) executing program 8: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304, 0x38}, '\x00\x00Q\x00\b\x009\x00', '\x00', '^\x00\x00F', "00000000000000fd"}, 0x28) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000280)="004f63d107ec288868081b2841cf2cda29422f015d6a1fae2652e7e725304d947a450e8de7dd65b0a4fb25ca2975fe4ba594dae93919002793efefe7aaaa1417185daa79a4998ab9d5d46ca88fc30a8f8a42aa7fa01570cef52ff91e4175b748d5192b80", 0x64}, {&(0x7f0000000140)="c1d8c827763ad9038ba2c1a0c461aef99cbe5110a63d545a376193", 0x1b}], 0x2) executing program 8: truncate(&(0x7f0000002840)='./file1\x00', 0xfc0) mount(0x0, &(0x7f0000000400)='./tracing\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2800, 0x24) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000280), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000300), 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000005c0)=""/222, &(0x7f00000006c0)=0xde) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast2, 0x4e20, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x5, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x6}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x48, 0x4, 0x8000, 0x2}, {{@in=@loopback, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffcf9, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000d000)=""/102392, 0x18ff8) connect$inet(r0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x88) fcntl$setlease(r5, 0x400, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) program crashed: possible deadlock in blk_request_module bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 3, 4, 16, 2, 2, 4, 9, 4, 8, 13, 4, 3, 8, 5, 6, 15, 4, 2, 16, 8, 5] detailed listing: executing program 9: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) writev(r0, &(0x7f0000002ac0)=[{&(0x7f0000001640)='}', 0x1}], 0x1) pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0xfb2200) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x29a}) executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 9: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000000980)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x42, 0x0) r4 = fanotify_init(0xef0, 0x40000) fanotify_mark(r4, 0x105, 0x40009965, r3, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x39d) executing program 0: r0 = mq_open(&(0x7f0000002a40)='\a\x05\x00\x00', 0xa167ad740cb9a351, 0x3c, 0x0) fcntl$setflags(r0, 0x2, 0x0) executing program 9: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES8=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="200704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000440)={0x0, 0x3, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = gettid() timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x3, 0x58) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x1ffffffff000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0x0, @mcast2, 0x2}, 0x1c, 0x0}}, {{&(0x7f0000000380)={0xa, 0x4e24, 0x7, @mcast1, 0x543}, 0x1c, 0x0, 0x0, 0x0, 0x30}}], 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f00000028c0)={0x2020}, 0x2020) executing program 9: r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000500)={[{0x3d, 0x4e00, "c4eaf25b88ffacbf6f56fc6a2876659c363fad62f286759a082f2f09b64147f31c772e2635a3c595eeeb8450ccff5e79a548b591d2724d899c1b59af65"}]}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) executing program 0: r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000380)={0x0, 0x0, 0x560c, {0x803, 0x5d3}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x71, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) executing program 8: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000b00)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f7ac9b36096eff7fc6e5539b9b18098b9b4a1b2538181b080d29308f0e1ac6e7149b3468959b189a242a9b3f6d988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f7227b7ba67e0e78657c2f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850ab8afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a7315c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c0c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe8a3c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f198a037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e251f2409f610b2db8d1f48c13b65df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e10d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b70894902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50a0000fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426dd6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd66555347015daa85f25057f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971f41488b8658a20878b7c1dd7ba021943939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3ef4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a06f8c04ef23d537639a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f7953c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c069595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb92c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939b6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766b0500000000000000a1d998a2017aef0948a68cb0b3e35cb80dd349e891ae04000000080e8ac32a308e15fc37d06aeac289c0523f487e1ff7408c60edddab652f2ef91d4f2b01987b0f46e4034e5c3f745a7ee81087dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a63c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5347d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4fcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe520629b40d7ceee5802cb5e930ed624806c4380b6dc9336d07c2b8081c188d26558f48261f7897084c2a1a9a6613bc18f5a38ff42768af38041efe03d152ef95ff569e76db2391f4509d7f30ad92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f7150b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b35e52600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000204b0a0780d821a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff9576abc9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) executing program 8: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/ip_vs\x00') openat(0xffffffffffffff9c, 0x0, 0x80143, 0x1ff) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000009c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000a00)=0xffb) r1 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000f40)={{0x1088, 0x6, 0x2, 0x40, 'syz0\x00', 0x200000}, 0x1, 0x20, 0x1, r1, 0x0, 0x4, 'syz1\x00', 0x0}) executing program 8: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x10, 0x1, 0xc, 0x0, 0x0, 0xfe, 0xc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0x8000, 0xa41, 0x8, 0x8d2, 0x8}, 0x14) executing program 8: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304, 0x38}, '\x00\x00Q\x00\b\x009\x00', '\x00', '^\x00\x00F', "00000000000000fd"}, 0x28) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000280)="004f63d107ec288868081b2841cf2cda29422f015d6a1fae2652e7e725304d947a450e8de7dd65b0a4fb25ca2975fe4ba594dae93919002793efefe7aaaa1417185daa79a4998ab9d5d46ca88fc30a8f8a42aa7fa01570cef52ff91e4175b748d5192b80", 0x64}, {&(0x7f0000000140)="c1d8c827763ad9038ba2c1a0c461aef99cbe5110a63d545a376193", 0x1b}], 0x2) executing program 8: truncate(&(0x7f0000002840)='./file1\x00', 0xfc0) mount(0x0, &(0x7f0000000400)='./tracing\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2800, 0x24) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000280), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000300), 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000005c0)=""/222, &(0x7f00000006c0)=0xde) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast2, 0x4e20, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x5, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x6}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x48, 0x4, 0x8000, 0x2}, {{@in=@loopback, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffcf9, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000d000)=""/102392, 0x18ff8) connect$inet(r0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x88) fcntl$setlease(r5, 0x400, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 5, 19, 27, 30, 7, 27, 6, 7, 4, 2, 18, 2, 2, 7, 30, 7, 26, 5, 2, 2, 4, 19] detailed listing: executing program 6: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_NEW(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000000)={0x0, 0x4389d}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0xffffff6f, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) executing program 6: memfd_create(&(0x7f0000000280)='-_~\x00\x00\x00\x00\x04\x00go\xa7\xb1\x8fqtZ\xe5v\xf8[5\x14\xc5.\x92\xe5\xbd\x94 U\x8dk;Bfk\xbbq,\xa4\"2#c\xe4\xf3i31&\x1d?\xdc\x99s)\x0e\xe1\x10E]&(\xcf\xf0\xec\x95\xa2\x84\x8c\xd2\xf5\xc9h?\x18\x99,\xaa9M\xdc[F\x82t\xa5)\x06{ua\xa9\xdc:*P\x13\xe4\xba\x10\xbd9\xdf\x97\x1fz\xc6\xc1\xb17\xd5SQ\xe8\\7:l\xc6\xd7,Px\xd4\xd7\'\xb5\xae\xfa\xe3\x83EP\x8f1\xb9x\\fZ\xee\xca\xa3\xed\xac\x82\xb2\xea=\xf0\xd53\x9d0nOH\xaew4\xb2\xf5\xfb\x0f\xea\xc3\x8b[YF\x1a\x96K\x1dJ\xee\xe4\xc3\xc2\x1bBz\xbf\xda\x10\x14\xbb9\xbe\fx\xee5W\x15\xe01\x1d\f\xcd\x12\xa5\xf0Y{\x8c\xf9\xbf}\xa3=\xc9s1\xf2q\x88-\"\xe3\xe6\x1d\x85\x83\xd2\xec\xb8O}9\xb4\x7f\xcf\xbc\xf5\x90{\xe7P\xcb\xa3)\xa0^he\xc4\xe0\xe3Au1]4\xa3\xce#\xfbq\xe6\xefW\xe5\xf1\x12\xad\xf9+\xd7\xa6_j\x84\x13R\x18\x1b q8\xc5\xe8z\xa0\x92\xdf\x8e', 0xd) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x20049, 0x80) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0xb50, 0xd, @name="9b6154dbd0c646db726492e1a39b984f781a2e0fe14ea7b2a02aab01e07a9145"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000002c0)={&(0x7f00000004c0)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000580)={0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) read(r3, &(0x7f00000001c0)=""/256, 0x100) write(r1, &(0x7f0000000480)='27', 0x2) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000002600)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000002640)={@my=0x0}) executing program 6: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) executing program 35: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000001c0)=0x1a, 0x4) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000001220010026bd7000fedbdf25100000000c00ce00400000e8bcd8bd0004003780"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./nfsd\x00', 0x1ff) mremap(&(0x7f00005c9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000be6000/0x2000)=nil) munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) mremap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000f91000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) eventfd2(0xc59, 0x80001) syz_open_dev$amidi(&(0x7f0000000880), 0x3, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, r6, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x4, 0x26b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x305}}}, &(0x7f0000000580)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x8000002, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x200, 0x2, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x2, 0x36f}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x307ea, 0x4) read$FUSE(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000080)={0x2, 0x8001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000100)={r10, 0x7}, 0x8) executing program 36: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) getegid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000004980), 0x7f, 0x8125c1) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000005100)={0x301, 0x5, &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004b00)=[0x9], &(0x7f0000005080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000050c0)=[0x8000000000000000, 0x0], 0x0, 0xffffffff}) read(r0, &(0x7f00000004c0)=""/16384, 0x4000) executing program 37: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) executing program 7: mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='my_debugfs/asoc/components\x00', 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @multicast2}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x9}}}, 0xffffffffffffff20) executing program 7: mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x25, 0x0, 0x2, 0xfffffffe}, {0x6}, {}, {0x6}]}) ioctl$ADD_NEW_DISK(r0, 0x40140921, 0x0) executing program 7: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0x5, 0xa, 0x4}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0xa, @pix={0x8, 0x9, 0x30323953, 0x2, 0x5, 0x400, 0x20, 0x2, 0x1, 0x4, 0x0, 0x5}}) executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x20, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x40004) executing program 7: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(0x3) ioctl$MEMSETBADBLOCK(r3, 0x40084d0c, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000000)) executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/trace\x00', 0x0, 0x42) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) executing program 38: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/trace\x00', 0x0, 0x42) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/kcm\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000002200)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x4000, @in={0x2, 0x5e22, @loopback}}}, 0x90) executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async, rerun: 32) r1 = syz_clone(0x25088000, 0x0, 0x1b, 0x0, 0x0, 0x0) (async) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r2 = syz_clone(0x14880, 0x0, 0x39, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) rt_tgsigqueueinfo(r1, r1, 0x5, &(0x7f0000000080)={0x3e, 0x8, 0x3}) (async, rerun: 64) shutdown(0xffffffffffffffff, 0x0) (async, rerun: 32) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x80, @remote, 0x10001}, 0x1c) (async, rerun: 32) socket$inet(0x2, 0xa, 0x8000) (async) tgkill(0x0, 0x0, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x16, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_DISABLE_QUIRKS2(r5, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x48}) (async) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000280)={0x0, &(0x7f0000000700)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0xffffffffffffff7e}) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x0) syz_usb_ep_read(r8, 0xf, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) executing program 3: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b0001006578746864720000140002800800064000000002080007500000000e0900020073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) socket$netlink(0x10, 0x3, 0x9) ioctl(r0, 0x40009916, &(0x7f0000000040)="000000001a6250d3f89cc1de1dcd382004c1e04bc758a2d2a4665272049baa594530fd62991d1d30d398d8979bd057a2039aaa46886ed3b1098ba9c0e7c70f17f1b9eb3f57a946e340f6735cd8eecbb41629cf247639cb7b3a0025c3d2e54106881d4f254058faf28e5b1f7cdaf5a822e8a3318e23d44fd9ea8d2a89c07e0a5178d9d0ee68de") executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000e40)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000940), 0x800000000000082, 0x20000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/118, 0x76}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./sys/bus/machinecheck\x00', 0x0, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000700)={0x8, 0xfffffffd, 0x40, 0x6}) r3 = openat(r2, &(0x7f0000000ec0)='drivers_probe\x00', 0x1, 0x0) r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, &(0x7f0000000300)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x3, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f00000003c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000400)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f3}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x1, 0x1, 0xbab, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x83dd9045d6f57276, 0x40040005, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000ec4b, 0x200, 0x1, 0x391}}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r8}}, 0xc) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), r3) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f00000007c0)={@initdev, @multicast1, 0x0}, &(0x7f0000000800)=0xc) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r9, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) write(r3, &(0x7f0000000f00)='machinecheck1', 0xd) executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x200) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000) munlockall() mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f00000005c0)='nilfs2\x00', 0x81001f, 0x0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4100, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x0, 0x200000000400, 0x200000000518, 0x200000000660], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x88fb, 'batadv0\x00', 'veth1_to_bond\x00', 'xfrm0\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x0, 0xd2d, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'wlan1\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0xb8, 0xe8, 0x118, [@ip={{'ip\x00', 0x0, 0x20}, {{@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0xfe, 0x5e, 0x4e84ee8874ed0a2d, 0x4, 0x4e20, 0x4e23, 0x4e24, 0x4e24}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa}}}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) executing program 39: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4100, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x0, 0x200000000400, 0x200000000518, 0x200000000660], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x88fb, 'batadv0\x00', 'veth1_to_bond\x00', 'xfrm0\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x0, 0xd2d, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'wlan1\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0xb8, 0xe8, 0x118, [@ip={{'ip\x00', 0x0, 0x20}, {{@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0xfe, 0x5e, 0x4e84ee8874ed0a2d, 0x4, 0x4e20, 0x4e23, 0x4e24, 0x4e24}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa}}}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) executing program 9: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 9: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) getpgid(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000019340)=0xc74, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019180)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000191c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000019200)='./proc\x00', &(0x7f0000019240)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019280)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write$P9_RWALK(r4, 0x0, 0xffffff28) program did not crash bisect: split chunks (needed=true): <23>, <22> bisect: split chunk #0 of len 23 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m8s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 7, 30, 7, 26, 5, 2, 2, 4, 19, 10, 3, 4, 16, 2, 2, 4, 9, 4, 8, 13, 4, 3, 8, 5, 6, 15, 4, 2, 16, 8, 5] detailed listing: executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/trace\x00', 0x0, 0x42) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) executing program 38: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/trace\x00', 0x0, 0x42) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000bc0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/kcm\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000002200)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x4000, @in={0x2, 0x5e22, @loopback}}}, 0x90) executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async, rerun: 32) r1 = syz_clone(0x25088000, 0x0, 0x1b, 0x0, 0x0, 0x0) (async) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r2 = syz_clone(0x14880, 0x0, 0x39, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) rt_tgsigqueueinfo(r1, r1, 0x5, &(0x7f0000000080)={0x3e, 0x8, 0x3}) (async, rerun: 64) shutdown(0xffffffffffffffff, 0x0) (async, rerun: 32) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x80, @remote, 0x10001}, 0x1c) (async, rerun: 32) socket$inet(0x2, 0xa, 0x8000) (async) tgkill(0x0, 0x0, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x16, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_DISABLE_QUIRKS2(r5, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x48}) (async) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000280)={0x0, &(0x7f0000000700)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0xffffffffffffff7e}) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x0) syz_usb_ep_read(r8, 0xf, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) executing program 3: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b0001006578746864720000140002800800064000000002080007500000000e0900020073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) socket$netlink(0x10, 0x3, 0x9) ioctl(r0, 0x40009916, &(0x7f0000000040)="000000001a6250d3f89cc1de1dcd382004c1e04bc758a2d2a4665272049baa594530fd62991d1d30d398d8979bd057a2039aaa46886ed3b1098ba9c0e7c70f17f1b9eb3f57a946e340f6735cd8eecbb41629cf247639cb7b3a0025c3d2e54106881d4f254058faf28e5b1f7cdaf5a822e8a3318e23d44fd9ea8d2a89c07e0a5178d9d0ee68de") executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000e40)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000940), 0x800000000000082, 0x20000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/118, 0x76}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./sys/bus/machinecheck\x00', 0x0, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000700)={0x8, 0xfffffffd, 0x40, 0x6}) r3 = openat(r2, &(0x7f0000000ec0)='drivers_probe\x00', 0x1, 0x0) r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, &(0x7f0000000300)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x3, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f00000003c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000400)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f3}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x1, 0x1, 0xbab, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x83dd9045d6f57276, 0x40040005, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000ec4b, 0x200, 0x1, 0x391}}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r8}}, 0xc) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), r3) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f00000007c0)={@initdev, @multicast1, 0x0}, &(0x7f0000000800)=0xc) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r9, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) write(r3, &(0x7f0000000f00)='machinecheck1', 0xd) executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x200) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000) munlockall() mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f00000005c0)='nilfs2\x00', 0x81001f, 0x0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4100, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x0, 0x200000000400, 0x200000000518, 0x200000000660], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x88fb, 'batadv0\x00', 'veth1_to_bond\x00', 'xfrm0\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x0, 0xd2d, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'wlan1\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0xb8, 0xe8, 0x118, [@ip={{'ip\x00', 0x0, 0x20}, {{@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0xfe, 0x5e, 0x4e84ee8874ed0a2d, 0x4, 0x4e20, 0x4e23, 0x4e24, 0x4e24}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa}}}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) executing program 39: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4100, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x0, 0x200000000400, 0x200000000518, 0x200000000660], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x88fb, 'batadv0\x00', 'veth1_to_bond\x00', 'xfrm0\x00', 'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff], @random="0a56b08c7ec7", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72c, 0x2, 0x0, 0xd2d, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x54, 0x800, 'ipvlan1\x00', 'veth1_to_bridge\x00', 'wlan1\x00', 'lo\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0xb8, 0xe8, 0x118, [@ip={{'ip\x00', 0x0, 0x20}, {{@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0xfe, 0x5e, 0x4e84ee8874ed0a2d, 0x4, 0x4e20, 0x4e23, 0x4e24, 0x4e24}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa}}}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) executing program 9: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 9: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) getpgid(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000019340)=0xc74, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019180)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000191c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000019200)='./proc\x00', &(0x7f0000019240)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019280)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write$P9_RWALK(r4, 0x0, 0xffffff28) executing program 9: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) writev(r0, &(0x7f0000002ac0)=[{&(0x7f0000001640)='}', 0x1}], 0x1) pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0xfb2200) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x29a}) executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 9: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000000980)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x42, 0x0) r4 = fanotify_init(0xef0, 0x40000) fanotify_mark(r4, 0x105, 0x40009965, r3, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x39d) executing program 0: r0 = mq_open(&(0x7f0000002a40)='\a\x05\x00\x00', 0xa167ad740cb9a351, 0x3c, 0x0) fcntl$setflags(r0, 0x2, 0x0) executing program 9: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES8=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="200704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000440)={0x0, 0x3, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = gettid() timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x3, 0x58) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x1ffffffff000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0x0, @mcast2, 0x2}, 0x1c, 0x0}}, {{&(0x7f0000000380)={0xa, 0x4e24, 0x7, @mcast1, 0x543}, 0x1c, 0x0, 0x0, 0x0, 0x30}}], 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f00000028c0)={0x2020}, 0x2020) executing program 9: r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000500)={[{0x3d, 0x4e00, "c4eaf25b88ffacbf6f56fc6a2876659c363fad62f286759a082f2f09b64147f31c772e2635a3c595eeeb8450ccff5e79a548b591d2724d899c1b59af65"}]}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) executing program 0: r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000380)={0x0, 0x0, 0x560c, {0x803, 0x5d3}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x71, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) executing program 8: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000b00)={0x18, {"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", 0x1000}}, 0x1006) executing program 8: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/ip_vs\x00') openat(0xffffffffffffff9c, 0x0, 0x80143, 0x1ff) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000009c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000a00)=0xffb) r1 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000f40)={{0x1088, 0x6, 0x2, 0x40, 'syz0\x00', 0x200000}, 0x1, 0x20, 0x1, r1, 0x0, 0x4, 'syz1\x00', 0x0}) executing program 8: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x10, 0x1, 0xc, 0x0, 0x0, 0xfe, 0xc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0x8000, 0xa41, 0x8, 0x8d2, 0x8}, 0x14) executing program 8: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304, 0x38}, '\x00\x00Q\x00\b\x009\x00', '\x00', '^\x00\x00F', "00000000000000fd"}, 0x28) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000280)="004f63d107ec288868081b2841cf2cda29422f015d6a1fae2652e7e725304d947a450e8de7dd65b0a4fb25ca2975fe4ba594dae93919002793efefe7aaaa1417185daa79a4998ab9d5d46ca88fc30a8f8a42aa7fa01570cef52ff91e4175b748d5192b80", 0x64}, {&(0x7f0000000140)="c1d8c827763ad9038ba2c1a0c461aef99cbe5110a63d545a376193", 0x1b}], 0x2) executing program 8: truncate(&(0x7f0000002840)='./file1\x00', 0xfc0) mount(0x0, &(0x7f0000000400)='./tracing\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2800, 0x24) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000280), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000300), 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000005c0)=""/222, &(0x7f00000006c0)=0xde) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast2, 0x4e20, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x5, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x6}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x48, 0x4, 0x8000, 0x2}, {{@in=@loopback, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffcf9, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000d000)=""/102392, 0x18ff8) connect$inet(r0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x88) fcntl$setlease(r5, 0x400, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m8s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 5, 19, 27, 30, 7, 27, 6, 7, 4, 2, 18, 10, 3, 4, 16, 2, 2, 4, 9, 4, 8, 13, 4, 3, 8, 5, 6, 15, 4, 2, 16, 8, 5] detailed listing: executing program 6: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_NEW(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000000)={0x0, 0x4389d}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0xffffff6f, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) executing program 6: memfd_create(&(0x7f0000000280)='-_~\x00\x00\x00\x00\x04\x00go\xa7\xb1\x8fqtZ\xe5v\xf8[5\x14\xc5.\x92\xe5\xbd\x94 U\x8dk;Bfk\xbbq,\xa4\"2#c\xe4\xf3i31&\x1d?\xdc\x99s)\x0e\xe1\x10E]&(\xcf\xf0\xec\x95\xa2\x84\x8c\xd2\xf5\xc9h?\x18\x99,\xaa9M\xdc[F\x82t\xa5)\x06{ua\xa9\xdc:*P\x13\xe4\xba\x10\xbd9\xdf\x97\x1fz\xc6\xc1\xb17\xd5SQ\xe8\\7:l\xc6\xd7,Px\xd4\xd7\'\xb5\xae\xfa\xe3\x83EP\x8f1\xb9x\\fZ\xee\xca\xa3\xed\xac\x82\xb2\xea=\xf0\xd53\x9d0nOH\xaew4\xb2\xf5\xfb\x0f\xea\xc3\x8b[YF\x1a\x96K\x1dJ\xee\xe4\xc3\xc2\x1bBz\xbf\xda\x10\x14\xbb9\xbe\fx\xee5W\x15\xe01\x1d\f\xcd\x12\xa5\xf0Y{\x8c\xf9\xbf}\xa3=\xc9s1\xf2q\x88-\"\xe3\xe6\x1d\x85\x83\xd2\xec\xb8O}9\xb4\x7f\xcf\xbc\xf5\x90{\xe7P\xcb\xa3)\xa0^he\xc4\xe0\xe3Au1]4\xa3\xce#\xfbq\xe6\xefW\xe5\xf1\x12\xad\xf9+\xd7\xa6_j\x84\x13R\x18\x1b q8\xc5\xe8z\xa0\x92\xdf\x8e', 0xd) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x20049, 0x80) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0xb50, 0xd, @name="9b6154dbd0c646db726492e1a39b984f781a2e0fe14ea7b2a02aab01e07a9145"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000002c0)={&(0x7f00000004c0)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000580)={0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) read(r3, &(0x7f00000001c0)=""/256, 0x100) write(r1, &(0x7f0000000480)='27', 0x2) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000002600)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000002640)={@my=0x0}) executing program 6: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) executing program 35: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000001c0)=0x1a, 0x4) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000001220010026bd7000fedbdf25100000000c00ce00400000e8bcd8bd0004003780"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./nfsd\x00', 0x1ff) mremap(&(0x7f00005c9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000be6000/0x2000)=nil) munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) mremap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000f91000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) eventfd2(0xc59, 0x80001) syz_open_dev$amidi(&(0x7f0000000880), 0x3, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, r6, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x4, 0x26b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x305}}}, &(0x7f0000000580)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x8000002, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x200, 0x2, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x2, 0x36f}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x307ea, 0x4) read$FUSE(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000080)={0x2, 0x8001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000100)={r10, 0x7}, 0x8) executing program 36: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) getegid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000004980), 0x7f, 0x8125c1) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000005100)={0x301, 0x5, &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004b00)=[0x9], &(0x7f0000005080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000050c0)=[0x8000000000000000, 0x0], 0x0, 0xffffffff}) read(r0, &(0x7f00000004c0)=""/16384, 0x4000) executing program 37: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) executing program 7: mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='my_debugfs/asoc/components\x00', 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @multicast2}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x9}}}, 0xffffffffffffff20) executing program 7: mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x25, 0x0, 0x2, 0xfffffffe}, {0x6}, {}, {0x6}]}) ioctl$ADD_NEW_DISK(r0, 0x40140921, 0x0) executing program 7: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0x5, 0xa, 0x4}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0xa, @pix={0x8, 0x9, 0x30323953, 0x2, 0x5, 0x400, 0x20, 0x2, 0x1, 0x4, 0x0, 0x5}}) executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x20, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x40004) executing program 7: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(0x3) ioctl$MEMSETBADBLOCK(r3, 0x40084d0c, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000000)) executing program 9: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) writev(r0, &(0x7f0000002ac0)=[{&(0x7f0000001640)='}', 0x1}], 0x1) pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0xfb2200) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x29a}) executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 9: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000000980)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x42, 0x0) r4 = fanotify_init(0xef0, 0x40000) fanotify_mark(r4, 0x105, 0x40009965, r3, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x39d) executing program 0: r0 = mq_open(&(0x7f0000002a40)='\a\x05\x00\x00', 0xa167ad740cb9a351, 0x3c, 0x0) fcntl$setflags(r0, 0x2, 0x0) executing program 9: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES8=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="200704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000440)={0x0, 0x3, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: r0 = gettid() timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x3, 0x58) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x1ffffffff000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0x0, @mcast2, 0x2}, 0x1c, 0x0}}, {{&(0x7f0000000380)={0xa, 0x4e24, 0x7, @mcast1, 0x543}, 0x1c, 0x0, 0x0, 0x0, 0x30}}], 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f00000028c0)={0x2020}, 0x2020) executing program 9: r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000500)={[{0x3d, 0x4e00, "c4eaf25b88ffacbf6f56fc6a2876659c363fad62f286759a082f2f09b64147f31c772e2635a3c595eeeb8450ccff5e79a548b591d2724d899c1b59af65"}]}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) executing program 0: r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000380)={0x0, 0x0, 0x560c, {0x803, 0x5d3}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x71, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) executing program 8: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000b00)={0x18, {"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", 0x1000}}, 0x1006) executing program 8: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/ip_vs\x00') openat(0xffffffffffffff9c, 0x0, 0x80143, 0x1ff) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000009c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000a00)=0xffb) r1 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000f40)={{0x1088, 0x6, 0x2, 0x40, 'syz0\x00', 0x200000}, 0x1, 0x20, 0x1, r1, 0x0, 0x4, 'syz1\x00', 0x0}) executing program 8: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x10, 0x1, 0xc, 0x0, 0x0, 0xfe, 0xc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0x8000, 0xa41, 0x8, 0x8d2, 0x8}, 0x14) executing program 8: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304, 0x38}, '\x00\x00Q\x00\b\x009\x00', '\x00', '^\x00\x00F', "00000000000000fd"}, 0x28) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000280)="004f63d107ec288868081b2841cf2cda29422f015d6a1fae2652e7e725304d947a450e8de7dd65b0a4fb25ca2975fe4ba594dae93919002793efefe7aaaa1417185daa79a4998ab9d5d46ca88fc30a8f8a42aa7fa01570cef52ff91e4175b748d5192b80", 0x64}, {&(0x7f0000000140)="c1d8c827763ad9038ba2c1a0c461aef99cbe5110a63d545a376193", 0x1b}], 0x2) executing program 8: truncate(&(0x7f0000002840)='./file1\x00', 0xfc0) mount(0x0, &(0x7f0000000400)='./tracing\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2800, 0x24) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000280), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000300), 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000005c0)=""/222, &(0x7f00000006c0)=0xde) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast2, 0x4e20, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x5, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x6}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x48, 0x4, 0x8000, 0x2}, {{@in=@loopback, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffcf9, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000d000)=""/102392, 0x18ff8) connect$inet(r0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x88) fcntl$setlease(r5, 0x400, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) program crashed: possible deadlock in blk_request_module bisect: the chunk can be dropped bisect: split chunk #1 of len 22 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 5, 19, 27, 30, 7, 27, 6, 7, 4, 2, 18, 4, 3, 8, 5, 6, 15, 4, 2, 16, 8, 5] detailed listing: executing program 6: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_NEW(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000000)={0x0, 0x4389d}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0xffffff6f, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) executing program 6: memfd_create(&(0x7f0000000280)='-_~\x00\x00\x00\x00\x04\x00go\xa7\xb1\x8fqtZ\xe5v\xf8[5\x14\xc5.\x92\xe5\xbd\x94 U\x8dk;Bfk\xbbq,\xa4\"2#c\xe4\xf3i31&\x1d?\xdc\x99s)\x0e\xe1\x10E]&(\xcf\xf0\xec\x95\xa2\x84\x8c\xd2\xf5\xc9h?\x18\x99,\xaa9M\xdc[F\x82t\xa5)\x06{ua\xa9\xdc:*P\x13\xe4\xba\x10\xbd9\xdf\x97\x1fz\xc6\xc1\xb17\xd5SQ\xe8\\7:l\xc6\xd7,Px\xd4\xd7\'\xb5\xae\xfa\xe3\x83EP\x8f1\xb9x\\fZ\xee\xca\xa3\xed\xac\x82\xb2\xea=\xf0\xd53\x9d0nOH\xaew4\xb2\xf5\xfb\x0f\xea\xc3\x8b[YF\x1a\x96K\x1dJ\xee\xe4\xc3\xc2\x1bBz\xbf\xda\x10\x14\xbb9\xbe\fx\xee5W\x15\xe01\x1d\f\xcd\x12\xa5\xf0Y{\x8c\xf9\xbf}\xa3=\xc9s1\xf2q\x88-\"\xe3\xe6\x1d\x85\x83\xd2\xec\xb8O}9\xb4\x7f\xcf\xbc\xf5\x90{\xe7P\xcb\xa3)\xa0^he\xc4\xe0\xe3Au1]4\xa3\xce#\xfbq\xe6\xefW\xe5\xf1\x12\xad\xf9+\xd7\xa6_j\x84\x13R\x18\x1b q8\xc5\xe8z\xa0\x92\xdf\x8e', 0xd) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x20049, 0x80) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0xb50, 0xd, @name="9b6154dbd0c646db726492e1a39b984f781a2e0fe14ea7b2a02aab01e07a9145"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000002c0)={&(0x7f00000004c0)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000580)={0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) read(r3, &(0x7f00000001c0)=""/256, 0x100) write(r1, &(0x7f0000000480)='27', 0x2) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000002600)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000002640)={@my=0x0}) executing program 6: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) executing program 35: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000001c0)=0x1a, 0x4) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000001220010026bd7000fedbdf25100000000c00ce00400000e8bcd8bd0004003780"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./nfsd\x00', 0x1ff) mremap(&(0x7f00005c9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000be6000/0x2000)=nil) munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) mremap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000f91000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) eventfd2(0xc59, 0x80001) syz_open_dev$amidi(&(0x7f0000000880), 0x3, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, r6, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x4, 0x26b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x305}}}, &(0x7f0000000580)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x8000002, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x200, 0x2, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x2, 0x36f}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x307ea, 0x4) read$FUSE(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000080)={0x2, 0x8001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000100)={r10, 0x7}, 0x8) executing program 36: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) getegid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000004980), 0x7f, 0x8125c1) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000005100)={0x301, 0x5, &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004b00)=[0x9], &(0x7f0000005080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000050c0)=[0x8000000000000000, 0x0], 0x0, 0xffffffff}) read(r0, &(0x7f00000004c0)=""/16384, 0x4000) executing program 37: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) executing program 7: mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='my_debugfs/asoc/components\x00', 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @multicast2}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x9}}}, 0xffffffffffffff20) executing program 7: mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x25, 0x0, 0x2, 0xfffffffe}, {0x6}, {}, {0x6}]}) ioctl$ADD_NEW_DISK(r0, 0x40140921, 0x0) executing program 7: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0x5, 0xa, 0x4}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0xa, @pix={0x8, 0x9, 0x30323953, 0x2, 0x5, 0x400, 0x20, 0x2, 0x1, 0x4, 0x0, 0x5}}) executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x20, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x40004) executing program 7: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(0x3) ioctl$MEMSETBADBLOCK(r3, 0x40084d0c, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000000)) executing program 0: r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000380)={0x0, 0x0, 0x560c, {0x803, 0x5d3}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x71, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) executing program 8: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000b00)={0x18, {"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", 0x1000}}, 0x1006) executing program 8: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/ip_vs\x00') openat(0xffffffffffffff9c, 0x0, 0x80143, 0x1ff) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000009c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000a00)=0xffb) r1 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000f40)={{0x1088, 0x6, 0x2, 0x40, 'syz0\x00', 0x200000}, 0x1, 0x20, 0x1, r1, 0x0, 0x4, 'syz1\x00', 0x0}) executing program 8: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x10, 0x1, 0xc, 0x0, 0x0, 0xfe, 0xc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0x8000, 0xa41, 0x8, 0x8d2, 0x8}, 0x14) executing program 8: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304, 0x38}, '\x00\x00Q\x00\b\x009\x00', '\x00', '^\x00\x00F', "00000000000000fd"}, 0x28) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000280)="004f63d107ec288868081b2841cf2cda29422f015d6a1fae2652e7e725304d947a450e8de7dd65b0a4fb25ca2975fe4ba594dae93919002793efefe7aaaa1417185daa79a4998ab9d5d46ca88fc30a8f8a42aa7fa01570cef52ff91e4175b748d5192b80", 0x64}, {&(0x7f0000000140)="c1d8c827763ad9038ba2c1a0c461aef99cbe5110a63d545a376193", 0x1b}], 0x2) executing program 8: truncate(&(0x7f0000002840)='./file1\x00', 0xfc0) mount(0x0, &(0x7f0000000400)='./tracing\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2800, 0x24) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000280), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000300), 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000005c0)=""/222, &(0x7f00000006c0)=0xde) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast2, 0x4e20, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x5, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x6}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x48, 0x4, 0x8000, 0x2}, {{@in=@loopback, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffcf9, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000d000)=""/102392, 0x18ff8) connect$inet(r0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x88) fcntl$setlease(r5, 0x400, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) program crashed: possible deadlock in blk_request_module bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <12>, <11> bisect: split chunk #0 of len 12 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m4s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 6, 7, 4, 2, 18, 4, 3, 8, 5, 6, 15, 4, 2, 16, 8, 5] detailed listing: executing program 37: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) executing program 7: mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='my_debugfs/asoc/components\x00', 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @multicast2}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x9}}}, 0xffffffffffffff20) executing program 7: mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x25, 0x0, 0x2, 0xfffffffe}, {0x6}, {}, {0x6}]}) ioctl$ADD_NEW_DISK(r0, 0x40140921, 0x0) executing program 7: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0x5, 0xa, 0x4}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0xa, @pix={0x8, 0x9, 0x30323953, 0x2, 0x5, 0x400, 0x20, 0x2, 0x1, 0x4, 0x0, 0x5}}) executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x20, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x40004) executing program 7: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(0x3) ioctl$MEMSETBADBLOCK(r3, 0x40084d0c, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000000)) executing program 0: r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000380)={0x0, 0x0, 0x560c, {0x803, 0x5d3}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x71, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) executing program 8: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000b00)={0x18, {"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", 0x1000}}, 0x1006) executing program 8: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/ip_vs\x00') openat(0xffffffffffffff9c, 0x0, 0x80143, 0x1ff) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000009c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000a00)=0xffb) r1 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000f40)={{0x1088, 0x6, 0x2, 0x40, 'syz0\x00', 0x200000}, 0x1, 0x20, 0x1, r1, 0x0, 0x4, 'syz1\x00', 0x0}) executing program 8: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x10, 0x1, 0xc, 0x0, 0x0, 0xfe, 0xc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0x8000, 0xa41, 0x8, 0x8d2, 0x8}, 0x14) executing program 8: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304, 0x38}, '\x00\x00Q\x00\b\x009\x00', '\x00', '^\x00\x00F', "00000000000000fd"}, 0x28) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000280)="004f63d107ec288868081b2841cf2cda29422f015d6a1fae2652e7e725304d947a450e8de7dd65b0a4fb25ca2975fe4ba594dae93919002793efefe7aaaa1417185daa79a4998ab9d5d46ca88fc30a8f8a42aa7fa01570cef52ff91e4175b748d5192b80", 0x64}, {&(0x7f0000000140)="c1d8c827763ad9038ba2c1a0c461aef99cbe5110a63d545a376193", 0x1b}], 0x2) executing program 8: truncate(&(0x7f0000002840)='./file1\x00', 0xfc0) mount(0x0, &(0x7f0000000400)='./tracing\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2800, 0x24) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000280), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000300), 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000005c0)=""/222, &(0x7f00000006c0)=0xde) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast2, 0x4e20, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x5, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x6}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x48, 0x4, 0x8000, 0x2}, {{@in=@loopback, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffcf9, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000d000)=""/102392, 0x18ff8) connect$inet(r0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x88) fcntl$setlease(r5, 0x400, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) program crashed: possible deadlock in blk_request_module bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 11 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 6, 7, 4, 2, 18, 4, 2, 16, 8, 5] detailed listing: executing program 37: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000277ee0400000000004000000000000000500"/36], 0x24, 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = fsopen(&(0x7f0000000200)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='ver\x00\x00', &(0x7f0000000340)='-\xf2B\xd3\xd1]\xc4\x85mB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\b\x00\x00\x00\x06Yc\xdfIGB\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8b~c\xc6\x12\xbbk\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1J5\xae\x9a{\xaa[G\r5\xd2\x19\x14H\x92\x98\x15#;\\\xd26\x84', 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000007c0)='$\x00\x00\x00X\x00A', 0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000800), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x40000007fff, 0xb) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001200010027727000ffdbdf25ac1414aa000000000000000000000000000004d5020032000c0014dd5907350009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r3, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0xa) executing program 7: mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='my_debugfs/asoc/components\x00', 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @multicast2}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x9}}}, 0xffffffffffffff20) executing program 7: mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x25, 0x0, 0x2, 0xfffffffe}, {0x6}, {}, {0x6}]}) ioctl$ADD_NEW_DISK(r0, 0x40140921, 0x0) executing program 7: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0x5, 0xa, 0x4}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0xa, @pix={0x8, 0x9, 0x30323953, 0x2, 0x5, 0x400, 0x20, 0x2, 0x1, 0x4, 0x0, 0x5}}) executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x20, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x40004) executing program 7: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(0x3) ioctl$MEMSETBADBLOCK(r3, 0x40084d0c, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000000)) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast2, 0x4e20, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x5, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x6}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x48, 0x4, 0x8000, 0x2}, {{@in=@loopback, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffcf9, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000d000)=""/102392, 0x18ff8) connect$inet(r0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x88) fcntl$setlease(r5, 0x400, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) program crashed: possible deadlock in blk_request_module bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <6>, <5> bisect: split chunk #0 of len 6 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 2, 18, 4, 2, 16, 8, 5] detailed listing: executing program 7: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0x5, 0xa, 0x4}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0xa, @pix={0x8, 0x9, 0x30323953, 0x2, 0x5, 0x400, 0x20, 0x2, 0x1, 0x4, 0x0, 0x5}}) executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x20, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x40004) executing program 7: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(0x3) ioctl$MEMSETBADBLOCK(r3, 0x40084d0c, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000000)) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast2, 0x4e20, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x5, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x6}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x48, 0x4, 0x8000, 0x2}, {{@in=@loopback, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffcf9, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000d000)=""/102392, 0x18ff8) connect$inet(r0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x88) fcntl$setlease(r5, 0x400, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) program crashed: possible deadlock in blk_request_module bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 2, 18, 8, 5] detailed listing: executing program 7: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0x5, 0xa, 0x4}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0xa, @pix={0x8, 0x9, 0x30323953, 0x2, 0x5, 0x400, 0x20, 0x2, 0x1, 0x4, 0x0, 0x5}}) executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x20, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x40004) executing program 7: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(0x3) ioctl$MEMSETBADBLOCK(r3, 0x40084d0c, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000000)) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) program crashed: possible deadlock in blk_request_module bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <3>, <2> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 8, 5] detailed listing: executing program 7: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(0x3) ioctl$MEMSETBADBLOCK(r3, 0x40084d0c, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000000)) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) program crashed: possible deadlock in blk_request_module bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 5] detailed listing: executing program 7: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(0x3) ioctl$MEMSETBADBLOCK(r3, 0x40084d0c, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000000)) executing program 8: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 8] detailed listing: executing program 7: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(0x3) ioctl$MEMSETBADBLOCK(r3, 0x40084d0c, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000000)) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program crashed: possible deadlock in blk_request_module bisect: the chunk can be dropped bisect: split chunks (needed=true): <1>, <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 7: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(0x3) ioctl$MEMSETBADBLOCK(r3, 0x40084d0c, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000000)) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 8] detailed listing: executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(0x3) ioctl$MEMSETBADBLOCK(r3, 0x40084d0c, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program crashed: possible deadlock in blk_request_module testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 8] detailed listing: executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(0x3) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program crashed: possible deadlock in blk_request_module testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 8] detailed listing: executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program crashed: possible deadlock in blk_request_module testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 8] detailed listing: executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8d0}, 0x40) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program crashed: possible deadlock in blk_request_module testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 8] detailed listing: executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program crashed: possible deadlock in blk_request_module testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 8] detailed listing: executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program crashed: possible deadlock in blk_request_module testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 8] detailed listing: executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program crashed: possible deadlock in blk_request_module testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 8] detailed listing: executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r2, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program crashed: possible deadlock in blk_request_module testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 8] detailed listing: executing program 0: socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r1, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program crashed: possible deadlock in blk_request_module testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 8] detailed listing: executing program 0: socket$l2tp6(0xa, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r0, &(0x7f0000000540)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program crashed: possible deadlock in blk_request_module testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8] detailed listing: executing program 0: socket$l2tp6(0xa, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) write$binfmt_format(r0, &(0x7f0000000540)='0\x00', 0x2) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8] detailed listing: executing program 0: socket$l2tp6(0xa, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program crashed: possible deadlock in blk_request_module testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 8] detailed listing: executing program 0: socket$l2tp6(0xa, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 8] detailed listing: executing program 0: socket$l2tp6(0xa, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 8] detailed listing: executing program 0: socket$l2tp6(0xa, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 8] detailed listing: executing program 0: socket$l2tp6(0xa, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program crashed: possible deadlock in blk_request_module testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8] detailed listing: executing program 0: socket$l2tp6(0xa, 0x2, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8] detailed listing: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 2: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) program crashed: possible deadlock in blk_request_module minimized 18 calls -> 5 calls minimizing program #1 before concatenation testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 7] detailed listing: executing program 7: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 0: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) program crashed: possible deadlock in blk_request_module testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 6] detailed listing: executing program 7: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 0: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program crashed: possible deadlock in blk_request_module testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5] detailed listing: executing program 7: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 0: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5] detailed listing: executing program 7: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 0: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5] detailed listing: executing program 7: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 0: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) ioctl$SET_ARRAY_INFO(0xffffffffffffffff, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(0xffffffffffffffff, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5] detailed listing: executing program 7: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 0: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5] detailed listing: executing program 7: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 0: openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) write$md_new_array(0xffffffffffffffff, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5] detailed listing: executing program 7: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 0: r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program crashed: possible deadlock in blk_request_module minimized 8 calls -> 5 calls testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$SET_ARRAY_INFO-ioctl$ADD_NEW_DISK detailed listing: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program crashed: possible deadlock in blk_request_module bisect: concatenation succeeded found reproducer with 10 syscalls minimizing guilty program testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$SET_ARRAY_INFO detailed listing: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) program did not crash testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program crashed: possible deadlock in blk_request_module testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-ioctl$ADD_NEW_DISK detailed listing: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) ioctl$ADD_NEW_DISK(0xffffffffffffffff, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-mkdirat-mount-openat-syz_clone-openat$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-mkdirat-mount-openat-syz_clone-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$md_new_array(0xffffffffffffffff, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-mkdirat-mount-openat-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-mkdirat-mount-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-mkdirat-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program crashed: possible deadlock in blk_request_module testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, 0x0, &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK program did not crash simplifying guilty program options testing program (duration=3m34.715413176s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program crashed: possible deadlock in blk_request_module validation run: crashed=true testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program crashed: possible deadlock in blk_request_module validation run: crashed=true testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program did not crash validation run: crashed=false testing program (duration=3m34.715413176s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-syz_clone-openat$md_new_array-write$md_new_array-openat$md-ioctl$ADD_NEW_DISK detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x5b) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) program crashed: possible deadlock in blk_request_module validation run: crashed=true reproducing took 7h15m6.475534123s repro crashed as (corrupted=false): md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ ====================================================== WARNING: possible circular locking dependency detected syzkaller #0 Not tainted ------------------------------------------------------ syz.8.36/6802 is trying to acquire lock: ffffffff9096c160 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev block/genhd.c:885 [inline] ffffffff9096c160 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 block/genhd.c:901 but task is already holding lock: ffff88802720a358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_lock drivers/md/md.h:713 [inline] ffff88802720a358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 drivers/md/md.h:1026 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}: __mutex_lock_common kernel/locking/mutex.c:646 [inline] __mutex_lock+0x197/0x15a0 kernel/locking/mutex.c:821 mddev_lock_nointr drivers/md/md.h:734 [inline] md_alloc+0x81e/0xf40 drivers/md/md.c:6413 md_alloc_and_put+0x1a/0x1f0 drivers/md/md.c:6452 add_named_array+0x240/0x350 drivers/md/md.c:-1 param_attr_store+0x214/0x310 kernel/params.c:591 module_attr_store+0x65/0x90 kernel/params.c:906 kernfs_fop_write_iter+0x3a4/0x540 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x612/0xba0 fs/read_write.c:687 ksys_write+0x150/0x270 fs/read_write.c:1036 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #1 (disks_mutex){+.+.}-{4:4}: __mutex_lock_common kernel/locking/mutex.c:646 [inline] __mutex_lock+0x197/0x15a0 kernel/locking/mutex.c:821 md_alloc+0x40/0xf40 drivers/md/md.c:6355 md_alloc_and_put+0x1a/0x1f0 drivers/md/md.c:6452 blk_probe_dev block/genhd.c:888 [inline] blk_request_module+0x27d/0x2a0 block/genhd.c:-1 blkdev_get_no_open+0x3f/0xe0 block/bdev.c:870 blkdev_open+0x1d7/0x600 block/fops.c:678 do_dentry_open+0x80e/0x1360 fs/open.c:1000 vfs_open_consume+0x4a/0x350 fs/open.c:1131 do_open fs/namei.c:4851 [inline] path_openat+0x16fc/0x20f0 fs/namei.c:5016 do_file_open+0x23e/0x4a0 fs/namei.c:5045 do_sys_openat2+0x115/0x200 fs/open.c:1442 do_sys_open fs/open.c:1448 [inline] __do_sys_openat fs/open.c:1788 [inline] __se_sys_openat fs/open.c:1783 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1783 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #0 (major_names_lock){+.+.}-{4:4}: check_prev_add kernel/locking/lockdep.c:3209 [inline] check_prevs_add kernel/locking/lockdep.c:3328 [inline] validate_chain kernel/locking/lockdep.c:3952 [inline] __lock_acquire+0x164c/0x2de0 kernel/locking/lockdep.c:5288 lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5942 __mutex_lock_common kernel/locking/mutex.c:646 [inline] __mutex_lock+0x197/0x15a0 kernel/locking/mutex.c:821 blk_probe_dev block/genhd.c:885 [inline] blk_request_module+0x35/0x2a0 block/genhd.c:901 blkdev_get_no_open+0x3f/0xe0 block/bdev.c:870 bdev_file_open_by_dev+0xa0/0x240 block/bdev.c:1091 md_import_device+0x2e9/0x650 drivers/md/md.c:3861 md_add_new_disk+0x3a3/0x1850 drivers/md/md.c:7536 md_ioctl+0x2027/0x2630 drivers/md/md.c:8525 blkdev_ioctl+0x5e3/0x740 block/ioctl.c:798 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f other info that might help us debug this: Chain exists of: major_names_lock --> disks_mutex --> &mddev->reconfig_mutex Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&mddev->reconfig_mutex); lock(disks_mutex); lock(&mddev->reconfig_mutex); lock(major_names_lock); *** DEADLOCK *** locks held by syz.8.36/6802: 1, last CPU#1: #0: ffff88802720a358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_lock drivers/md/md.h:713 [inline] #0: ffff88802720a358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 drivers/md/md.h:1026 stack backtrace: CPU: 1 UID: 0 PID: 6802 Comm: syz.8.36 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_circular_bug+0x2e2/0x300 kernel/locking/lockdep.c:2087 check_noncircular+0x12f/0x150 kernel/locking/lockdep.c:2219 check_prev_add kernel/locking/lockdep.c:3209 [inline] check_prevs_add kernel/locking/lockdep.c:3328 [inline] validate_chain kernel/locking/lockdep.c:3952 [inline] __lock_acquire+0x164c/0x2de0 kernel/locking/lockdep.c:5288 lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5942 __mutex_lock_common kernel/locking/mutex.c:646 [inline] __mutex_lock+0x197/0x15a0 kernel/locking/mutex.c:821 blk_probe_dev block/genhd.c:885 [inline] blk_request_module+0x35/0x2a0 block/genhd.c:901 blkdev_get_no_open+0x3f/0xe0 block/bdev.c:870 bdev_file_open_by_dev+0xa0/0x240 block/bdev.c:1091 md_import_device+0x2e9/0x650 drivers/md/md.c:3861 md_add_new_disk+0x3a3/0x1850 drivers/md/md.c:7536 md_ioctl+0x2027/0x2630 drivers/md/md.c:8525 blkdev_ioctl+0x5e3/0x740 block/ioctl.c:798 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3c2079f559 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f3c21581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f3c20a25fa0 RCX: 00007f3c2079f559 RDX: 0000200000000640 RSI: 0000000040140921 RDI: 0000000000000005 RBP: 00007f3c20836b50 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f3c20a26038 R14: 00007f3c20a25fa0 R15: 00007fffb2ab2248 block device autoloading is deprecated and will be removed. md: invalid raid superblock magic on ram16 md: ram16 does not have a valid v0.0 superblock, not importing! md: md_import_device returned -22 final repro crashed as (corrupted=false): md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ ====================================================== WARNING: possible circular locking dependency detected syzkaller #0 Not tainted ------------------------------------------------------ syz.8.36/6802 is trying to acquire lock: ffffffff9096c160 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev block/genhd.c:885 [inline] ffffffff9096c160 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 block/genhd.c:901 but task is already holding lock: ffff88802720a358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_lock drivers/md/md.h:713 [inline] ffff88802720a358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 drivers/md/md.h:1026 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}: __mutex_lock_common kernel/locking/mutex.c:646 [inline] __mutex_lock+0x197/0x15a0 kernel/locking/mutex.c:821 mddev_lock_nointr drivers/md/md.h:734 [inline] md_alloc+0x81e/0xf40 drivers/md/md.c:6413 md_alloc_and_put+0x1a/0x1f0 drivers/md/md.c:6452 add_named_array+0x240/0x350 drivers/md/md.c:-1 param_attr_store+0x214/0x310 kernel/params.c:591 module_attr_store+0x65/0x90 kernel/params.c:906 kernfs_fop_write_iter+0x3a4/0x540 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x612/0xba0 fs/read_write.c:687 ksys_write+0x150/0x270 fs/read_write.c:1036 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #1 (disks_mutex){+.+.}-{4:4}: __mutex_lock_common kernel/locking/mutex.c:646 [inline] __mutex_lock+0x197/0x15a0 kernel/locking/mutex.c:821 md_alloc+0x40/0xf40 drivers/md/md.c:6355 md_alloc_and_put+0x1a/0x1f0 drivers/md/md.c:6452 blk_probe_dev block/genhd.c:888 [inline] blk_request_module+0x27d/0x2a0 block/genhd.c:-1 blkdev_get_no_open+0x3f/0xe0 block/bdev.c:870 blkdev_open+0x1d7/0x600 block/fops.c:678 do_dentry_open+0x80e/0x1360 fs/open.c:1000 vfs_open_consume+0x4a/0x350 fs/open.c:1131 do_open fs/namei.c:4851 [inline] path_openat+0x16fc/0x20f0 fs/namei.c:5016 do_file_open+0x23e/0x4a0 fs/namei.c:5045 do_sys_openat2+0x115/0x200 fs/open.c:1442 do_sys_open fs/open.c:1448 [inline] __do_sys_openat fs/open.c:1788 [inline] __se_sys_openat fs/open.c:1783 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1783 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #0 (major_names_lock){+.+.}-{4:4}: check_prev_add kernel/locking/lockdep.c:3209 [inline] check_prevs_add kernel/locking/lockdep.c:3328 [inline] validate_chain kernel/locking/lockdep.c:3952 [inline] __lock_acquire+0x164c/0x2de0 kernel/locking/lockdep.c:5288 lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5942 __mutex_lock_common kernel/locking/mutex.c:646 [inline] __mutex_lock+0x197/0x15a0 kernel/locking/mutex.c:821 blk_probe_dev block/genhd.c:885 [inline] blk_request_module+0x35/0x2a0 block/genhd.c:901 blkdev_get_no_open+0x3f/0xe0 block/bdev.c:870 bdev_file_open_by_dev+0xa0/0x240 block/bdev.c:1091 md_import_device+0x2e9/0x650 drivers/md/md.c:3861 md_add_new_disk+0x3a3/0x1850 drivers/md/md.c:7536 md_ioctl+0x2027/0x2630 drivers/md/md.c:8525 blkdev_ioctl+0x5e3/0x740 block/ioctl.c:798 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f other info that might help us debug this: Chain exists of: major_names_lock --> disks_mutex --> &mddev->reconfig_mutex Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&mddev->reconfig_mutex); lock(disks_mutex); lock(&mddev->reconfig_mutex); lock(major_names_lock); *** DEADLOCK *** locks held by syz.8.36/6802: 1, last CPU#1: #0: ffff88802720a358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_lock drivers/md/md.h:713 [inline] #0: ffff88802720a358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 drivers/md/md.h:1026 stack backtrace: CPU: 1 UID: 0 PID: 6802 Comm: syz.8.36 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_circular_bug+0x2e2/0x300 kernel/locking/lockdep.c:2087 check_noncircular+0x12f/0x150 kernel/locking/lockdep.c:2219 check_prev_add kernel/locking/lockdep.c:3209 [inline] check_prevs_add kernel/locking/lockdep.c:3328 [inline] validate_chain kernel/locking/lockdep.c:3952 [inline] __lock_acquire+0x164c/0x2de0 kernel/locking/lockdep.c:5288 lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5942 __mutex_lock_common kernel/locking/mutex.c:646 [inline] __mutex_lock+0x197/0x15a0 kernel/locking/mutex.c:821 blk_probe_dev block/genhd.c:885 [inline] blk_request_module+0x35/0x2a0 block/genhd.c:901 blkdev_get_no_open+0x3f/0xe0 block/bdev.c:870 bdev_file_open_by_dev+0xa0/0x240 block/bdev.c:1091 md_import_device+0x2e9/0x650 drivers/md/md.c:3861 md_add_new_disk+0x3a3/0x1850 drivers/md/md.c:7536 md_ioctl+0x2027/0x2630 drivers/md/md.c:8525 blkdev_ioctl+0x5e3/0x740 block/ioctl.c:798 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3c2079f559 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f3c21581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f3c20a25fa0 RCX: 00007f3c2079f559 RDX: 0000200000000640 RSI: 0000000040140921 RDI: 0000000000000005 RBP: 00007f3c20836b50 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f3c20a26038 R14: 00007f3c20a25fa0 R15: 00007fffb2ab2248 block device autoloading is deprecated and will be removed. md: invalid raid superblock magic on ram16 md: ram16 does not have a valid v0.0 superblock, not importing! md: md_import_device returned -22