Extracting prog: 2m31.037042628s Minimizing prog: 43m57.126356381s Simplifying prog options: 3m53.023412755s Extracting C: 27.68843529s Simplifying C: 0s extracting reproducer from 24 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-socket$l2tp-socket$nl_xfrm-socket-sendmsg$nl_route-socket$nl_xfrm-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, r7, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash single: failed to extract reproducer bisect: bisecting 24 programs with base timeout 30s testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 6, 13, 8, 19, 6, 12, 3, 15, 1, 8, 9, 30, 30, 3, 8, 9, 30, 14, 12, 10, 28, 11, 16] detailed listing: executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x4000000) (async) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000100)='syz1\x00', 0x4000, &(0x7f0000000140)={@align=0x9a1e, {0x5, 0x9, 0xb, 0x5}}, 0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=0xda}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) write$input_event(r0, &(0x7f0000000080)={{}, 0x1, 0x1, 0x1}, 0x18) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) (async) write$uinput_user_dev(r0, &(0x7f0000000840)={'syz1\x00', {0x9, 0x8000, 0x5, 0x1}, 0x39, [0xfffffff8, 0x15, 0x0, 0x1ff, 0x2, 0xb2b3, 0x8, 0x2, 0xa6, 0x3, 0xaad, 0x7fff, 0x200, 0x1c, 0x3c0, 0xfffffff8, 0x0, 0xed48, 0x101, 0xffffffe4, 0xb6c0, 0x9, 0x5, 0x82, 0x2, 0xf9, 0x0, 0xfffffffb, 0xfffff000, 0x6, 0x7e2, 0xb8, 0x7, 0x9, 0x1ff, 0x3ff, 0x3, 0x5, 0xffffffff, 0x5, 0x9, 0x9, 0xd, 0x100, 0xffffffff, 0xffffa190, 0xe, 0x0, 0x2, 0x1, 0x8, 0x3, 0x5, 0x6, 0x202000, 0x3, 0x8000006, 0x4, 0xfffff800, 0x2000, 0x4, 0x3, 0xe0, 0x6], [0x8e, 0x5, 0x6, 0x7, 0x10000, 0x1ff, 0x3, 0x8, 0x20, 0x6, 0xffffffff, 0xf, 0x4, 0x7, 0x1, 0xfffffffd, 0x8, 0x3, 0xf6d, 0x4, 0x47, 0x0, 0x8, 0xfffff801, 0x4, 0x5, 0x25a6, 0x5, 0x5, 0x10001, 0x95, 0x0, 0x8, 0x2, 0x7fff, 0x5ea, 0x2, 0x0, 0xaf99, 0x3, 0x1, 0xfffffffc, 0x7, 0x2d, 0xfffffffa, 0x79, 0x1dd1, 0xe4, 0x2160502c, 0x9, 0x2, 0x7, 0x3, 0x7, 0x8, 0x9, 0x100, 0x32, 0x7f, 0x9, 0x0, 0xf, 0xc0000000, 0xfffffffd], [0xfc, 0x58, 0x3, 0x7, 0x8001, 0x9, 0x80000000, 0xfffffffb, 0x1, 0x8, 0x9, 0xffffff30, 0x7, 0x1, 0x0, 0xd, 0xf, 0x0, 0x48a6, 0x6, 0x7c92c89, 0xffffffff, 0x7, 0x0, 0x6, 0x0, 0x7, 0x4, 0x8, 0x4, 0x29c, 0x1ff, 0x7, 0xfffffffe, 0x5, 0x2, 0xf, 0x5, 0x4, 0xfffffff9, 0x8, 0x5, 0xff, 0x4, 0x2, 0x6, 0x7, 0x402, 0x1, 0x7, 0xf, 0x2, 0xfff, 0x9, 0x8, 0x7, 0x1c, 0x9, 0x9, 0x6, 0x6, 0x6, 0x7, 0x7], [0x3a5, 0x9f6, 0x4, 0x401, 0xff, 0xa, 0x9, 0x0, 0xaad, 0x8, 0xd, 0x3, 0x3, 0x678000, 0xfffffffa, 0x98ea, 0xffffff81, 0x3, 0x80000000, 0x7fff, 0x800, 0x1b3, 0x9, 0xa8ed, 0xc5a, 0xfff, 0x8, 0x8, 0x3698, 0x6, 0x97ea, 0x3, 0xffff, 0x3, 0x9, 0x8, 0x2, 0x1, 0x80, 0x8, 0xc, 0x10159529, 0x7, 0x101, 0x7, 0x1, 0x8000, 0x3, 0x9, 0x81, 0x9, 0x39f, 0xfffffff1, 0x2, 0x7, 0x35f, 0x10001, 0xc29, 0x2, 0x0, 0x6, 0x4, 0x5, 0x9]}, 0x45c) executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff3}, {0xffff, 0xffff}, {0xffef, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x82, 0x3, 0x4, 0xffff, 0x7f, 0x7fffffff, 0x1, 0x40, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xdc}, 0x0) executing program 3: prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)=[{0x13, '\x00', @data=0x3, 0x9}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getnetconf={0x44, 0x52, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x5}, @NETCONFA_PROXY_NEIGH={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x10001}, @NETCONFA_FORWARDING={0x8, 0x2, 0x8000}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000001}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x8010) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getnetconf={0x44, 0x52, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x5}, @NETCONFA_PROXY_NEIGH={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x10001}, @NETCONFA_FORWARDING={0x8, 0x2, 0x8000}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80000001}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x8010) executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_ethernet(0x16, &(0x7f00000027c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0x3, "8e", "167c8b", 0x6006}}}}}, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x22c2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x368, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x5e}, @typed={0x18, 0xf, 0x0, 0x0, @str='user.incfs.metadata\x00'}, @nested={0x1d9, 0x70, 0x0, 0x1, [@generic="88d1149d815f87445bf6beb6ec3bdd162e5d9db81ccdcee055dd2b3c858e6d2e2c0d34b2e118319871399ef50b4f191be278a1eeb54197e989ddf176ad3db0c259b4cf8d0b22b66569e84a70c661a655a918c811d9c030635c3527e7a99ae2e4f05d217f49d835eb746a1ebfd79e63933eb0501361c70a3b791afad62dc34c4e83c99626de7cebd9f579a11374e5e85c03a803be3c8b0434faa59003a8f050ed3d0a3dc4bf980e7552cd75450bfa4b77e0eae5c7c2ddf32aef293f48e204a0f08e6e52fff0e447685775762e0104dfc1f91ecf", @nested={0x4, 0xa2}, @typed={0x10, 0x54, 0x0, 0x0, @str='#}].!@{.\\&#\x00'}, @nested={0x4, 0x93}, @typed={0x8, 0x44, 0x0, 0x0, @pid}, @typed={0x6, 0x8f, 0x0, 0x0, @str='!\x00'}, @generic="8e84a8c1efffc23ad7f24aa2efaca289230ef0796616b577be7f9a29589504dd767ae0b8551af711907de1f0303c82416568ec91013cb6635562c94155870bcfcdcab90f1fecd64256a03ba6bbd6e953d4fbef68021e12bd2280e01f1f672c3438f57d0f9c7ff4d0a929846949695d7c38fb2df5568a139026f5235703b62965f484235a947e96be9d51304953c3ab652a25783996b5fa2ab26de143f0d4c29fc19978caa3b74729bd3f4011068db29d9f2989b72eb42ac7947965b16ea37bb0e12106cfb1bb19643d0a09c4c41cc9a48ee5e9d96596", @nested={0x4, 0x4}]}, @nested={0x146, 0xe3, 0x0, 0x1, [@generic="97666f72c97c0e26288baf51f0065b911f0c7ce40008e3806e6fdc3c75fff2b4f73304f9b88ae6ad0a5acfab2b03283610f796c28d039815ff03db90e70f8140bb8ca93d550e36c5df70d2bf1c6cc111af9495fac5b41dce94edd403df4a925be9e8ad31b00da218da402a1998318427049654a4378f2a347487e9c869902d8ddb8d9f95d8ae", @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x160}, @typed={0x8, 0xa0, 0x0, 0x0, @u32=0xb90}, @generic="42cfbc9377158b625be50449a7881d9c20cd61f3d32ef13ae5a10936a2ed8d6793f4f374c3d60acc3326b3af75fb5902f1b4797ef75868f932040dffce447f74572b648624a39adbe99ffc8c097e9dffc4dc0eaa9683f25eb93da0f0df582752fb5ab1c941fe77d9ae8401b6f436996c1db75e0e9abbdc42e051dacc5aec149aabfdac898d57ea01de9c289b47b19a0e52759b6791fbc43890deb0b8562fbf962d408c1c6448a7e3"]}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0xc, 0xb2, 0x0, 0x1, [@nested={0x4, 0xa0}, @typed={0x4, 0x13b}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x20000000}, 0xc7bb9c5fe665836a) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f00000009c0)={0x0, 0x0, 0x6}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x3, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) (async) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) r4 = dup3(r0, 0xffffffffffffffff, 0x80000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='mtd0\x00', 0x1000, &(0x7f00000000c0)={0x74, 0x8a, 0xa0000, {r4}}, 0x20) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000200)={r2, 0x80, 0x800, "22837fb2f9776bfabe52168196552e2d0b40132466b2ac4457898f76a796ecf29b59e956c94f5f2d11bd960000a8df3679aa2b0686f13d7d12f24dfde4ecc87305eafb061ec314a25a0b78275327e834f0d2a894502fa92bd1ea27bc0d089b9fc687a5519da234fcc127b3fe65c0be0f25328f7485a2e5024333e1fac777853cf059570af3e8b426f255a6995511b5f89252156995f837cb2fe227aeed82489bca5ff113e182348fa60d87204c22b0b2b866ceb01375d03fb60d61e6eab25de4c4eeadba6daf193963ab022fffb7bdb18cd4065b5abcce0aac11de95e30b8a9455"}) executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) executing program 1: syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffeffffffff, 0x2) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000380)={0x14, r2, 0x301, 0x870bd25, 0x25dfdc00}, 0x14}}, 0x24008040) write$char_usb(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) executing program 2: r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000002, 0x0, 0x0, 0x16}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0xb685, 0x1, 0x2, 0xa3, 0x0, r0}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd139, 0x8, 0x3, 0x3b4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6b53, 0x58018, 0x1, 0x11e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf91b, 0x400, 0x2, 0x3e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4cdf, 0x1000, 0x0, 0x38d}}], 0x4, &(0x7f00000025c0)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8}, 0x0, r4, '\x00', {0x1, 0xe53, 0x0, 0x0}}, &(0x7f0000002640)) executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x5}}]}}]}, 0x48}}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0xffffffffffffffff, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000200)={{r0}, "5fecc74220629a79c247ce0a77b43416939bc06295be95c477a9703e6849237d9065139edacc1601f63676f5691a36cba3e6626673516749c02d397916a7d7c48a273e2e85b4f65586165076f5be12e21ff99845ca22f0a61957fc71ebe1925029ceddeee6cef84bcb6aa8ee9d5506e66fa96f48f7c35250aebf87a8ecbc85a1df7ce4ab08e4789e737e0bdd1adcaea1d148141c17abc55c486d712b84c8182222f6c1a25711a8899e442414248bae10c19565d58b8f9b2c6bae073944714fed60bf417dc47f989a1b392c9671a15c88952acf202c2bcc77d04704c6d3530cd96174c5394f1c484247862d5291f202c38afab48578f30023133a5752d7ff149bb8c10c8f9f81327e7e175a73c191c4061ab522be4ecb6ab1f14b16237bf309dbb9310c7f096fa28a3107127b623b095570b98e567d000b3c34e940f7c8394c44ebbbc7b8f962f02e33790b18adc8869cc02c5c90fd6459820451c89aa2c1e37d6d04bf81141a9604455cd5597dc76324dd0cd50e832b26895e000186c08cf58dcad53547c8a7086b6f71cb4b4e8c01edde7d49f1c800ec024b01d8ba9c64dee9980849aabad31d3c4cfb1dbade76f80dac3daabe9f3c4540973e6d05a9eb88108bbfd1ad2fbbf06a14449ef2db004c3ccf359d571c9035b9646f94feec4f0e26723b1f5d83206847ed982a34d0517f5a18ffc6048675f8edbd2f9674ae3318c9f600828899c4cb72f499cbaac1ce67698c7003e8583e527020c4fee828afacc6a08bafac218a11755e9773eabc4cbbe67ca745081051e7b08003baf4122650a035b6a54a680c44b5087af0a7040e0316b8beb2256ab568674662d1be5e3193e588876e7cf298de1ccad25b404fd6d877182d675540aadf0eaeb69b3ea3a145f48af0abb0da9a2c1cc0d5f56aa1f65899732d3ca99930f0c898a9ebe2f325508c151cabcea5bf5573189c77cd78ae47fee2314d13cdaa7a3694496d089b70c722dc892c908d978811ab3f2d0b5ab0d1f7bafb08c871810c9f2a9cec8aaf60a12cb9b3e1a63b942ea9386f4cafdb9af1e06f86583708497cb1b55fc3affde974a151daa11d152eff9731e144baff5c43da5f5cd50d1734f03620fcd3101c10bcc728ceeec767f0d86da94c5b7089853742f170acdbd7ee02e1bd635e463ec9261d5a42e1952458932e37ad564ce615eadb9aea3c1d3e682f57ef60cdc8a619a9bbd7c44e52a79d33e67fa1d6924f2237ad9baa46bc485d49cf67e1f6d73459b292a825ac70c5e2351015c031fd79acf7b5ad184629b0e6d6600600cdbda4ed3a43543ae5350c895f2441a4c198aa79c110b871ada933ff415ac5e1371a8f5c2cb403a1b3622e63aebf936aa2ebcfff95a42fb197b0bbb320e711acc6ed98503d9ccdef42d07079ec7b10f6e83b16b14e7fa903a4aaa6289779aa1029e913ba838ae9b831120a2686c9acd219a226f5f720dffb9940595b6f97d59fe7eea5886dcf99300a04c9089f057abeefae10694c8bfdc6260a579da93cdc3d4b48c098abaa7e11cd30fc4035ef7ae8972f98bd243f1c2047670b1c46505ecd21047fffdee1dc1d73d5e10ada24f1bb0a8e970e82362bdbaca690f90d54ab7e89fe41fce9d8394a57674759d3a867dbccb323f03f2f3aee2dbcc2ac93b514cfb44424ca4d2d6c5263ae35f59bdfdbf7a7d1cba703f302076050ea74f1a686136320c93d5f4a9827eea041111b0c2d212186f168d345e16af7f30c0d725c752ea8468d15f32095da61724be8d0e1bc061767e4f0e9b0c90998dc0161428524fcd8dc60673d649c55d24969fc9caf1622dea2985bb866bb36cbfebc855c1a121adab413ee18d3aa0c8c26d7e26c1ad703aa419e778027cba1f97c86d5a7caa167499e0fb295053edf6c629f8646e1ac29ed26e2b1791b30d648d67a79f2eb4e3d9894180c5f7619be3d5c950ab37832a3872161c3d93e3db22a8a0ad240fb20c5cb279e53d5ab041aa314966867b7a007ee1384793eda48e6262f55493b900bc6210a7d490d99721b83521555daca626a1b9b590fa6e817a870a217654d8b3fa9bf4eea7562dbb7505907ed1e5b70475da5b24201ebfbf5dfe336fd8be183ed23f855dfa4fb7c6a8ddbbcd6421e871da72b21f384caa038db0312582149d7e189c3bb551f333eeaaf3fa56560858429e69583562278f6d649fe0549ab5662904d3c6efec40fbb086f99fa626b44ef84b505aab4a993478542bc47daf8c97dc69ef14291db134d170e726af57251b8c08aa2604f5e323f08e289138b3600f1f2d51300e0663b62d362e853fc00429ebd68e0be8a102c3f72b2fe97b804a2891719912da9ce92736f48b6f492aad7bbb91073dc90ebded3712b25fbb240a544f4ec4fafac2f24bceb1616236f8b39b578a2f5b9c7a28829bab9828e6f5ba63997846f9b9a38f082058a7e51acf18a3e464a37575c6dab8eb664f7e901fa7207efd15ce7af2cda25454c462a8fd033495eb9d71c451fd3356a984a9d6869f73257d1eb50eb40b236f39b8a3907f30125ce895a8f63581236454aff291957060c978c065ec0b56c101dc4e9401664b78384b2d42dd7d20af026ff62a607d4c8ba1d2cfc92c0a7c92822e6b40830abd98583dd06d5327b8cdc57b0ea73cb38f776b4986603c78dc2ce95da2cf20f28e61613d177ab5b99ccf7999f60a5d8581b55b9981cf4aca3e4d74bfed9d67a241f798dc25b30a429f55e1469c43dca3a74792303ae838f26f11cb2dd8ec482f921516de2123260254b559234ec909c617787f310370ec62718a2e7f816189923d4d9dc1fa6d05e74772e3430158924edecaa031271d6ab3219b0a95a798d5268b1120fdee5e061ed06220b6c7b9c74cb613f0f80c4546653b84651edea5ff243345a9c736c455f9128cadf633ea19f557f41ce8ed84504c533ca879f52ec4775c84e693d3f4960acb161ef01fbe6cbf8e8a5a77c07b3d1d24e747e01bc39e8255ce562494eef178a48010325f90d297982bb0e47995bf466ba768c965550d450bc215c491bbc253f83991794e0759e668a7764503f76706b54d5663299c3111d489f0abe43d09d40eb69190845b4cf43a2e5177e05ed0bb8770d6c87d3baaf1bf33403c563fee1c166f9ff3bf119fa82ea142780e2f3989c881fb77b87e991df0034efd4cfc21ef3668a55e690ce1c3cadebf36d4c4f9ff1e7e676eb24a833fba8a6ba77ef02c189058adbce552bcdf8aca6fe5e8d911085aaf239228feb28ad81dae2043a8bf6ef7c73ffd37c5abb997ccbdf0b0e077d50132d555eb5ea932994c58b05e534b3b054ea2e7e8953e7b97db720c525ee753ad1f6ae362c8bb7ff41465e7e994dd3a508b90dc89e25a2df58b3b74e9a3a2fc9c13b9d8e5f01012b9e504569d7fcb3069dffc18bc06ea7db5c54ae63a8dc729250a15e01d4f7d956e90e29387e16497a5b7ad4c8d8a198dad865cc0751037867680d50cd10765fa9c926c31d5338699795cfbd57fb9ff2a791a7cd69c92b8ba48ffbd42b2e0041e199fee59f2c3e8c659322be18216042ac34b9cd0cc87c6503cab1882fbc0af33bb53aae4e9df1799450fc4f3b28eee2a875ccaa69fb7e28b2a6b8686992d725ef4a1a881191eeb75bda3d2725b32c4c9f3574eb1a1300b20f91646b15eb167d8f7258eb85dc6d7cf47e485d6ae8dad780d498d8fddc9067cc60fd44a80cdbbc99cc8c9505a687dc7c5ddd6329d3a056183f51c722d3ffa08cec59a6f8289168d739f4272493f9cb5793a19fdb30fe56806c6ddf1dafdcc2e7d0259f147808e46f29c692eead098923f440a259e7a0efc2fb918b31ec50e997efd97b9102c0c6f4bf3aaf1af6698dc0696c3249db3aefe264d86e5d79479f230e216612a7cfefafc9eef1e925ef6b0f3da78fb5a0cd66cc58fd4f24159caae13bf95558db327d8a4c3f7810dd66bc506de3bacee38c4e9521cdb8b33ca9aaf0a1bc8323f5d80ad6dc78910d67dc3f8faca6f359838d5a0f04729b6b05298a407a92b9ae0f440b4dd42549badc32f31999e74afce408522a7b66c638d47b5f64dbf53382131bd580278f0fc7ff9d1a6d563ccc9ad4dad46840cbeb2397b60d876f97fff215fb4dd7f3215601aec9ee1dffeb2d2352e32ae5a31800352c114adf85e9ff55c6c427ea46f772c452628c17d1ffa328675fc161274a8cb8dd23445a1aa277cee49fa031085a0f247ebff6f150fca21ab6a4a01ea77788495525334ffb06fa924bdc658e33a942455a2c4e3c23d0ad26814faa4c0477529ac69881bcb09ca864ac7a2350db8136cd3b5f17055b10c22df9730c56f01846ca1355ce245dbdb1cb44433517bce5eb0ceca54140c05f147ec2e87f9c7eaae25b39f381cf8a81d1225ac56ef30ee911c7aa928f1e6239aada0f51f04007a13212374235bdcb22160706d744086529b4642a4d10af602b305b71f6c44b4cd1f80a452850c125bfa65e71f9ca1e83c9dd7c114e12e8c496bcb31e629b834cde3b690261d880816b001939d0729d3e8e9edca3a806c927e353e72f9e45fc821ef54f55b92fed1415a8b00323f88eeebd4f3240ba9fa2387dcc4a6e3bb8df83d07ce2231f4be24bf7f4caab1f7cda13ce9b1c43207dc7f09be22b90a15cd2fb12c7f1211c131f61c2e4252e65bed4139666ffa44fbb76fd52f590059c3c1ee166b2221d24f606dfd7a1c4eec068cc919f333c34a115379190078c05342699ef2a4264538bc950622671bc4eb297498b6f94084aa402bf761a3672efc191c6f15d0e27645473ca18b791860d8ddb3d7f80b20f78f492a2a185f0fa93546d66d51dddf10dd43eb16ce44e26337ccca0c3dedf60e785b7fc6719182aeccc09ce901e35e2a69c8e8c7a7e45cbf82aaf6fa89599179cf57b7267cc67e4228bfaed0304c67257020ce1bf5b656603051e6c8b92e5f5ec7027852ae0af7c8bd88c3959d9e0e6e84d410f393870e246bc12ab01d9d12bac123c4bcd781b47add6041ff31304c72d8d0002b0f0f0a9efb88ca2ca6ed61954ae33e41f05ea4c84f0c7e61e9f4e4322e8aad6197421d92fa6ce4578f18a31e11316470382f257698fdf0f441ae8886267f1113d8b2252686bc3594331709c91a2c8ec200f4df20bf9ff9bc1dd0a5aa0cc60b35b1e7fe3ed13116c48272a4a867c5acfdadae58bfa19e3cb55c64bc6644618f0605251353dc96c294bc129c9974f15fe118063110eb3184a4ba53918546954427d393c73ef5bc017b8a2e6e07435baf0c52558551de96ab711daa7d05ad1b346947dd46ebc66936017b868f1c067b16d0defb7d65cc7506b3e849d2b1d3c324c45d03f217655f60f023655f235fb3606a6f6eb8f44e23f5f8a3c43d38d8592beb6ce915417207442ad91f0a870345728e503d8204735b40ec0bfbd2cd3839c48fac7b6ee707d7eb5a36ed18ffdc28ae253e6bf8f15e7855115f5d4ae502df5613ff74d9d76e569f3dedf362ca9df2ee1ac20b7b3f3c53ebf6b0b2391b9a4c12aae05347c58cace123227ddaea95b425d0550ae857f2931f3d2fb4a486f7d823aa67c9fd44b62e6746b89037f677a7daa8167de566a64635c548e257d55609f7724823cb2c3a6fda4badfad84bd5728cb5cb4ab2c348022b175c7c94a35e700d2a857ab65e2f826ea37c3ea20c5ec7454cc857868c329cd697df4aa76c6fe191e525b16eb52296814491de585b1d53999655efa2ced7f24872e3719fb8ec487b084ecc1e4b9f451e8f42354dfc908f7fa8b1eb3b3e0120e784774"}) (async) r8 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r8, 0xc0405665, &(0x7f0000000280)={0x2000000, 0x2, 0x0, 0x40, 0x0, 0x7}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001514010100100000000000000800030005000000080001"], 0x20}}, 0x0) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) read(r0, &(0x7f0000000000)=""/213, 0xd5) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b01, 0x0) (async) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0xa7, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROMSUBCHNL(r3, 0x530b, &(0x7f0000000040)={0x1, 0x4, 0x8, 0x4, 0x5, 0x6, @lba=0x6, @lba=0x15300276}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000780)={"d1ed39d8de344002b9e581a3a3bb0d5d5f307e5600", r1}) executing program 2: r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x4, &(0x7f0000000040)={0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) recvmsg$kcm(r3, &(0x7f0000002780)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000002600)=[{&(0x7f00000004c0)=""/152, 0x98}, {&(0x7f0000000580)=""/233, 0xe9}, {&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/238, 0xee}], 0x5, &(0x7f0000002680)=""/193, 0xc1}, 0x3) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './cgroup.cpu/cgroup.procs\x00'}) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001100)="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", 0x3e2}, {&(0x7f0000000400)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241070096c1498194a7197b45d74a8532b82037b02c9e6045c361ebf4752154fdfe39867a3236186eff2e437321de2e5f6479b384bd9ba37bcab948be0db1e4631eda95e59fdb9d1172c26347db86cdbbf687b5ae29029fbaf53d0576425e493a2fdf20aa2e298a41e395d7025cbce20e7df7357f5c11035638ee615514da29a9fa215ad9", 0x9f}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r3, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x400002}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x20000020, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x141880) ioctl$CEC_ADAP_G_CAPS(r4, 0xc04c6100, &(0x7f0000000080)) dup2(r4, r2) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @tid=r5}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x1, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x1) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r1, 0x4018aee3, &(0x7f0000000340)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000300)={0x8, 0x3}}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40201, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f00000003c0)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66", @ANYRESDEC=r2, @ANYRESHEX, @ANYRES16=r2, @ANYRESHEX=r2, @ANYRES64=r1]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) setgid(0x0) write(r3, &(0x7f0000000100)='1', 0x1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x20, 0x1, @thr={&(0x7f0000003740)="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", &(0x7f0000004740)="18c1a51b8956c3c74e390dfed7085ec59c904dd52d307c3b2b85b246036b2c87c0b0ed967ea611875d79d5f8de4074f0733af5861fa0fe4612dfc0c556cd6218422ca46b2a1764971ce8b400141bbc85f9cb017329cf8bbdbf5d16ea548a2532821e86b1d0db19a73fd60520ea21ff53fe1677a1f9dc7190211f79a97357a56b8de4ed664069377ccddd10906f048934a831aee51ec86dbd0505ff51e8583fab3ec81a316677e9bd5254c824c76876867351ff065b899417"}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xffee, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000003600)={0x1, 0x0, 0x1000, 0x6e, &(0x7f0000000240)="c906d0658a5635639870c0816c11a2a1c3266d4b881ec7376c2f52dff01d36fe7a743f157abaee06718692bc9cd6dc06fbc609a1007e19a50c72a96137ce674a89ed3f4fa18d632a0080b30939c93457674a20a9fea90accca01816af8dc125f22bd1ce5793dbdee6d6b71e31575", 0x1000, 0x0, &(0x7f0000002600)="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"}) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) write$P9_RGETLOCK(r6, &(0x7f0000000bc0)=ANY=[@ANYRES64=r4, @ANYRESHEX=r3, @ANYRESOCT=r7, @ANYRES16=r3, @ANYRESHEX, @ANYBLOB="76e5be310310881549b80296f94b86f269d8655f9f685614a36fc4756393af37818d6c1ca03c2f597aa2e9c2932165f8405e3c5209722a49d03fa6f3113b672b5ce91a0e55b908", @ANYBLOB="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", @ANYBLOB='U', @ANYRES64=r0], 0xffffff6a) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2800) tee(r5, r8, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x9, 0xd, 0x1, 0x3}]}) tee(r5, r8, 0x60000000000, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000200)={0x3b, 0x3a, 0x8, 0xf, 0x3, 0x0, 0x5, 0xc9, 0x1}) read$FUSE(r8, &(0x7f0000004800)={0x2020}, 0xfe84) openat$cgroup_type(r8, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x6) executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x101900, 0x0) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001400), 0x1, 0x2001) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000001440)=""/1) mkdir(&(0x7f0000000140)='./control\x00', 0x111) r1 = inotify_init1(0x800) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000040)='./control\x00', 0x20000004) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x804) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xb) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000000)={0x6, 0x5, 0x8000, {0x0, 0x4}, 0x3, 0x80000000}) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000780)={'syztnl1\x00', &(0x7f00000006c0)={'erspan0\x00', 0x0, 0x700, 0x1, 0x3, 0x3, {{0x1a, 0x4, 0x0, 0x4, 0x68, 0x68, 0x0, 0x6, 0x29, 0x0, @multicast1, @private=0xa010101, {[@end, @end, @noop, @timestamp_prespec={0x44, 0x24, 0x76, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@rand_addr=0x64010102, 0x1}, {@local, 0xfffffff7}, {@multicast2, 0xad7}]}, @lsrr={0x83, 0xf, 0xf5, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x1, 0xe, "081161ea448a6c8d25aa89b6"}, {0x7, 0x2}, {0x2, 0x4, "b63f"}, {0x5, 0x2}]}]}}}}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x2d, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @alu={0x4, 0x1, 0x1, 0xb, 0x8, 0x8, 0x10}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x3a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0xc, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0x2, 0x0, 0xfff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)=[{0x0, 0x2, 0x10, 0x8}], 0x10, 0x5}, 0x94) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0x4) ioctl$VT_ACTIVATE(r6, 0x5606, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e0699bf98a9576c18d000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000b00)={[0xa, 0x8, 0x6, 0x7a, 0x0, 0x80000000, 0x9, 0x2, 0x1000000000800, 0x6, 0xffffffff, 0x3ff, 0x4, 0x8001, 0xffff, 0x7], 0x40000, 0x100000}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e9040022e9bd0117c586023380ec289d6c14d3fc0fb99d7337093227523ac2fe5b6ee7b043fee0ebecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b156dd7f22da4178ffd809abdded0200fd4637286f12610033f3a62b203f7432b1ce1d08003b38f47f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xdb}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRESDEC=r5], 0x20, 0x6044}, 0x6) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000940)={r8, @in6={{0xa, 0x4e20, 0xfff, @loopback, 0x8}}}, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_require}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000950304001080080015"], 0xa8}, 0x1, 0x0, 0x0, 0x40090}, 0x40004) fchdir(r6) ioctl$VT_ACTIVATE(r6, 0x5606, 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1715, 0x4b7bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) executing program 0: r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xd0000, 0x101, 0x1}, 0x18) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x2) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000004c0)={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, 0x3ff, 0x4, 0x0, 0x0, 0x80, 0x40000101}) r4 = fsmount(r1, 0x1, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) getdents64(r5, &(0x7f00000000c0)=""/174, 0xae) executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x4000) mmap(&(0x7f00000a5000/0x4000)=nil, 0x4000, 0x7, 0x20010, r0, 0x2cb21000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000480)="b9e60a0000c7442400fcffffffc744240276980000c7442406000000000f011c9e3e66460f38806fca66410f3880200f21f835c00000000f23f8660f3881143126430f01c2c423f916c3088080430000c0c03235000000003a3a3066b8cd008ee0", 0x61}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000340)={[0x3ff, 0x7, 0x1260, 0x2, 0x800000420bf, 0xfffbfff7ffffffff, 0x67, 0x1, 0x40449, 0x8, 0xb800000000000004, 0x40000000014d9, 0x8, 0x6, 0x255, 0x20], 0x2, 0x4382}) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f00000a6000/0x2000)=nil, 0x2000, 0x9) executing program 0: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000003c0)=""/225, &(0x7f00000004c0)=0xe1) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x28, r3, 0x5, 0x0, 0x21dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x26}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x44000) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010b00000000000000000600000020000180140002007665746831000000ab5f0000000000000800030004"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x14) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x1) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300200000074000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300e4edf2b708000240000000000e000100636f6e6e6c6162656c0000000900010073797a30"], 0xe8}}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) (async) mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x176) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x1003002, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r2) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x84084}, 0x8) (async) close_range(r2, r0, 0x2) (async) write$proc_mixer(r2, &(0x7f0000000080)=ANY=[], 0x1001) (async) setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r4 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000080)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108f000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x3, 0x9, 0x1, 0x9, 0x40, "8c29e927a02f153e24533cbf7a20c93ccab221", 0x5, 0x10000}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newnexthop={0x50, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x1}]}, @NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x48051) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000000906010200000000000000000502ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2ea7b7b1b5fa68f877031246260784ceec3fced6d7dbedf32e398d4b9009e9765babd5a4472c6bb86edab1fa422d79046bf90af708fd9bbff2e4e6c95a97a9a9803975cd6846952db7174db3560e680e4e0a97fdfc3fefcef21beab116a17ac3d568c0b2dcaf328aaa64915677c99eb41e1bad143eab063294135b5a0bb73ead7dda0ee8107565a055ddf8641d7ab08ef4bb1a9ce24072d04547927062bdbadb07cd085115e5a2435d54090c7cab9b6fdb430bbb1dd82f0d851229aabe07aea0840c83c3e689ba4c85ef97aac55214a6eb3836ccfc0abbca49d7eeaa4a4b394b71a5a123", @ANYRES16=r3, @ANYRESDEC=r2], 0x3c}, 0x1, 0x620b}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000), &(0x7f0000000040)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000100)=""/34) executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, r7, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-socket$l2tp-socket$nl_xfrm-socket-sendmsg$nl_route-socket$nl_xfrm-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, r7, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program crashed: possible deadlock in blkg_conf_prep single: successfully extracted reproducer found reproducer with 16 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-socket$l2tp-socket$nl_xfrm-socket-sendmsg$nl_route-socket$nl_xfrm-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_SET_FLAGS detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$l2tp(0x2, 0x2, 0x73) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x6a) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, r5, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-socket$l2tp-socket$nl_xfrm-socket-sendmsg$nl_route-socket$nl_xfrm-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-syz_genetlink_get_family_id$mptcp-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-socket$l2tp-socket$nl_xfrm-socket-sendmsg$nl_route-socket$nl_xfrm-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program crashed: possible deadlock in blkg_conf_prep testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-socket$l2tp-socket$nl_xfrm-socket-sendmsg$nl_route-socket$nl_xfrm-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-socket$l2tp-socket$nl_xfrm-socket-sendmsg$nl_route-socket$nl_xfrm-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-socket$l2tp-socket$nl_xfrm-socket-sendmsg$nl_route-socket$nl_xfrm-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-socket$l2tp-socket$nl_xfrm-socket-sendmsg$nl_route-socket$nl_xfrm-syz_open_procfs-preadv-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-socket$l2tp-socket$nl_xfrm-socket-sendmsg$nl_route-socket$nl_xfrm-syz_open_procfs-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-socket$l2tp-socket$nl_xfrm-socket-sendmsg$nl_route-socket$nl_xfrm-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-socket$l2tp-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program crashed: possible deadlock in blkg_conf_prep testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-socket$l2tp-socket$nl_xfrm-socket-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-socket$l2tp-socket$nl_xfrm-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-socket$l2tp-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$l2tp(0x2, 0x2, 0x73) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program crashed: possible deadlock in blkg_conf_prep testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program crashed: possible deadlock in blkg_conf_prep testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64, @ANYRES32=r0, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program crashed: possible deadlock in blkg_conf_prep testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, 0x0, 0x24040000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program crashed: possible deadlock in blkg_conf_prep testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, 0x0, 0x0, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f0000000300)=[{0x0}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, 0x0, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) program crashed: possible deadlock in blkg_conf_prep testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0) program crashed: possible deadlock in blkg_conf_prep extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm program did not crash simplifying guilty program options testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0) program crashed: possible deadlock in blkg_conf_prep validation run: crashed=true testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0) program did not crash validation run: crashed=false testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0) program did not crash validation run: crashed=false testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0) program crashed: possible deadlock in blkg_conf_prep validation run: crashed=true testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_CONST_STR-socket$nl_xfrm-socket-sendmsg$nl_route-syz_open_procfs-preadv-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_subtree-sendmsg$MPTCP_PM_CMD_SET_FLAGS-sendmsg$nl_xfrm detailed listing: executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040c0) program crashed: possible deadlock in blkg_conf_prep validation run: crashed=true reproducing took 56m25.170334624s repro crashed as (corrupted=false): ====================================================== WARNING: possible circular locking dependency detected syzkaller #0 Not tainted ------------------------------------------------------ syz.3.20/5966 is trying to acquire lock: ffffffff8efc6c00 (fs_reclaim){+.+.}-{0:0}, at: might_alloc include/linux/sched/mm.h:314 [inline] ffffffff8efc6c00 (fs_reclaim){+.+.}-{0:0}, at: slab_pre_alloc_hook mm/slub.c:4539 [inline] ffffffff8efc6c00 (fs_reclaim){+.+.}-{0:0}, at: slab_alloc_node mm/slub.c:4899 [inline] ffffffff8efc6c00 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x63/0x6a0 mm/slub.c:4933 but task is already holding lock: ffff888027df3bc0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 block/blk-cgroup.c:849 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #2 (&q->blkcg_mutex){+.+.}-{4:4}: lock_acquire kernel/locking/lockdep.c:5886 [inline] lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5843 __mutex_lock_common kernel/locking/mutex.c:646 [inline] __mutex_lock+0x1a4/0x1bc0 kernel/locking/mutex.c:821 blkcg_activate_policy+0x34f/0xbf0 block/blk-cgroup.c:1608 blk_throtl_init+0x39a/0x5b0 block/blk-throttle.c:1339 tg_set_conf.isra.0+0x252/0x500 block/blk-throttle.c:1368 cgroup_file_write+0x1e6/0x8a0 kernel/cgroup/cgroup.c:4412 kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x6af/0x1050 fs/read_write.c:687 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #1 (&q->q_usage_counter(io)#17){++++}-{0:0}: lock_acquire kernel/locking/lockdep.c:5886 [inline] lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5843 blk_alloc_queue+0x610/0x790 block/blk-core.c:504 blk_mq_alloc_queue+0x174/0x290 block/blk-mq.c:4420 __blk_mq_alloc_disk+0x29/0x120 block/blk-mq.c:4467 loop_add+0x498/0xb60 drivers/block/loop.c:2071 loop_init+0x1d3/0x200 drivers/block/loop.c:2310 do_one_initcall+0x11c/0x6f0 init/main.c:1353 do_initcall_level init/main.c:1415 [inline] do_initcalls init/main.c:1431 [inline] do_basic_setup init/main.c:1451 [inline] kernel_init_freeable+0x6ea/0x7b0 init/main.c:1666 kernel_init+0x21/0x1e0 init/main.c:1556 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 -> #0 (fs_reclaim){+.+.}-{0:0}: check_prev_add+0xeb/0xe60 kernel/locking/lockdep.c:3181 check_prevs_add kernel/locking/lockdep.c:3300 [inline] validate_chain kernel/locking/lockdep.c:3924 [inline] __lock_acquire+0x1492/0x1ec0 kernel/locking/lockdep.c:5253 lock_acquire kernel/locking/lockdep.c:5886 [inline] lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5843 __fs_reclaim_acquire mm/page_alloc.c:4375 [inline] fs_reclaim_acquire+0xc4/0x100 mm/page_alloc.c:4389 might_alloc include/linux/sched/mm.h:314 [inline] slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4899 [inline] kmem_cache_alloc_noprof+0x63/0x6a0 mm/slub.c:4933 __radix_tree_preload+0x333/0x820 lib/radix-tree.c:338 blkg_conf_prep+0x489/0xf10 block/blk-cgroup.c:885 tg_set_conf.isra.0+0x1ed/0x500 block/blk-throttle.c:1373 cgroup_file_write+0x1e6/0x8a0 kernel/cgroup/cgroup.c:4412 kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x6af/0x1050 fs/read_write.c:687 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f other info that might help us debug this: Chain exists of: fs_reclaim --> &q->q_usage_counter(io)#17 --> &q->blkcg_mutex Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&q->blkcg_mutex); lock(&q->q_usage_counter(io)#17); lock(&q->blkcg_mutex); lock(fs_reclaim); *** DEADLOCK *** locks held by syz.3.20/5966: 6, last CPU#1: #0: ffff8880349377b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 fs/file.c:1259 #1: ffff88802da86460 (sb_writers#11){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #2: ffff888058c56880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:336 #3: ffff8880474b7f08 (kn->active#66){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #3: ffff8880474b7f08 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:337 #4: ffff888027df3a40 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x253/0x410 block/blk-cgroup.c:806 #5: ffff888027df3bc0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 block/blk-cgroup.c:849 stack backtrace: CPU: 1 UID: 0 PID: 5966 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 print_circular_bug.cold+0x178/0x1be kernel/locking/lockdep.c:2059 check_noncircular+0x146/0x160 kernel/locking/lockdep.c:2191 check_prev_add+0xeb/0xe60 kernel/locking/lockdep.c:3181 check_prevs_add kernel/locking/lockdep.c:3300 [inline] validate_chain kernel/locking/lockdep.c:3924 [inline] __lock_acquire+0x1492/0x1ec0 kernel/locking/lockdep.c:5253 lock_acquire kernel/locking/lockdep.c:5886 [inline] lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5843 __fs_reclaim_acquire mm/page_alloc.c:4375 [inline] fs_reclaim_acquire+0xc4/0x100 mm/page_alloc.c:4389 might_alloc include/linux/sched/mm.h:314 [inline] slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4899 [inline] kmem_cache_alloc_noprof+0x63/0x6a0 mm/slub.c:4933 __radix_tree_preload+0x333/0x820 lib/radix-tree.c:338 blkg_conf_prep+0x489/0xf10 block/blk-cgroup.c:885 tg_set_conf.isra.0+0x1ed/0x500 block/blk-throttle.c:1373 cgroup_file_write+0x1e6/0x8a0 kernel/cgroup/cgroup.c:4412 kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x6af/0x1050 fs/read_write.c:687 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8cc019e0d9 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8cc104b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f8cc0425fa0 RCX: 00007f8cc019e0d9 RDX: 000000000000006a RSI: 00002000000000c0 RDI: 0000000000000007 RBP: 00007f8cc0235024 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f8cc0426038 R14: 00007f8cc0425fa0 R15: 00007ffcaf3903f8 final repro crashed as (corrupted=false): ====================================================== WARNING: possible circular locking dependency detected syzkaller #0 Not tainted ------------------------------------------------------ syz.3.20/5966 is trying to acquire lock: ffffffff8efc6c00 (fs_reclaim){+.+.}-{0:0}, at: might_alloc include/linux/sched/mm.h:314 [inline] ffffffff8efc6c00 (fs_reclaim){+.+.}-{0:0}, at: slab_pre_alloc_hook mm/slub.c:4539 [inline] ffffffff8efc6c00 (fs_reclaim){+.+.}-{0:0}, at: slab_alloc_node mm/slub.c:4899 [inline] ffffffff8efc6c00 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x63/0x6a0 mm/slub.c:4933 but task is already holding lock: ffff888027df3bc0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 block/blk-cgroup.c:849 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #2 (&q->blkcg_mutex){+.+.}-{4:4}: lock_acquire kernel/locking/lockdep.c:5886 [inline] lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5843 __mutex_lock_common kernel/locking/mutex.c:646 [inline] __mutex_lock+0x1a4/0x1bc0 kernel/locking/mutex.c:821 blkcg_activate_policy+0x34f/0xbf0 block/blk-cgroup.c:1608 blk_throtl_init+0x39a/0x5b0 block/blk-throttle.c:1339 tg_set_conf.isra.0+0x252/0x500 block/blk-throttle.c:1368 cgroup_file_write+0x1e6/0x8a0 kernel/cgroup/cgroup.c:4412 kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x6af/0x1050 fs/read_write.c:687 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #1 (&q->q_usage_counter(io)#17){++++}-{0:0}: lock_acquire kernel/locking/lockdep.c:5886 [inline] lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5843 blk_alloc_queue+0x610/0x790 block/blk-core.c:504 blk_mq_alloc_queue+0x174/0x290 block/blk-mq.c:4420 __blk_mq_alloc_disk+0x29/0x120 block/blk-mq.c:4467 loop_add+0x498/0xb60 drivers/block/loop.c:2071 loop_init+0x1d3/0x200 drivers/block/loop.c:2310 do_one_initcall+0x11c/0x6f0 init/main.c:1353 do_initcall_level init/main.c:1415 [inline] do_initcalls init/main.c:1431 [inline] do_basic_setup init/main.c:1451 [inline] kernel_init_freeable+0x6ea/0x7b0 init/main.c:1666 kernel_init+0x21/0x1e0 init/main.c:1556 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 -> #0 (fs_reclaim){+.+.}-{0:0}: check_prev_add+0xeb/0xe60 kernel/locking/lockdep.c:3181 check_prevs_add kernel/locking/lockdep.c:3300 [inline] validate_chain kernel/locking/lockdep.c:3924 [inline] __lock_acquire+0x1492/0x1ec0 kernel/locking/lockdep.c:5253 lock_acquire kernel/locking/lockdep.c:5886 [inline] lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5843 __fs_reclaim_acquire mm/page_alloc.c:4375 [inline] fs_reclaim_acquire+0xc4/0x100 mm/page_alloc.c:4389 might_alloc include/linux/sched/mm.h:314 [inline] slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4899 [inline] kmem_cache_alloc_noprof+0x63/0x6a0 mm/slub.c:4933 __radix_tree_preload+0x333/0x820 lib/radix-tree.c:338 blkg_conf_prep+0x489/0xf10 block/blk-cgroup.c:885 tg_set_conf.isra.0+0x1ed/0x500 block/blk-throttle.c:1373 cgroup_file_write+0x1e6/0x8a0 kernel/cgroup/cgroup.c:4412 kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x6af/0x1050 fs/read_write.c:687 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f other info that might help us debug this: Chain exists of: fs_reclaim --> &q->q_usage_counter(io)#17 --> &q->blkcg_mutex Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&q->blkcg_mutex); lock(&q->q_usage_counter(io)#17); lock(&q->blkcg_mutex); lock(fs_reclaim); *** DEADLOCK *** locks held by syz.3.20/5966: 6, last CPU#1: #0: ffff8880349377b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 fs/file.c:1259 #1: ffff88802da86460 (sb_writers#11){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #2: ffff888058c56880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:336 #3: ffff8880474b7f08 (kn->active#66){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #3: ffff8880474b7f08 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:337 #4: ffff888027df3a40 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x253/0x410 block/blk-cgroup.c:806 #5: ffff888027df3bc0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 block/blk-cgroup.c:849 stack backtrace: CPU: 1 UID: 0 PID: 5966 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 print_circular_bug.cold+0x178/0x1be kernel/locking/lockdep.c:2059 check_noncircular+0x146/0x160 kernel/locking/lockdep.c:2191 check_prev_add+0xeb/0xe60 kernel/locking/lockdep.c:3181 check_prevs_add kernel/locking/lockdep.c:3300 [inline] validate_chain kernel/locking/lockdep.c:3924 [inline] __lock_acquire+0x1492/0x1ec0 kernel/locking/lockdep.c:5253 lock_acquire kernel/locking/lockdep.c:5886 [inline] lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5843 __fs_reclaim_acquire mm/page_alloc.c:4375 [inline] fs_reclaim_acquire+0xc4/0x100 mm/page_alloc.c:4389 might_alloc include/linux/sched/mm.h:314 [inline] slab_pre_alloc_hook mm/slub.c:4539 [inline] slab_alloc_node mm/slub.c:4899 [inline] kmem_cache_alloc_noprof+0x63/0x6a0 mm/slub.c:4933 __radix_tree_preload+0x333/0x820 lib/radix-tree.c:338 blkg_conf_prep+0x489/0xf10 block/blk-cgroup.c:885 tg_set_conf.isra.0+0x1ed/0x500 block/blk-throttle.c:1373 cgroup_file_write+0x1e6/0x8a0 kernel/cgroup/cgroup.c:4412 kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x6af/0x1050 fs/read_write.c:687 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8cc019e0d9 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8cc104b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f8cc0425fa0 RCX: 00007f8cc019e0d9 RDX: 000000000000006a RSI: 00002000000000c0 RDI: 0000000000000007 RBP: 00007f8cc0235024 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f8cc0426038 R14: 00007f8cc0425fa0 R15: 00007ffcaf3903f8