Extracting prog: 2h49m21.75032147s Minimizing prog: 24m26.702022623s Simplifying prog options: 0s Extracting C: 1m49.484738542s Simplifying C: 11m43.627770012s extracting reproducer from 30 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-setsockopt$inet6_tcp_int-timer_create-fcntl$lock-syz_open_dev$loop-mmap-mprotect-timer_settime-mmap-socket$inet_mptcp-connect$inet-splice-setsockopt$inet_sctp6_SCTP_EVENTS-sendmmsg$inet-connect$inet6-mkdirat$cgroup_root-mkdirat-mount-mkdirat-unlinkat-setsockopt$packet_int-ioctl$BTRFS_IOC_SCRUB-ioctl$BTRFS_IOC_GET_DEV_STATS detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0x10, 0x5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000a40)={r4, 0x5, 0x1, [0x5542, 0x3, 0x9, 0x401, 0x5], [0x80, 0x1, 0x4, 0x80, 0x2, 0x3, 0x76, 0x1, 0x8, 0xffff, 0x1000, 0xffffffffffffff81, 0x4, 0xc000001, 0x4, 0x566, 0x3, 0x2, 0xbfd, 0x5, 0x3, 0x3, 0x4, 0x7, 0x9, 0x79f3, 0x3d32, 0x7f, 0xa7, 0x9, 0x2, 0x9, 0x7, 0x0, 0x7, 0x2, 0x1, 0x2, 0x4, 0x7fffffff, 0x0, 0x10001, 0x32800000000000, 0x7, 0x5, 0x4, 0x5, 0x2, 0x9, 0x10001000, 0xffffffff, 0x2c, 0x5, 0x6, 0x3ff, 0x1, 0x1f6, 0x0, 0x1, 0x8, 0x8, 0x1, 0x9, 0xfffffffffffffff4, 0x3, 0x81, 0xfffffffffffffffd, 0x8000000000000000, 0x489d675, 0x1f6a, 0x6, 0x9, 0x401, 0x3, 0x4, 0x8, 0x9, 0x7fffffff, 0xc9, 0xc7d, 0x100, 0x8000, 0x9, 0x40, 0x6, 0x8, 0x2, 0x9, 0x1, 0x17be, 0x1, 0x6, 0x6, 0x5, 0x7fff, 0x7fffffffffffffff, 0x8000, 0x4, 0x5be6, 0x2, 0x3, 0x71441d6f, 0x8, 0x10000, 0x8, 0x3, 0x1, 0xfffffffffffffffa, 0x10, 0x22d7, 0x7, 0x8000000000000001, 0x2, 0x7, 0x8d2, 0x2, 0x2, 0xcff6, 0x0, 0x8, 0x100000000]}) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 30s testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 22, 2, 17, 6, 2, 3, 24, 19, 21, 3, 29, 13, 30, 23, 18, 11, 26, 24, 2, 19, 4, 3, 23, 29, 13, 27, 21, 30, 18] detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) fanotify_init(0x40, 0x40000) r4 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72e0, 0x0, 0x40000, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) r6 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r7) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x100, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffd81) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x1, 0x4, 0x3}}}}}}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xfffffe41) r3 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, &(0x7f0000000040)}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000007c0)={'macvlan0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0x400004, 0x3b, 0x5, 0x83, 0xd, 0xec, 0xfd, 0xd, 0x4, [0x800, 0x6, 0x8, 0x8, 0x0, 0x9, 0x9, 0x12]}}) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000080)) read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffa}]}}}]}]}], {0x14}}, 0xc0}}, 0x44840) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0009"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) executing program 3: setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) mkdir(0x0, 0x80) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) r3 = open(0x0, 0x282080, 0x8e) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x50, 0x3, 0x8, @private0, @private0, 0x7800, 0x20, 0x7bed, 0x588}}) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000840)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) executing program 4: ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0x10}}}}}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000031c0)={0x24, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x4, 0x1, 0x0, 0x0, @binary}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x24}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000040)=0x500, 0x4) sendto$inet6(r1, &(0x7f0000000100)='\x00'/1211, 0x4bb, 0x0, &(0x7f0000000200)={0xa, 0x1234, 0x0, @loopback}, 0x1c) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000000)) openat$panthor(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) getpgid(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x40088c0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) openat$dlm_monitor(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b03000000000001090222000101008032090400000103000000092111010001221700070581034000"], 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000005c0)={0x80000001, 0x2d2e, 0x27, 0x4}, 0x10) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x3, &(0x7f0000000000)="02c081") close_range(r3, 0xffffffffffffffff, 0x400000000000000) executing program 3: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x7ffe) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x1e1540, 0x3a512d250812dd54) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x200}) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone3(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2c01006, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$OCFS2_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x2, 0x1, 0xf, 0xffffffff7fffffff, 0x6, 0x6}) write(r3, &(0x7f0000000200)="35020000f570", 0x68) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r6) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000001a40)={0x3, 0x1, 0x4, "3a000000000016c713b40c2a3600000000000000000000020100", 0x38414261}) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000180)={{0x6, 0x7}, {0x3, 0x2}, 0x10000, 0x4, 0x8}) write$rfkill(r7, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000003140)={0x2020, 0x0, 0x0}, 0x2020) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC=r0, @ANYRESDEC=r8], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x24008002) executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000540)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x1) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000200)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x800, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x163) renameat2(r2, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}], 0x18}) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000020000103000000000000000600000000000000011f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32], 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x1c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001800dd8d000000000000000002001000fe0400050000002008001e00020000000c56d1ff45"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) sysinfo(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x8c00) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x200000c4) executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x9, [0x800, 0x4], 0x4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7f, 0xc) io_uring_enter(r0, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000780)=""/102400, 0x19000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) executing program 4: r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x9, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0x421, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xffffffef, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x7, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x40000005, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) r1 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) read(r1, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000100)=0xc97) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1048, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xb, 0xc}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x10000000, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b0030003200060063"], 0x76) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44041) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0x20000000}) executing program 2: setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) mkdir(0x0, 0x80) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) r3 = open(0x0, 0x282080, 0x8e) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000840)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) executing program 2: ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0x10}}}}}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0x10, 0x5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000a40)={r4, 0x5, 0x1, [0x5542, 0x3, 0x9, 0x401, 0x5], [0x80, 0x1, 0x4, 0x80, 0x2, 0x3, 0x76, 0x1, 0x8, 0xffff, 0x1000, 0xffffffffffffff81, 0x4, 0xc000001, 0x4, 0x566, 0x3, 0x2, 0xbfd, 0x5, 0x3, 0x3, 0x4, 0x7, 0x9, 0x79f3, 0x3d32, 0x7f, 0xa7, 0x9, 0x2, 0x9, 0x7, 0x0, 0x7, 0x2, 0x1, 0x2, 0x4, 0x7fffffff, 0x0, 0x10001, 0x32800000000000, 0x7, 0x5, 0x4, 0x5, 0x2, 0x9, 0x10001000, 0xffffffff, 0x2c, 0x5, 0x6, 0x3ff, 0x1, 0x1f6, 0x0, 0x1, 0x8, 0x8, 0x1, 0x9, 0xfffffffffffffff4, 0x3, 0x81, 0xfffffffffffffffd, 0x8000000000000000, 0x489d675, 0x1f6a, 0x6, 0x9, 0x401, 0x3, 0x4, 0x8, 0x9, 0x7fffffff, 0xc9, 0xc7d, 0x100, 0x8000, 0x9, 0x40, 0x6, 0x8, 0x2, 0x9, 0x1, 0x17be, 0x1, 0x6, 0x6, 0x5, 0x7fff, 0x7fffffffffffffff, 0x8000, 0x4, 0x5be6, 0x2, 0x3, 0x71441d6f, 0x8, 0x10000, 0x8, 0x3, 0x1, 0xfffffffffffffffa, 0x10, 0x22d7, 0x7, 0x8000000000000001, 0x2, 0x7, 0x8d2, 0x2, 0x2, 0xcff6, 0x0, 0x8, 0x100000000]}) executing program 4: openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_route(0x10, 0x3, 0x0) tkill(r4, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xbd}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r7 = socket(0x2d, 0x2, 0x0) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, r6, 0xc}, 0x10) executing program 3: syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x6000873) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x20000000) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000700001", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000840), &(0x7f0000000140)=r7}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbb00bbbbbb0180c20000010800001c0066000007029078ac141426ac1414aa13049078ac1414230000"], 0x0) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x108843, 0x55) fcntl$setlease(r3, 0x400, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x9, [0x800, 0x4], 0x4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7f, 0xc) io_uring_enter(r0, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-setsockopt$inet6_tcp_int-timer_create-fcntl$lock-syz_open_dev$loop-mmap-mprotect-timer_settime-mmap-socket$inet_mptcp-connect$inet-splice-setsockopt$inet_sctp6_SCTP_EVENTS-sendmmsg$inet-connect$inet6-mkdirat$cgroup_root-mkdirat-mount-mkdirat-unlinkat-setsockopt$packet_int-ioctl$BTRFS_IOC_SCRUB-ioctl$BTRFS_IOC_GET_DEV_STATS detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0x10, 0x5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000a40)={r4, 0x5, 0x1, [0x5542, 0x3, 0x9, 0x401, 0x5], [0x80, 0x1, 0x4, 0x80, 0x2, 0x3, 0x76, 0x1, 0x8, 0xffff, 0x1000, 0xffffffffffffff81, 0x4, 0xc000001, 0x4, 0x566, 0x3, 0x2, 0xbfd, 0x5, 0x3, 0x3, 0x4, 0x7, 0x9, 0x79f3, 0x3d32, 0x7f, 0xa7, 0x9, 0x2, 0x9, 0x7, 0x0, 0x7, 0x2, 0x1, 0x2, 0x4, 0x7fffffff, 0x0, 0x10001, 0x32800000000000, 0x7, 0x5, 0x4, 0x5, 0x2, 0x9, 0x10001000, 0xffffffff, 0x2c, 0x5, 0x6, 0x3ff, 0x1, 0x1f6, 0x0, 0x1, 0x8, 0x8, 0x1, 0x9, 0xfffffffffffffff4, 0x3, 0x81, 0xfffffffffffffffd, 0x8000000000000000, 0x489d675, 0x1f6a, 0x6, 0x9, 0x401, 0x3, 0x4, 0x8, 0x9, 0x7fffffff, 0xc9, 0xc7d, 0x100, 0x8000, 0x9, 0x40, 0x6, 0x8, 0x2, 0x9, 0x1, 0x17be, 0x1, 0x6, 0x6, 0x5, 0x7fff, 0x7fffffffffffffff, 0x8000, 0x4, 0x5be6, 0x2, 0x3, 0x71441d6f, 0x8, 0x10000, 0x8, 0x3, 0x1, 0xfffffffffffffffa, 0x10, 0x22d7, 0x7, 0x8000000000000001, 0x2, 0x7, 0x8d2, 0x2, 0x2, 0xcff6, 0x0, 0x8, 0x100000000]}) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 1m40s testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 22, 2, 17, 6, 2, 3, 24, 19, 21, 3, 29, 13, 30, 23, 18, 11, 26, 24, 2, 19, 4, 3, 23, 29, 13, 27, 21, 30, 18] detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) fanotify_init(0x40, 0x40000) r4 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72e0, 0x0, 0x40000, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) r6 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r7) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x100, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffd81) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x1, 0x4, 0x3}}}}}}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xfffffe41) r3 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, &(0x7f0000000040)}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000007c0)={'macvlan0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0x400004, 0x3b, 0x5, 0x83, 0xd, 0xec, 0xfd, 0xd, 0x4, [0x800, 0x6, 0x8, 0x8, 0x0, 0x9, 0x9, 0x12]}}) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000080)) read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffa}]}}}]}]}], {0x14}}, 0xc0}}, 0x44840) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0009"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) executing program 3: setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) mkdir(0x0, 0x80) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) r3 = open(0x0, 0x282080, 0x8e) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x50, 0x3, 0x8, @private0, @private0, 0x7800, 0x20, 0x7bed, 0x588}}) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000840)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) executing program 4: ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0x10}}}}}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000031c0)={0x24, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x4, 0x1, 0x0, 0x0, @binary}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x24}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000040)=0x500, 0x4) sendto$inet6(r1, &(0x7f0000000100)='\x00'/1211, 0x4bb, 0x0, &(0x7f0000000200)={0xa, 0x1234, 0x0, @loopback}, 0x1c) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000000)) openat$panthor(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) getpgid(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x40088c0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) openat$dlm_monitor(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b03000000000001090222000101008032090400000103000000092111010001221700070581034000"], 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000005c0)={0x80000001, 0x2d2e, 0x27, 0x4}, 0x10) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x3, &(0x7f0000000000)="02c081") close_range(r3, 0xffffffffffffffff, 0x400000000000000) executing program 3: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x7ffe) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x1e1540, 0x3a512d250812dd54) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x200}) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone3(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2c01006, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$OCFS2_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x2, 0x1, 0xf, 0xffffffff7fffffff, 0x6, 0x6}) write(r3, &(0x7f0000000200)="35020000f570", 0x68) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r6) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000001a40)={0x3, 0x1, 0x4, "3a000000000016c713b40c2a3600000000000000000000020100", 0x38414261}) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000180)={{0x6, 0x7}, {0x3, 0x2}, 0x10000, 0x4, 0x8}) write$rfkill(r7, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000003140)={0x2020, 0x0, 0x0}, 0x2020) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC=r0, @ANYRESDEC=r8], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x24008002) executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000540)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x1) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000200)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x800, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x163) renameat2(r2, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}], 0x18}) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000020000103000000000000000600000000000000011f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32], 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x1c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001800dd8d000000000000000002001000fe0400050000002008001e00020000000c56d1ff45"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) sysinfo(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x8c00) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x200000c4) executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x9, [0x800, 0x4], 0x4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7f, 0xc) io_uring_enter(r0, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000780)=""/102400, 0x19000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) executing program 4: r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x9, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0x421, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xffffffef, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x7, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x40000005, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) r1 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) read(r1, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000100)=0xc97) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1048, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xb, 0xc}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x10000000, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b0030003200060063"], 0x76) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44041) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0x20000000}) executing program 2: setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) mkdir(0x0, 0x80) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) r3 = open(0x0, 0x282080, 0x8e) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000840)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) executing program 2: ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0x10}}}}}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0x10, 0x5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000a40)={r4, 0x5, 0x1, [0x5542, 0x3, 0x9, 0x401, 0x5], [0x80, 0x1, 0x4, 0x80, 0x2, 0x3, 0x76, 0x1, 0x8, 0xffff, 0x1000, 0xffffffffffffff81, 0x4, 0xc000001, 0x4, 0x566, 0x3, 0x2, 0xbfd, 0x5, 0x3, 0x3, 0x4, 0x7, 0x9, 0x79f3, 0x3d32, 0x7f, 0xa7, 0x9, 0x2, 0x9, 0x7, 0x0, 0x7, 0x2, 0x1, 0x2, 0x4, 0x7fffffff, 0x0, 0x10001, 0x32800000000000, 0x7, 0x5, 0x4, 0x5, 0x2, 0x9, 0x10001000, 0xffffffff, 0x2c, 0x5, 0x6, 0x3ff, 0x1, 0x1f6, 0x0, 0x1, 0x8, 0x8, 0x1, 0x9, 0xfffffffffffffff4, 0x3, 0x81, 0xfffffffffffffffd, 0x8000000000000000, 0x489d675, 0x1f6a, 0x6, 0x9, 0x401, 0x3, 0x4, 0x8, 0x9, 0x7fffffff, 0xc9, 0xc7d, 0x100, 0x8000, 0x9, 0x40, 0x6, 0x8, 0x2, 0x9, 0x1, 0x17be, 0x1, 0x6, 0x6, 0x5, 0x7fff, 0x7fffffffffffffff, 0x8000, 0x4, 0x5be6, 0x2, 0x3, 0x71441d6f, 0x8, 0x10000, 0x8, 0x3, 0x1, 0xfffffffffffffffa, 0x10, 0x22d7, 0x7, 0x8000000000000001, 0x2, 0x7, 0x8d2, 0x2, 0x2, 0xcff6, 0x0, 0x8, 0x100000000]}) executing program 4: openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_route(0x10, 0x3, 0x0) tkill(r4, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xbd}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r7 = socket(0x2d, 0x2, 0x0) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, r6, 0xc}, 0x10) executing program 3: syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x6000873) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x20000000) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000700001", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000840), &(0x7f0000000140)=r7}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbb00bbbbbb0180c20000010800001c0066000007029078ac141426ac1414aa13049078ac1414230000"], 0x0) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x108843, 0x55) fcntl$setlease(r3, 0x400, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x9, [0x800, 0x4], 0x4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7f, 0xc) io_uring_enter(r0, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-setsockopt$inet6_tcp_int-timer_create-fcntl$lock-syz_open_dev$loop-mmap-mprotect-timer_settime-mmap-socket$inet_mptcp-connect$inet-splice-setsockopt$inet_sctp6_SCTP_EVENTS-sendmmsg$inet-connect$inet6-mkdirat$cgroup_root-mkdirat-mount-mkdirat-unlinkat-setsockopt$packet_int-ioctl$BTRFS_IOC_SCRUB-ioctl$BTRFS_IOC_GET_DEV_STATS detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0x10, 0x5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000a40)={r4, 0x5, 0x1, [0x5542, 0x3, 0x9, 0x401, 0x5], [0x80, 0x1, 0x4, 0x80, 0x2, 0x3, 0x76, 0x1, 0x8, 0xffff, 0x1000, 0xffffffffffffff81, 0x4, 0xc000001, 0x4, 0x566, 0x3, 0x2, 0xbfd, 0x5, 0x3, 0x3, 0x4, 0x7, 0x9, 0x79f3, 0x3d32, 0x7f, 0xa7, 0x9, 0x2, 0x9, 0x7, 0x0, 0x7, 0x2, 0x1, 0x2, 0x4, 0x7fffffff, 0x0, 0x10001, 0x32800000000000, 0x7, 0x5, 0x4, 0x5, 0x2, 0x9, 0x10001000, 0xffffffff, 0x2c, 0x5, 0x6, 0x3ff, 0x1, 0x1f6, 0x0, 0x1, 0x8, 0x8, 0x1, 0x9, 0xfffffffffffffff4, 0x3, 0x81, 0xfffffffffffffffd, 0x8000000000000000, 0x489d675, 0x1f6a, 0x6, 0x9, 0x401, 0x3, 0x4, 0x8, 0x9, 0x7fffffff, 0xc9, 0xc7d, 0x100, 0x8000, 0x9, 0x40, 0x6, 0x8, 0x2, 0x9, 0x1, 0x17be, 0x1, 0x6, 0x6, 0x5, 0x7fff, 0x7fffffffffffffff, 0x8000, 0x4, 0x5be6, 0x2, 0x3, 0x71441d6f, 0x8, 0x10000, 0x8, 0x3, 0x1, 0xfffffffffffffffa, 0x10, 0x22d7, 0x7, 0x8000000000000001, 0x2, 0x7, 0x8d2, 0x2, 0x2, 0xcff6, 0x0, 0x8, 0x100000000]}) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 6m0s testing program (duration=6m7s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 22, 2, 17, 6, 2, 3, 24, 19, 21, 3, 29, 13, 30, 23, 18, 11, 26, 24, 2, 19, 4, 3, 23, 29, 13, 27, 21, 30, 18] detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) fanotify_init(0x40, 0x40000) r4 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72e0, 0x0, 0x40000, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) r6 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r7) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x100, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffd81) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x1, 0x4, 0x3}}}}}}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xfffffe41) r3 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, &(0x7f0000000040)}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000007c0)={'macvlan0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0x400004, 0x3b, 0x5, 0x83, 0xd, 0xec, 0xfd, 0xd, 0x4, [0x800, 0x6, 0x8, 0x8, 0x0, 0x9, 0x9, 0x12]}}) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000080)) read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffa}]}}}]}]}], {0x14}}, 0xc0}}, 0x44840) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0009"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) executing program 3: setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) mkdir(0x0, 0x80) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) r3 = open(0x0, 0x282080, 0x8e) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x50, 0x3, 0x8, @private0, @private0, 0x7800, 0x20, 0x7bed, 0x588}}) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000840)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) executing program 4: ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0x10}}}}}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000031c0)={0x24, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x4, 0x1, 0x0, 0x0, @binary}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x24}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000040)=0x500, 0x4) sendto$inet6(r1, &(0x7f0000000100)='\x00'/1211, 0x4bb, 0x0, &(0x7f0000000200)={0xa, 0x1234, 0x0, @loopback}, 0x1c) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000000)) openat$panthor(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) getpgid(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x40088c0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) openat$dlm_monitor(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b03000000000001090222000101008032090400000103000000092111010001221700070581034000"], 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000005c0)={0x80000001, 0x2d2e, 0x27, 0x4}, 0x10) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x3, &(0x7f0000000000)="02c081") close_range(r3, 0xffffffffffffffff, 0x400000000000000) executing program 3: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x7ffe) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x1e1540, 0x3a512d250812dd54) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x200}) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone3(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2c01006, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$OCFS2_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x2, 0x1, 0xf, 0xffffffff7fffffff, 0x6, 0x6}) write(r3, &(0x7f0000000200)="35020000f570", 0x68) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r6) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000001a40)={0x3, 0x1, 0x4, "3a000000000016c713b40c2a3600000000000000000000020100", 0x38414261}) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000180)={{0x6, 0x7}, {0x3, 0x2}, 0x10000, 0x4, 0x8}) write$rfkill(r7, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000003140)={0x2020, 0x0, 0x0}, 0x2020) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC=r0, @ANYRESDEC=r8], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x24008002) executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000540)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x1) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000200)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x800, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x163) renameat2(r2, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}], 0x18}) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000020000103000000000000000600000000000000011f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32], 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x1c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001800dd8d000000000000000002001000fe0400050000002008001e00020000000c56d1ff45"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) sysinfo(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x8c00) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x200000c4) executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x9, [0x800, 0x4], 0x4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7f, 0xc) io_uring_enter(r0, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000780)=""/102400, 0x19000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) executing program 4: r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x9, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0x421, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xffffffef, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x7, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x40000005, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) r1 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) read(r1, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000100)=0xc97) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1048, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xb, 0xc}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x10000000, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b0030003200060063"], 0x76) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44041) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0x20000000}) executing program 2: setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) mkdir(0x0, 0x80) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) r3 = open(0x0, 0x282080, 0x8e) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000840)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) executing program 2: ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0x10}}}}}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0x10, 0x5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000a40)={r4, 0x5, 0x1, [0x5542, 0x3, 0x9, 0x401, 0x5], [0x80, 0x1, 0x4, 0x80, 0x2, 0x3, 0x76, 0x1, 0x8, 0xffff, 0x1000, 0xffffffffffffff81, 0x4, 0xc000001, 0x4, 0x566, 0x3, 0x2, 0xbfd, 0x5, 0x3, 0x3, 0x4, 0x7, 0x9, 0x79f3, 0x3d32, 0x7f, 0xa7, 0x9, 0x2, 0x9, 0x7, 0x0, 0x7, 0x2, 0x1, 0x2, 0x4, 0x7fffffff, 0x0, 0x10001, 0x32800000000000, 0x7, 0x5, 0x4, 0x5, 0x2, 0x9, 0x10001000, 0xffffffff, 0x2c, 0x5, 0x6, 0x3ff, 0x1, 0x1f6, 0x0, 0x1, 0x8, 0x8, 0x1, 0x9, 0xfffffffffffffff4, 0x3, 0x81, 0xfffffffffffffffd, 0x8000000000000000, 0x489d675, 0x1f6a, 0x6, 0x9, 0x401, 0x3, 0x4, 0x8, 0x9, 0x7fffffff, 0xc9, 0xc7d, 0x100, 0x8000, 0x9, 0x40, 0x6, 0x8, 0x2, 0x9, 0x1, 0x17be, 0x1, 0x6, 0x6, 0x5, 0x7fff, 0x7fffffffffffffff, 0x8000, 0x4, 0x5be6, 0x2, 0x3, 0x71441d6f, 0x8, 0x10000, 0x8, 0x3, 0x1, 0xfffffffffffffffa, 0x10, 0x22d7, 0x7, 0x8000000000000001, 0x2, 0x7, 0x8d2, 0x2, 0x2, 0xcff6, 0x0, 0x8, 0x100000000]}) executing program 4: openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_route(0x10, 0x3, 0x0) tkill(r4, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xbd}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r7 = socket(0x2d, 0x2, 0x0) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, r6, 0xc}, 0x10) executing program 3: syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x6000873) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x20000000) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000700001", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000840), &(0x7f0000000140)=r7}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbb00bbbbbb0180c20000010800001c0066000007029078ac141426ac1414aa13049078ac1414230000"], 0x0) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x108843, 0x55) fcntl$setlease(r3, 0x400, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x9, [0x800, 0x4], 0x4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7f, 0xc) io_uring_enter(r0, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) program crashed: WARNING in trace_rb_cpu_prepare bisect: bisecting 30 programs bisect: split chunks (needed=false): <29> bisect: split chunk #0 of len 29 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 29, 13, 30, 23, 18, 11, 26, 24, 2, 19, 4, 3, 23, 29, 13, 27, 21, 30, 18] detailed listing: executing program 3: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x7ffe) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x1e1540, 0x3a512d250812dd54) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x200}) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone3(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2c01006, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$OCFS2_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x2, 0x1, 0xf, 0xffffffff7fffffff, 0x6, 0x6}) write(r3, &(0x7f0000000200)="35020000f570", 0x68) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r6) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000001a40)={0x3, 0x1, 0x4, "3a000000000016c713b40c2a3600000000000000000000020100", 0x38414261}) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000180)={{0x6, 0x7}, {0x3, 0x2}, 0x10000, 0x4, 0x8}) write$rfkill(r7, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000003140)={0x2020, 0x0, 0x0}, 0x2020) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC=r0, @ANYRESDEC=r8], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x24008002) executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000540)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x1) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000200)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x800, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x163) renameat2(r2, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}], 0x18}) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000020000103000000000000000600000000000000011f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32], 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x1c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001800dd8d000000000000000002001000fe0400050000002008001e00020000000c56d1ff45"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) sysinfo(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x8c00) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x200000c4) executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x9, [0x800, 0x4], 0x4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7f, 0xc) io_uring_enter(r0, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000780)=""/102400, 0x19000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) executing program 4: r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x9, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0x421, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xffffffef, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x7, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x40000005, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) r1 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) read(r1, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000100)=0xc97) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1048, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xb, 0xc}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x10000000, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b0030003200060063"], 0x76) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44041) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0x20000000}) executing program 2: setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) mkdir(0x0, 0x80) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) r3 = open(0x0, 0x282080, 0x8e) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000840)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) executing program 2: ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0x10}}}}}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0x10, 0x5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000a40)={r4, 0x5, 0x1, [0x5542, 0x3, 0x9, 0x401, 0x5], [0x80, 0x1, 0x4, 0x80, 0x2, 0x3, 0x76, 0x1, 0x8, 0xffff, 0x1000, 0xffffffffffffff81, 0x4, 0xc000001, 0x4, 0x566, 0x3, 0x2, 0xbfd, 0x5, 0x3, 0x3, 0x4, 0x7, 0x9, 0x79f3, 0x3d32, 0x7f, 0xa7, 0x9, 0x2, 0x9, 0x7, 0x0, 0x7, 0x2, 0x1, 0x2, 0x4, 0x7fffffff, 0x0, 0x10001, 0x32800000000000, 0x7, 0x5, 0x4, 0x5, 0x2, 0x9, 0x10001000, 0xffffffff, 0x2c, 0x5, 0x6, 0x3ff, 0x1, 0x1f6, 0x0, 0x1, 0x8, 0x8, 0x1, 0x9, 0xfffffffffffffff4, 0x3, 0x81, 0xfffffffffffffffd, 0x8000000000000000, 0x489d675, 0x1f6a, 0x6, 0x9, 0x401, 0x3, 0x4, 0x8, 0x9, 0x7fffffff, 0xc9, 0xc7d, 0x100, 0x8000, 0x9, 0x40, 0x6, 0x8, 0x2, 0x9, 0x1, 0x17be, 0x1, 0x6, 0x6, 0x5, 0x7fff, 0x7fffffffffffffff, 0x8000, 0x4, 0x5be6, 0x2, 0x3, 0x71441d6f, 0x8, 0x10000, 0x8, 0x3, 0x1, 0xfffffffffffffffa, 0x10, 0x22d7, 0x7, 0x8000000000000001, 0x2, 0x7, 0x8d2, 0x2, 0x2, 0xcff6, 0x0, 0x8, 0x100000000]}) executing program 4: openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_route(0x10, 0x3, 0x0) tkill(r4, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xbd}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r7 = socket(0x2d, 0x2, 0x0) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, r6, 0xc}, 0x10) executing program 3: syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x6000873) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x20000000) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000700001", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000840), &(0x7f0000000140)=r7}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbb00bbbbbb0180c20000010800001c0066000007029078ac141426ac1414aa13049078ac1414230000"], 0x0) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x108843, 0x55) fcntl$setlease(r3, 0x400, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x9, [0x800, 0x4], 0x4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7f, 0xc) io_uring_enter(r0, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) program crashed: KASAN: use-after-free Read in dvb_device_open bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 4, 3, 23, 29, 13, 27, 21, 30, 18] detailed listing: executing program 2: ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0x10}}}}}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0x10, 0x5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000a40)={r4, 0x5, 0x1, [0x5542, 0x3, 0x9, 0x401, 0x5], [0x80, 0x1, 0x4, 0x80, 0x2, 0x3, 0x76, 0x1, 0x8, 0xffff, 0x1000, 0xffffffffffffff81, 0x4, 0xc000001, 0x4, 0x566, 0x3, 0x2, 0xbfd, 0x5, 0x3, 0x3, 0x4, 0x7, 0x9, 0x79f3, 0x3d32, 0x7f, 0xa7, 0x9, 0x2, 0x9, 0x7, 0x0, 0x7, 0x2, 0x1, 0x2, 0x4, 0x7fffffff, 0x0, 0x10001, 0x32800000000000, 0x7, 0x5, 0x4, 0x5, 0x2, 0x9, 0x10001000, 0xffffffff, 0x2c, 0x5, 0x6, 0x3ff, 0x1, 0x1f6, 0x0, 0x1, 0x8, 0x8, 0x1, 0x9, 0xfffffffffffffff4, 0x3, 0x81, 0xfffffffffffffffd, 0x8000000000000000, 0x489d675, 0x1f6a, 0x6, 0x9, 0x401, 0x3, 0x4, 0x8, 0x9, 0x7fffffff, 0xc9, 0xc7d, 0x100, 0x8000, 0x9, 0x40, 0x6, 0x8, 0x2, 0x9, 0x1, 0x17be, 0x1, 0x6, 0x6, 0x5, 0x7fff, 0x7fffffffffffffff, 0x8000, 0x4, 0x5be6, 0x2, 0x3, 0x71441d6f, 0x8, 0x10000, 0x8, 0x3, 0x1, 0xfffffffffffffffa, 0x10, 0x22d7, 0x7, 0x8000000000000001, 0x2, 0x7, 0x8d2, 0x2, 0x2, 0xcff6, 0x0, 0x8, 0x100000000]}) executing program 4: openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_route(0x10, 0x3, 0x0) tkill(r4, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xbd}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r7 = socket(0x2d, 0x2, 0x0) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, r6, 0xc}, 0x10) executing program 3: syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x6000873) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x20000000) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000700001", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000840), &(0x7f0000000140)=r7}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbb00bbbbbb0180c20000010800001c0066000007029078ac141426ac1414aa13049078ac1414230000"], 0x0) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x108843, 0x55) fcntl$setlease(r3, 0x400, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x9, [0x800, 0x4], 0x4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7f, 0xc) io_uring_enter(r0, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) program crashed: KASAN: use-after-free Read in dvb_device_open bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-setsockopt$inet6_tcp_int-timer_create-fcntl$lock-syz_open_dev$loop-mmap-mprotect-timer_settime-mmap-socket$inet_mptcp-connect$inet-splice-setsockopt$inet_sctp6_SCTP_EVENTS-sendmmsg$inet-connect$inet6-mkdirat$cgroup_root-mkdirat-mount-mkdirat-unlinkat-setsockopt$packet_int-ioctl$BTRFS_IOC_SCRUB-ioctl$BTRFS_IOC_GET_DEV_STATS detailed listing: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0x10, 0x5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000a40)={r4, 0x5, 0x1, [0x5542, 0x3, 0x9, 0x401, 0x5], [0x80, 0x1, 0x4, 0x80, 0x2, 0x3, 0x76, 0x1, 0x8, 0xffff, 0x1000, 0xffffffffffffff81, 0x4, 0xc000001, 0x4, 0x566, 0x3, 0x2, 0xbfd, 0x5, 0x3, 0x3, 0x4, 0x7, 0x9, 0x79f3, 0x3d32, 0x7f, 0xa7, 0x9, 0x2, 0x9, 0x7, 0x0, 0x7, 0x2, 0x1, 0x2, 0x4, 0x7fffffff, 0x0, 0x10001, 0x32800000000000, 0x7, 0x5, 0x4, 0x5, 0x2, 0x9, 0x10001000, 0xffffffff, 0x2c, 0x5, 0x6, 0x3ff, 0x1, 0x1f6, 0x0, 0x1, 0x8, 0x8, 0x1, 0x9, 0xfffffffffffffff4, 0x3, 0x81, 0xfffffffffffffffd, 0x8000000000000000, 0x489d675, 0x1f6a, 0x6, 0x9, 0x401, 0x3, 0x4, 0x8, 0x9, 0x7fffffff, 0xc9, 0xc7d, 0x100, 0x8000, 0x9, 0x40, 0x6, 0x8, 0x2, 0x9, 0x1, 0x17be, 0x1, 0x6, 0x6, 0x5, 0x7fff, 0x7fffffffffffffff, 0x8000, 0x4, 0x5be6, 0x2, 0x3, 0x71441d6f, 0x8, 0x10000, 0x8, 0x3, 0x1, 0xfffffffffffffffa, 0x10, 0x22d7, 0x7, 0x8000000000000001, 0x2, 0x7, 0x8d2, 0x2, 0x2, 0xcff6, 0x0, 0x8, 0x100000000]}) program did not crash bisect: split chunks (needed=true): <9> bisect: split chunk #0 of len 9 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 27, 21, 30, 18] detailed listing: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0x10, 0x5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000a40)={r4, 0x5, 0x1, [0x5542, 0x3, 0x9, 0x401, 0x5], [0x80, 0x1, 0x4, 0x80, 0x2, 0x3, 0x76, 0x1, 0x8, 0xffff, 0x1000, 0xffffffffffffff81, 0x4, 0xc000001, 0x4, 0x566, 0x3, 0x2, 0xbfd, 0x5, 0x3, 0x3, 0x4, 0x7, 0x9, 0x79f3, 0x3d32, 0x7f, 0xa7, 0x9, 0x2, 0x9, 0x7, 0x0, 0x7, 0x2, 0x1, 0x2, 0x4, 0x7fffffff, 0x0, 0x10001, 0x32800000000000, 0x7, 0x5, 0x4, 0x5, 0x2, 0x9, 0x10001000, 0xffffffff, 0x2c, 0x5, 0x6, 0x3ff, 0x1, 0x1f6, 0x0, 0x1, 0x8, 0x8, 0x1, 0x9, 0xfffffffffffffff4, 0x3, 0x81, 0xfffffffffffffffd, 0x8000000000000000, 0x489d675, 0x1f6a, 0x6, 0x9, 0x401, 0x3, 0x4, 0x8, 0x9, 0x7fffffff, 0xc9, 0xc7d, 0x100, 0x8000, 0x9, 0x40, 0x6, 0x8, 0x2, 0x9, 0x1, 0x17be, 0x1, 0x6, 0x6, 0x5, 0x7fff, 0x7fffffffffffffff, 0x8000, 0x4, 0x5be6, 0x2, 0x3, 0x71441d6f, 0x8, 0x10000, 0x8, 0x3, 0x1, 0xfffffffffffffffa, 0x10, 0x22d7, 0x7, 0x8000000000000001, 0x2, 0x7, 0x8d2, 0x2, 0x2, 0xcff6, 0x0, 0x8, 0x100000000]}) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000700001", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000840), &(0x7f0000000140)=r7}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbb00bbbbbb0180c20000010800001c0066000007029078ac141426ac1414aa13049078ac1414230000"], 0x0) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x108843, 0x55) fcntl$setlease(r3, 0x400, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x9, [0x800, 0x4], 0x4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7f, 0xc) io_uring_enter(r0, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) program crashed: KASAN: use-after-free Read in dvb_device_open bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <4> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 30, 18] detailed listing: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0x10, 0x5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000a40)={r4, 0x5, 0x1, [0x5542, 0x3, 0x9, 0x401, 0x5], [0x80, 0x1, 0x4, 0x80, 0x2, 0x3, 0x76, 0x1, 0x8, 0xffff, 0x1000, 0xffffffffffffff81, 0x4, 0xc000001, 0x4, 0x566, 0x3, 0x2, 0xbfd, 0x5, 0x3, 0x3, 0x4, 0x7, 0x9, 0x79f3, 0x3d32, 0x7f, 0xa7, 0x9, 0x2, 0x9, 0x7, 0x0, 0x7, 0x2, 0x1, 0x2, 0x4, 0x7fffffff, 0x0, 0x10001, 0x32800000000000, 0x7, 0x5, 0x4, 0x5, 0x2, 0x9, 0x10001000, 0xffffffff, 0x2c, 0x5, 0x6, 0x3ff, 0x1, 0x1f6, 0x0, 0x1, 0x8, 0x8, 0x1, 0x9, 0xfffffffffffffff4, 0x3, 0x81, 0xfffffffffffffffd, 0x8000000000000000, 0x489d675, 0x1f6a, 0x6, 0x9, 0x401, 0x3, 0x4, 0x8, 0x9, 0x7fffffff, 0xc9, 0xc7d, 0x100, 0x8000, 0x9, 0x40, 0x6, 0x8, 0x2, 0x9, 0x1, 0x17be, 0x1, 0x6, 0x6, 0x5, 0x7fff, 0x7fffffffffffffff, 0x8000, 0x4, 0x5be6, 0x2, 0x3, 0x71441d6f, 0x8, 0x10000, 0x8, 0x3, 0x1, 0xfffffffffffffffa, 0x10, 0x22d7, 0x7, 0x8000000000000001, 0x2, 0x7, 0x8d2, 0x2, 0x2, 0xcff6, 0x0, 0x8, 0x100000000]}) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x9, [0x800, 0x4], 0x4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7f, 0xc) io_uring_enter(r0, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) program crashed: KASAN: use-after-free Read in dvb_device_open bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 18] detailed listing: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0x10, 0x5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000a40)={r4, 0x5, 0x1, [0x5542, 0x3, 0x9, 0x401, 0x5], [0x80, 0x1, 0x4, 0x80, 0x2, 0x3, 0x76, 0x1, 0x8, 0xffff, 0x1000, 0xffffffffffffff81, 0x4, 0xc000001, 0x4, 0x566, 0x3, 0x2, 0xbfd, 0x5, 0x3, 0x3, 0x4, 0x7, 0x9, 0x79f3, 0x3d32, 0x7f, 0xa7, 0x9, 0x2, 0x9, 0x7, 0x0, 0x7, 0x2, 0x1, 0x2, 0x4, 0x7fffffff, 0x0, 0x10001, 0x32800000000000, 0x7, 0x5, 0x4, 0x5, 0x2, 0x9, 0x10001000, 0xffffffff, 0x2c, 0x5, 0x6, 0x3ff, 0x1, 0x1f6, 0x0, 0x1, 0x8, 0x8, 0x1, 0x9, 0xfffffffffffffff4, 0x3, 0x81, 0xfffffffffffffffd, 0x8000000000000000, 0x489d675, 0x1f6a, 0x6, 0x9, 0x401, 0x3, 0x4, 0x8, 0x9, 0x7fffffff, 0xc9, 0xc7d, 0x100, 0x8000, 0x9, 0x40, 0x6, 0x8, 0x2, 0x9, 0x1, 0x17be, 0x1, 0x6, 0x6, 0x5, 0x7fff, 0x7fffffffffffffff, 0x8000, 0x4, 0x5be6, 0x2, 0x3, 0x71441d6f, 0x8, 0x10000, 0x8, 0x3, 0x1, 0xfffffffffffffffa, 0x10, 0x22d7, 0x7, 0x8000000000000001, 0x2, 0x7, 0x8d2, 0x2, 0x2, 0xcff6, 0x0, 0x8, 0x100000000]}) executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x9, [0x800, 0x4], 0x4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7f, 0xc) io_uring_enter(r0, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 30] detailed listing: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0x10, 0x5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000a40)={r4, 0x5, 0x1, [0x5542, 0x3, 0x9, 0x401, 0x5], [0x80, 0x1, 0x4, 0x80, 0x2, 0x3, 0x76, 0x1, 0x8, 0xffff, 0x1000, 0xffffffffffffff81, 0x4, 0xc000001, 0x4, 0x566, 0x3, 0x2, 0xbfd, 0x5, 0x3, 0x3, 0x4, 0x7, 0x9, 0x79f3, 0x3d32, 0x7f, 0xa7, 0x9, 0x2, 0x9, 0x7, 0x0, 0x7, 0x2, 0x1, 0x2, 0x4, 0x7fffffff, 0x0, 0x10001, 0x32800000000000, 0x7, 0x5, 0x4, 0x5, 0x2, 0x9, 0x10001000, 0xffffffff, 0x2c, 0x5, 0x6, 0x3ff, 0x1, 0x1f6, 0x0, 0x1, 0x8, 0x8, 0x1, 0x9, 0xfffffffffffffff4, 0x3, 0x81, 0xfffffffffffffffd, 0x8000000000000000, 0x489d675, 0x1f6a, 0x6, 0x9, 0x401, 0x3, 0x4, 0x8, 0x9, 0x7fffffff, 0xc9, 0xc7d, 0x100, 0x8000, 0x9, 0x40, 0x6, 0x8, 0x2, 0x9, 0x1, 0x17be, 0x1, 0x6, 0x6, 0x5, 0x7fff, 0x7fffffffffffffff, 0x8000, 0x4, 0x5be6, 0x2, 0x3, 0x71441d6f, 0x8, 0x10000, 0x8, 0x3, 0x1, 0xfffffffffffffffa, 0x10, 0x22d7, 0x7, 0x8000000000000001, 0x2, 0x7, 0x8d2, 0x2, 0x2, 0xcff6, 0x0, 0x8, 0x100000000]}) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open bisect: the chunk can be dropped bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0x10, 0x5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000a40)={r4, 0x5, 0x1, [0x5542, 0x3, 0x9, 0x401, 0x5], [0x80, 0x1, 0x4, 0x80, 0x2, 0x3, 0x76, 0x1, 0x8, 0xffff, 0x1000, 0xffffffffffffff81, 0x4, 0xc000001, 0x4, 0x566, 0x3, 0x2, 0xbfd, 0x5, 0x3, 0x3, 0x4, 0x7, 0x9, 0x79f3, 0x3d32, 0x7f, 0xa7, 0x9, 0x2, 0x9, 0x7, 0x0, 0x7, 0x2, 0x1, 0x2, 0x4, 0x7fffffff, 0x0, 0x10001, 0x32800000000000, 0x7, 0x5, 0x4, 0x5, 0x2, 0x9, 0x10001000, 0xffffffff, 0x2c, 0x5, 0x6, 0x3ff, 0x1, 0x1f6, 0x0, 0x1, 0x8, 0x8, 0x1, 0x9, 0xfffffffffffffff4, 0x3, 0x81, 0xfffffffffffffffd, 0x8000000000000000, 0x489d675, 0x1f6a, 0x6, 0x9, 0x401, 0x3, 0x4, 0x8, 0x9, 0x7fffffff, 0xc9, 0xc7d, 0x100, 0x8000, 0x9, 0x40, 0x6, 0x8, 0x2, 0x9, 0x1, 0x17be, 0x1, 0x6, 0x6, 0x5, 0x7fff, 0x7fffffffffffffff, 0x8000, 0x4, 0x5be6, 0x2, 0x3, 0x71441d6f, 0x8, 0x10000, 0x8, 0x3, 0x1, 0xfffffffffffffffa, 0x10, 0x22d7, 0x7, 0x8000000000000001, 0x2, 0x7, 0x8d2, 0x2, 0x2, 0xcff6, 0x0, 0x8, 0x100000000]}) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0x10, 0x5}) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="c70759fca68be5fa7a809ab9133a33ddbedba102d1b8cbeb8769744a10c953e043e7742c19296cbeb9940a5099681edfbf02be5ecf6a3f5492f9fb13973d7073e47b70f4cff6c36325daca4f091e8274c7740521c6b19471c502be90a0291dc725c3f05cceea3ccca0db169596763410cdb163a8f772fa42d333004452173f619d7f4c84905394bb0cd41ffbec02a575cadf84f537e53b55d766d5270eaad45433ab38331c5b1a240c1b42e47147da152641738c93dc13ccd0067aecae91fbc2f6cfa6c152f5831819a1f3225de86d7f5e5f82b18ff8fc9169d50871392f6bb33e4dfadc399abf0c9c21cab16e353ea45e9502269e0e06702828c25f97d56a037c233ea04f0842c1151c96b40f33b21c82a0bf3d985fb39696b3187b52e89f18e48a9846489b440b4785be178289fe3b94ba0aa5b7a0529586cbd203a67fa78da1e64777bbdf3edf7721fb094b12a4537835986f173c6dc258ad0420fa05118bb38ab562fdf895121f2240e13515def0ec2a01a9b641782669b735f27ad8beddf47e862071cecfd996e6c0724ce5fad8cc5224e3fc98ee005e0256dad58a6da24fa2a84a18dc75609d18b5588180ad0224a9c9664235e9cb0a1adf69dbdfc96a8b51d4490ed93313b73596070696918d0ed8b0cee0b9f0bc41d7d9ec4b7294d7ca19befe0ef81c1509123d82f63a440fd40821304441261359d4db4f61c15e60d32ec07ebb81c33495cbac0528184c9c9921224ab9284491af01014066216aefe086b47816c49eefdf325e2bda7701896ed5183cbb58a7732dd4dcf10948f41824f966b1b151189ac4aeec0bb4e9a8a6a848a3a5ab7f17e0094728ec979eb66c5ad1323efafc36e843f367175b2ee2d066558d861ac8e31c7b936c51ab89f622d761571ad222ff32ba7308ce5a99b87ee0b3dd568bb12361d292f957afbd58de543c47f3d9c0fc14da295260f958ff341655c36efbac4d3b635ba956819f47d2c6150597507e028aa720af75e010f0961beef9cbbb081c0647b879e81f45f82f0c5a5d41217474fc9161d2c5eff1e85eb74f0ff6e4494df47cdf394c2ccb8e78ba0d3c3e8c5f65322f9cb84c973cd685a146bb545ace4d943a10b85b9724db426c3fe275403d415d33a2235f28d3a0c94e62384470125508c4e7a3975a452a3fd668b251d67b654395f8854a2648ec52ad271f05c0b7c141c3860d84e01fec25cae7e9f3adee412dfd9ffb371f49bb380d1a0eca9dae93cc9c5b6fba00fa47c75aff9bd5215ed32ba239abefdaa9c48adce1060fbb25b885fe8d77ae4e01265965272b9836c9909b83ce9c44695410d114ecab5e30478255c2df4a4d660ae3b3bfcbb7c16790bf6d5da33ddf6c608f34fdc7bebcd8c9a56b41dd132a4e9fede515a20e6b9a8be2b3ed072ac6ce191ec481313d59da1075d3ffe73ca8505d9438015f9a27d259aaeb0d3238baccdaceb32184737e73762a704c0f06942c60a662d6758fc92d8ee205c9d118bff228b1e91b1c0ec22f30f982350c8f6fd2bdab6ae20d61463c8d285f1a026a9ad19f55fe48f899f692fd8fbf177047e60c85a8bf816ea5db8683ec570c708c359c2cbb8646ed32a21cf180f02effe061598a399bbfc192258f3c9e72fefa874a310183b69c723b572ec8d201ff7e2bb537cfc1e9834393b760d4bf7c33ea982c98f7a8cfa209ccd7174daa99e2acba33e31fc16ba2472ba65b6630c64829f7a57b48da4a084c51d28a4aad3a01caf4e9686282679554e291dfd8fc5fdf4aac6dc3061dcd98f2f89a1cbeedb445e65eda8327f87201c924171ad62450fd514835005091ab8dc5ce96d420940d47b689ba5913ac94c8271bc4fc7600d291fc85e6a41cf7c251d0414bd249942abd43ba3705ea57be43785d3037a32d8ae307d27e61bb1c62baf10345908a81a53e534e97666017100b84362555f830be5bd0bdde23e30a4a063cc200aad4182767c5cc235a776f27c6296372df5d4fb392515f0835f95387fef7060238e445635aa292e1905c415a1e4fc312d3930b67f984c952fd24216e10a348536f22158303416f784b851c73b68bfd7ac5587ba839dde4da7d9e58ce85b112c955ee33cc22b8e4f7a0c3103549a42273305e764f74acb9cf922ded5f489b639db6975dfaed56f8fa6fea6083f4c38a2f63ac597083e12bc82e94f80c5fad27545f9d2be630479fae40e403517745873526938df2b08596f61ae947aa5c86e4f48ea1e142afa426d38592010c65603bdcd6b4fd8131e70a885123afd9ef81d23840ad772c721faf23dbf5f31ec25418d69f3a758ed8760e1a71341339947f03aa9b80687dcd6164e93eca45e0bf9506f08e8cd9e1f87f84bf4b0b618b44d4ec92a3d9e084c022c032c6e1643695603e438f61445f65c53d6381e55b8953b845560f625223d7406bd5d7a5e3a3dcb57ecfd75c7a22f38f770ba5060b6361e82e196b4549aaa7193f3d64b63a189017d6a105f36132c7a90216f92479ada785fb503b035f75cea061f19e531670a2dc53c471761491e5858290f118b9038dc19aa27d0e463b1c3d150ee8efff9b538a5483bb8f63741027ed1bf71b2e0b9dc9171180d4ce8ebca56eff589d50ddfe3e18c4cd8a01c08c5c11eadaa3609aff5efa589ac369426890c28eb04996b1a21399ec0e64fe747ebb55b0736da081e391eaecf63347bd456231682e1ec9dc61b043ff209c52fa7952480906358c97b101e1d83a23b79725b2b789aaa3c9a503a2052436d163c48c92a021ede2431e2798a5cece110683b2b35ca3c498f5660e89dd9a4f4021aef3951e8eb9e2efe9df9fb628a3ef83e2e7c0b2d183152ed28dc55b0e77bbf9dcfb06227536b83e3810961a0e864a56bbd5598b92723a7f98fc6a97cfe3476a58fa97f25e15c0c22614eb30c3e786f917d254fecd160e8b708f8a3b60fbf8b68019001792ad40be844c6553a971ee5b852df41f8ede075078afc03c486ff624423b7674002c45fc997862dbce5b2a84ee17855681d43b26555d8a8d5e05f334ec249359f022a856f65fca67f8893a4b2ebc1d69969476bf17c66ac611808426f842db584b5176c8256245a4d2a101de029ea026cd9c0842f2f7ecdeb78c37a4e87f2f3b08ad597db826d6da45d1aefed6e43cb57c17e1000673406f4408439fdffac1cecdd8d8d289e61134791ab8bdef10587e5d58ffc3af7fe58f44b57dd17c626b7ffedce4a073a67957ffe75740b9febc39e8569aeed3994edaaa6fcaaabc8012bd0c77cdc4d25041c1a731356a4298656dca04f8639fdc92bb081f62a9eda6495fa4d42172ed58bda4a7a544a25e99593e7c48e7594e9c2307599dd321222e2f0a19b258b4f7fdab10774bcf6bf2e39c67135443b69f75cc274d446fbb6974991648998e3eb417f82c0a6c4b2f50293aa141e02244aa80b34d2287edaf5b55a93860b2c3825de1de7c47e54e13e29eb0dab1e8a153c7637a09715ca3c26b5eb08a0170fda34150f145787af57a0c7941bdeb51440b20cbbfc2e9aacf227d913aec29eab862e4975d2d65785001e4412b29fceca1b433392a1154156db2364258628592e59674b160bec9676d14f62e1af529a2a58aa315ac9e8ed04a1bcc4b9fde26ca9ab9156c3e1ca8bb764d5d6fddb681a56d34d25b2edc10e753e45dd7b7f427acf4e2433e92bb5ff8a34490ad591ae3b903f300b2b4cb1b639e209e64bcce7434862069e5b7318da4f48ef77cbac27d5331f0b162947af4bfb627658ad6fb7cd3166aca8ba68f0fd43d868ebe72672c5725fece3e5258280222cb495141cc4e819fa79010d45dbf11e373dc5075371768033b311d1d26ec3d0a914e5813b007f7e53acc293f49659ce192d9f0b4315f3d975201cbdd4f4a6cafe29fa0d232e094a83a6aeb33b84c24f6fdde9afad0819fa9d0294f5e6eadea9e4943bf99767a73b4c61778defcb356f46f50d76925fe8ed5d78d608f184a000c5693266922a283205db07af0f26f3cce20ff08011cf607cba12c56db8324ec5a55471e3dab8f5977f71ae490a7f7c9a442f4b656154c266fa46228ced771dcc91fa7fc2c57f7c85a779a790ab3b273a3571f5a9da4250f225ab9b7bf61a1584eb00f0a39c63a4a180441f2243cac2a29f8c0cbf8a0007537b5465d46aeaf717d2b2dd81d173b4ec912578ce3fafe6ca58065a28fbd1536daed43b3172efb923306a20c5b8eea6f1dfb38dc2e9572bba9fd74ebc026044aad85b098518c8dd5584b067306fdcaed7c4b69f9f8e7bb969cff0bd942131302d852bb1e3956403ad3525387d35b83442106b108cba554fbfd81e7f39a4a5f1cc67b29", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Write in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4040040) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="c70759fca68be5fa7a809ab9133a33ddbedba102d1b8cbeb8769744a10c953e043e7742c19296cbeb9940a5099681edfbf02be5ecf6a3f5492f9fb13973d7073e47b70f4cff6c36325daca4f091e8274c7740521c6b19471c502be90a0291dc725c3f05cceea3ccca0db169596763410cdb163a8f772fa42d333004452173f619d7f4c84905394bb0cd41ffbec02a575cadf84f537e53b55d766d5270eaad45433ab38331c5b1a240c1b42e47147da152641738c93dc13ccd0067aecae91fbc2f6cfa6c152f5831819a1f3225de86d7f5e5f82b18ff8fc9169d50871392f6bb33e4dfadc399abf0c9c21cab16e353ea45e9502269e0e06702828c25f97d56a037c233ea04f0842c1151c96b40f33b21c82a0bf3d985fb39696b3187b52e89f18e48a9846489b440b4785be178289fe3b94ba0aa5b7a0529586cbd203a67fa78da1e64777bbdf3edf7721fb094b12a4537835986f173c6dc258ad0420fa05118bb38ab562fdf895121f2240e13515def0ec2a01a9b641782669b735f27ad8beddf47e862071cecfd996e6c0724ce5fad8cc5224e3fc98ee005e0256dad58a6da24fa2a84a18dc75609d18b5588180ad0224a9c9664235e9cb0a1adf69dbdfc96a8b51d4490ed93313b73596070696918d0ed8b0cee0b9f0bc41d7d9ec4b7294d7ca19befe0ef81c1509123d82f63a440fd40821304441261359d4db4f61c15e60d32ec07ebb81c33495cbac0528184c9c9921224ab9284491af01014066216aefe086b47816c49eefdf325e2bda7701896ed5183cbb58a7732dd4dcf10948f41824f966b1b151189ac4aeec0bb4e9a8a6a848a3a5ab7f17e0094728ec979eb66c5ad1323efafc36e843f367175b2ee2d066558d861ac8e31c7b936c51ab89f622d761571ad222ff32ba7308ce5a99b87ee0b3dd568bb12361d292f957afbd58de543c47f3d9c0fc14da295260f958ff341655c36efbac4d3b635ba956819f47d2c6150597507e028aa720af75e010f0961beef9cbbb081c0647b879e81f45f82f0c5a5d41217474fc9161d2c5eff1e85eb74f0ff6e4494df47cdf394c2ccb8e78ba0d3c3e8c5f65322f9cb84c973cd685a146bb545ace4d943a10b85b9724db426c3fe275403d415d33a2235f28d3a0c94e62384470125508c4e7a3975a452a3fd668b251d67b654395f8854a2648ec52ad271f05c0b7c141c3860d84e01fec25cae7e9f3adee412dfd9ffb371f49bb380d1a0eca9dae93cc9c5b6fba00fa47c75aff9bd5215ed32ba239abefdaa9c48adce1060fbb25b885fe8d77ae4e01265965272b9836c9909b83ce9c44695410d114ecab5e30478255c2df4a4d660ae3b3bfcbb7c16790bf6d5da33ddf6c608f34fdc7bebcd8c9a56b41dd132a4e9fede515a20e6b9a8be2b3ed072ac6ce191ec481313d59da1075d3ffe73ca8505d9438015f9a27d259aaeb0d3238baccdaceb32184737e73762a704c0f06942c60a662d6758fc92d8ee205c9d118bff228b1e91b1c0ec22f30f982350c8f6fd2bdab6ae20d61463c8d285f1a026a9ad19f55fe48f899f692fd8fbf177047e60c85a8bf816ea5db8683ec570c708c359c2cbb8646ed32a21cf180f02effe061598a399bbfc192258f3c9e72fefa874a310183b69c723b572ec8d201ff7e2bb537cfc1e9834393b760d4bf7c33ea982c98f7a8cfa209ccd7174daa99e2acba33e31fc16ba2472ba65b6630c64829f7a57b48da4a084c51d28a4aad3a01caf4e9686282679554e291dfd8fc5fdf4aac6dc3061dcd98f2f89a1cbeedb445e65eda8327f87201c924171ad62450fd514835005091ab8dc5ce96d420940d47b689ba5913ac94c8271bc4fc7600d291fc85e6a41cf7c251d0414bd249942abd43ba3705ea57be43785d3037a32d8ae307d27e61bb1c62baf10345908a81a53e534e97666017100b84362555f830be5bd0bdde23e30a4a063cc200aad4182767c5cc235a776f27c6296372df5d4fb392515f0835f95387fef7060238e445635aa292e1905c415a1e4fc312d3930b67f984c952fd24216e10a348536f22158303416f784b851c73b68bfd7ac5587ba839dde4da7d9e58ce85b112c955ee33cc22b8e4f7a0c3103549a42273305e764f74acb9cf922ded5f489b639db6975dfaed56f8fa6fea6083f4c38a2f63ac597083e12bc82e94f80c5fad27545f9d2be630479fae40e403517745873526938df2b08596f61ae947aa5c86e4f48ea1e142afa426d38592010c65603bdcd6b4fd8131e70a885123afd9ef81d23840ad772c721faf23dbf5f31ec25418d69f3a758ed8760e1a71341339947f03aa9b80687dcd6164e93eca45e0bf9506f08e8cd9e1f87f84bf4b0b618b44d4ec92a3d9e084c022c032c6e1643695603e438f61445f65c53d6381e55b8953b845560f625223d7406bd5d7a5e3a3dcb57ecfd75c7a22f38f770ba5060b6361e82e196b4549aaa7193f3d64b63a189017d6a105f36132c7a90216f92479ada785fb503b035f75cea061f19e531670a2dc53c471761491e5858290f118b9038dc19aa27d0e463b1c3d150ee8efff9b538a5483bb8f63741027ed1bf71b2e0b9dc9171180d4ce8ebca56eff589d50ddfe3e18c4cd8a01c08c5c11eadaa3609aff5efa589ac369426890c28eb04996b1a21399ec0e64fe747ebb55b0736da081e391eaecf63347bd456231682e1ec9dc61b043ff209c52fa7952480906358c97b101e1d83a23b79725b2b789aaa3c9a503a2052436d163c48c92a021ede2431e2798a5cece110683b2b35ca3c498f5660e89dd9a4f4021aef3951e8eb9e2efe9df9fb628a3ef83e2e7c0b2d183152ed28dc55b0e77bbf9dcfb06227536b83e3810961a0e864a56bbd5598b92723a7f98fc6a97cfe3476a58fa97f25e15c0c22614eb30c3e786f917d254fecd160e8b708f8a3b60fbf8b68019001792ad40be844c6553a971ee5b852df41f8ede075078afc03c486ff624423b7674002c45fc997862dbce5b2a84ee17855681d43b26555d8a8d5e05f334ec249359f022a856f65fca67f8893a4b2ebc1d69969476bf17c66ac611808426f842db584b5176c8256245a4d2a101de029ea026cd9c0842f2f7ecdeb78c37a4e87f2f3b08ad597db826d6da45d1aefed6e43cb57c17e1000673406f4408439fdffac1cecdd8d8d289e61134791ab8bdef10587e5d58ffc3af7fe58f44b57dd17c626b7ffedce4a073a67957ffe75740b9febc39e8569aeed3994edaaa6fcaaabc8012bd0c77cdc4d25041c1a731356a4298656dca04f8639fdc92bb081f62a9eda6495fa4d42172ed58bda4a7a544a25e99593e7c48e7594e9c2307599dd321222e2f0a19b258b4f7fdab10774bcf6bf2e39c67135443b69f75cc274d446fbb6974991648998e3eb417f82c0a6c4b2f50293aa141e02244aa80b34d2287edaf5b55a93860b2c3825de1de7c47e54e13e29eb0dab1e8a153c7637a09715ca3c26b5eb08a0170fda34150f145787af57a0c7941bdeb51440b20cbbfc2e9aacf227d913aec29eab862e4975d2d65785001e4412b29fceca1b433392a1154156db2364258628592e59674b160bec9676d14f62e1af529a2a58aa315ac9e8ed04a1bcc4b9fde26ca9ab9156c3e1ca8bb764d5d6fddb681a56d34d25b2edc10e753e45dd7b7f427acf4e2433e92bb5ff8a34490ad591ae3b903f300b2b4cb1b639e209e64bcce7434862069e5b7318da4f48ef77cbac27d5331f0b162947af4bfb627658ad6fb7cd3166aca8ba68f0fd43d868ebe72672c5725fece3e5258280222cb495141cc4e819fa79010d45dbf11e373dc5075371768033b311d1d26ec3d0a914e5813b007f7e53acc293f49659ce192d9f0b4315f3d975201cbdd4f4a6cafe29fa0d232e094a83a6aeb33b84c24f6fdde9afad0819fa9d0294f5e6eadea9e4943bf99767a73b4c61778defcb356f46f50d76925fe8ed5d78d608f184a000c5693266922a283205db07af0f26f3cce20ff08011cf607cba12c56db8324ec5a55471e3dab8f5977f71ae490a7f7c9a442f4b656154c266fa46228ced771dcc91fa7fc2c57f7c85a779a790ab3b273a3571f5a9da4250f225ab9b7bf61a1584eb00f0a39c63a4a180441f2243cac2a29f8c0cbf8a0007537b5465d46aeaf717d2b2dd81d173b4ec912578ce3fafe6ca58065a28fbd1536daed43b3172efb923306a20c5b8eea6f1dfb38dc2e9572bba9fd74ebc026044aad85b098518c8dd5584b067306fdcaed7c4b69f9f8e7bb969cff0bd942131302d852bb1e3956403ad3525387d35b83442106b108cba554fbfd81e7f39a4a5f1cc67b29", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$inet_mptcp(0x2, 0x1, 0x106) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="c70759fca68be5fa7a809ab9133a33ddbedba102d1b8cbeb8769744a10c953e043e7742c19296cbeb9940a5099681edfbf02be5ecf6a3f5492f9fb13973d7073e47b70f4cff6c36325daca4f091e8274c7740521c6b19471c502be90a0291dc725c3f05cceea3ccca0db169596763410cdb163a8f772fa42d333004452173f619d7f4c84905394bb0cd41ffbec02a575cadf84f537e53b55d766d5270eaad45433ab38331c5b1a240c1b42e47147da152641738c93dc13ccd0067aecae91fbc2f6cfa6c152f5831819a1f3225de86d7f5e5f82b18ff8fc9169d50871392f6bb33e4dfadc399abf0c9c21cab16e353ea45e9502269e0e06702828c25f97d56a037c233ea04f0842c1151c96b40f33b21c82a0bf3d985fb39696b3187b52e89f18e48a9846489b440b4785be178289fe3b94ba0aa5b7a0529586cbd203a67fa78da1e64777bbdf3edf7721fb094b12a4537835986f173c6dc258ad0420fa05118bb38ab562fdf895121f2240e13515def0ec2a01a9b641782669b735f27ad8beddf47e862071cecfd996e6c0724ce5fad8cc5224e3fc98ee005e0256dad58a6da24fa2a84a18dc75609d18b5588180ad0224a9c9664235e9cb0a1adf69dbdfc96a8b51d4490ed93313b73596070696918d0ed8b0cee0b9f0bc41d7d9ec4b7294d7ca19befe0ef81c1509123d82f63a440fd40821304441261359d4db4f61c15e60d32ec07ebb81c33495cbac0528184c9c9921224ab9284491af01014066216aefe086b47816c49eefdf325e2bda7701896ed5183cbb58a7732dd4dcf10948f41824f966b1b151189ac4aeec0bb4e9a8a6a848a3a5ab7f17e0094728ec979eb66c5ad1323efafc36e843f367175b2ee2d066558d861ac8e31c7b936c51ab89f622d761571ad222ff32ba7308ce5a99b87ee0b3dd568bb12361d292f957afbd58de543c47f3d9c0fc14da295260f958ff341655c36efbac4d3b635ba956819f47d2c6150597507e028aa720af75e010f0961beef9cbbb081c0647b879e81f45f82f0c5a5d41217474fc9161d2c5eff1e85eb74f0ff6e4494df47cdf394c2ccb8e78ba0d3c3e8c5f65322f9cb84c973cd685a146bb545ace4d943a10b85b9724db426c3fe275403d415d33a2235f28d3a0c94e62384470125508c4e7a3975a452a3fd668b251d67b654395f8854a2648ec52ad271f05c0b7c141c3860d84e01fec25cae7e9f3adee412dfd9ffb371f49bb380d1a0eca9dae93cc9c5b6fba00fa47c75aff9bd5215ed32ba239abefdaa9c48adce1060fbb25b885fe8d77ae4e01265965272b9836c9909b83ce9c44695410d114ecab5e30478255c2df4a4d660ae3b3bfcbb7c16790bf6d5da33ddf6c608f34fdc7bebcd8c9a56b41dd132a4e9fede515a20e6b9a8be2b3ed072ac6ce191ec481313d59da1075d3ffe73ca8505d9438015f9a27d259aaeb0d3238baccdaceb32184737e73762a704c0f06942c60a662d6758fc92d8ee205c9d118bff228b1e91b1c0ec22f30f982350c8f6fd2bdab6ae20d61463c8d285f1a026a9ad19f55fe48f899f692fd8fbf177047e60c85a8bf816ea5db8683ec570c708c359c2cbb8646ed32a21cf180f02effe061598a399bbfc192258f3c9e72fefa874a310183b69c723b572ec8d201ff7e2bb537cfc1e9834393b760d4bf7c33ea982c98f7a8cfa209ccd7174daa99e2acba33e31fc16ba2472ba65b6630c64829f7a57b48da4a084c51d28a4aad3a01caf4e9686282679554e291dfd8fc5fdf4aac6dc3061dcd98f2f89a1cbeedb445e65eda8327f87201c924171ad62450fd514835005091ab8dc5ce96d420940d47b689ba5913ac94c8271bc4fc7600d291fc85e6a41cf7c251d0414bd249942abd43ba3705ea57be43785d3037a32d8ae307d27e61bb1c62baf10345908a81a53e534e97666017100b84362555f830be5bd0bdde23e30a4a063cc200aad4182767c5cc235a776f27c6296372df5d4fb392515f0835f95387fef7060238e445635aa292e1905c415a1e4fc312d3930b67f984c952fd24216e10a348536f22158303416f784b851c73b68bfd7ac5587ba839dde4da7d9e58ce85b112c955ee33cc22b8e4f7a0c3103549a42273305e764f74acb9cf922ded5f489b639db6975dfaed56f8fa6fea6083f4c38a2f63ac597083e12bc82e94f80c5fad27545f9d2be630479fae40e403517745873526938df2b08596f61ae947aa5c86e4f48ea1e142afa426d38592010c65603bdcd6b4fd8131e70a885123afd9ef81d23840ad772c721faf23dbf5f31ec25418d69f3a758ed8760e1a71341339947f03aa9b80687dcd6164e93eca45e0bf9506f08e8cd9e1f87f84bf4b0b618b44d4ec92a3d9e084c022c032c6e1643695603e438f61445f65c53d6381e55b8953b845560f625223d7406bd5d7a5e3a3dcb57ecfd75c7a22f38f770ba5060b6361e82e196b4549aaa7193f3d64b63a189017d6a105f36132c7a90216f92479ada785fb503b035f75cea061f19e531670a2dc53c471761491e5858290f118b9038dc19aa27d0e463b1c3d150ee8efff9b538a5483bb8f63741027ed1bf71b2e0b9dc9171180d4ce8ebca56eff589d50ddfe3e18c4cd8a01c08c5c11eadaa3609aff5efa589ac369426890c28eb04996b1a21399ec0e64fe747ebb55b0736da081e391eaecf63347bd456231682e1ec9dc61b043ff209c52fa7952480906358c97b101e1d83a23b79725b2b789aaa3c9a503a2052436d163c48c92a021ede2431e2798a5cece110683b2b35ca3c498f5660e89dd9a4f4021aef3951e8eb9e2efe9df9fb628a3ef83e2e7c0b2d183152ed28dc55b0e77bbf9dcfb06227536b83e3810961a0e864a56bbd5598b92723a7f98fc6a97cfe3476a58fa97f25e15c0c22614eb30c3e786f917d254fecd160e8b708f8a3b60fbf8b68019001792ad40be844c6553a971ee5b852df41f8ede075078afc03c486ff624423b7674002c45fc997862dbce5b2a84ee17855681d43b26555d8a8d5e05f334ec249359f022a856f65fca67f8893a4b2ebc1d69969476bf17c66ac611808426f842db584b5176c8256245a4d2a101de029ea026cd9c0842f2f7ecdeb78c37a4e87f2f3b08ad597db826d6da45d1aefed6e43cb57c17e1000673406f4408439fdffac1cecdd8d8d289e61134791ab8bdef10587e5d58ffc3af7fe58f44b57dd17c626b7ffedce4a073a67957ffe75740b9febc39e8569aeed3994edaaa6fcaaabc8012bd0c77cdc4d25041c1a731356a4298656dca04f8639fdc92bb081f62a9eda6495fa4d42172ed58bda4a7a544a25e99593e7c48e7594e9c2307599dd321222e2f0a19b258b4f7fdab10774bcf6bf2e39c67135443b69f75cc274d446fbb6974991648998e3eb417f82c0a6c4b2f50293aa141e02244aa80b34d2287edaf5b55a93860b2c3825de1de7c47e54e13e29eb0dab1e8a153c7637a09715ca3c26b5eb08a0170fda34150f145787af57a0c7941bdeb51440b20cbbfc2e9aacf227d913aec29eab862e4975d2d65785001e4412b29fceca1b433392a1154156db2364258628592e59674b160bec9676d14f62e1af529a2a58aa315ac9e8ed04a1bcc4b9fde26ca9ab9156c3e1ca8bb764d5d6fddb681a56d34d25b2edc10e753e45dd7b7f427acf4e2433e92bb5ff8a34490ad591ae3b903f300b2b4cb1b639e209e64bcce7434862069e5b7318da4f48ef77cbac27d5331f0b162947af4bfb627658ad6fb7cd3166aca8ba68f0fd43d868ebe72672c5725fece3e5258280222cb495141cc4e819fa79010d45dbf11e373dc5075371768033b311d1d26ec3d0a914e5813b007f7e53acc293f49659ce192d9f0b4315f3d975201cbdd4f4a6cafe29fa0d232e094a83a6aeb33b84c24f6fdde9afad0819fa9d0294f5e6eadea9e4943bf99767a73b4c61778defcb356f46f50d76925fe8ed5d78d608f184a000c5693266922a283205db07af0f26f3cce20ff08011cf607cba12c56db8324ec5a55471e3dab8f5977f71ae490a7f7c9a442f4b656154c266fa46228ced771dcc91fa7fc2c57f7c85a779a790ab3b273a3571f5a9da4250f225ab9b7bf61a1584eb00f0a39c63a4a180441f2243cac2a29f8c0cbf8a0007537b5465d46aeaf717d2b2dd81d173b4ec912578ce3fafe6ca58065a28fbd1536daed43b3172efb923306a20c5b8eea6f1dfb38dc2e9572bba9fd74ebc026044aad85b098518c8dd5584b067306fdcaed7c4b69f9f8e7bb969cff0bd942131302d852bb1e3956403ad3525387d35b83442106b108cba554fbfd81e7f39a4a5f1cc67b29", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r1 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0xe6db5000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r1 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0xe6db5000) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) syz_open_dev$loop(0x0, 0xffff, 0x14f600) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="c70759fca68be5fa7a809ab9133a33ddbedba102d1b8cbeb8769744a10c953e043e7742c19296cbeb9940a5099681edfbf02be5ecf6a3f5492f9fb13973d7073e47b70f4cff6c36325daca4f091e8274c7740521c6b19471c502be90a0291dc725c3f05cceea3ccca0db169596763410cdb163a8f772fa42d333004452173f619d7f4c84905394bb0cd41ffbec02a575cadf84f537e53b55d766d5270eaad45433ab38331c5b1a240c1b42e47147da152641738c93dc13ccd0067aecae91fbc2f6cfa6c152f5831819a1f3225de86d7f5e5f82b18ff8fc9169d50871392f6bb33e4dfadc399abf0c9c21cab16e353ea45e9502269e0e06702828c25f97d56a037c233ea04f0842c1151c96b40f33b21c82a0bf3d985fb39696b3187b52e89f18e48a9846489b440b4785be178289fe3b94ba0aa5b7a0529586cbd203a67fa78da1e64777bbdf3edf7721fb094b12a4537835986f173c6dc258ad0420fa05118bb38ab562fdf895121f2240e13515def0ec2a01a9b641782669b735f27ad8beddf47e862071cecfd996e6c0724ce5fad8cc5224e3fc98ee005e0256dad58a6da24fa2a84a18dc75609d18b5588180ad0224a9c9664235e9cb0a1adf69dbdfc96a8b51d4490ed93313b73596070696918d0ed8b0cee0b9f0bc41d7d9ec4b7294d7ca19befe0ef81c1509123d82f63a440fd40821304441261359d4db4f61c15e60d32ec07ebb81c33495cbac0528184c9c9921224ab9284491af01014066216aefe086b47816c49eefdf325e2bda7701896ed5183cbb58a7732dd4dcf10948f41824f966b1b151189ac4aeec0bb4e9a8a6a848a3a5ab7f17e0094728ec979eb66c5ad1323efafc36e843f367175b2ee2d066558d861ac8e31c7b936c51ab89f622d761571ad222ff32ba7308ce5a99b87ee0b3dd568bb12361d292f957afbd58de543c47f3d9c0fc14da295260f958ff341655c36efbac4d3b635ba956819f47d2c6150597507e028aa720af75e010f0961beef9cbbb081c0647b879e81f45f82f0c5a5d41217474fc9161d2c5eff1e85eb74f0ff6e4494df47cdf394c2ccb8e78ba0d3c3e8c5f65322f9cb84c973cd685a146bb545ace4d943a10b85b9724db426c3fe275403d415d33a2235f28d3a0c94e62384470125508c4e7a3975a452a3fd668b251d67b654395f8854a2648ec52ad271f05c0b7c141c3860d84e01fec25cae7e9f3adee412dfd9ffb371f49bb380d1a0eca9dae93cc9c5b6fba00fa47c75aff9bd5215ed32ba239abefdaa9c48adce1060fbb25b885fe8d77ae4e01265965272b9836c9909b83ce9c44695410d114ecab5e30478255c2df4a4d660ae3b3bfcbb7c16790bf6d5da33ddf6c608f34fdc7bebcd8c9a56b41dd132a4e9fede515a20e6b9a8be2b3ed072ac6ce191ec481313d59da1075d3ffe73ca8505d9438015f9a27d259aaeb0d3238baccdaceb32184737e73762a704c0f06942c60a662d6758fc92d8ee205c9d118bff228b1e91b1c0ec22f30f982350c8f6fd2bdab6ae20d61463c8d285f1a026a9ad19f55fe48f899f692fd8fbf177047e60c85a8bf816ea5db8683ec570c708c359c2cbb8646ed32a21cf180f02effe061598a399bbfc192258f3c9e72fefa874a310183b69c723b572ec8d201ff7e2bb537cfc1e9834393b760d4bf7c33ea982c98f7a8cfa209ccd7174daa99e2acba33e31fc16ba2472ba65b6630c64829f7a57b48da4a084c51d28a4aad3a01caf4e9686282679554e291dfd8fc5fdf4aac6dc3061dcd98f2f89a1cbeedb445e65eda8327f87201c924171ad62450fd514835005091ab8dc5ce96d420940d47b689ba5913ac94c8271bc4fc7600d291fc85e6a41cf7c251d0414bd249942abd43ba3705ea57be43785d3037a32d8ae307d27e61bb1c62baf10345908a81a53e534e97666017100b84362555f830be5bd0bdde23e30a4a063cc200aad4182767c5cc235a776f27c6296372df5d4fb392515f0835f95387fef7060238e445635aa292e1905c415a1e4fc312d3930b67f984c952fd24216e10a348536f22158303416f784b851c73b68bfd7ac5587ba839dde4da7d9e58ce85b112c955ee33cc22b8e4f7a0c3103549a42273305e764f74acb9cf922ded5f489b639db6975dfaed56f8fa6fea6083f4c38a2f63ac597083e12bc82e94f80c5fad27545f9d2be630479fae40e403517745873526938df2b08596f61ae947aa5c86e4f48ea1e142afa426d38592010c65603bdcd6b4fd8131e70a885123afd9ef81d23840ad772c721faf23dbf5f31ec25418d69f3a758ed8760e1a71341339947f03aa9b80687dcd6164e93eca45e0bf9506f08e8cd9e1f87f84bf4b0b618b44d4ec92a3d9e084c022c032c6e1643695603e438f61445f65c53d6381e55b8953b845560f625223d7406bd5d7a5e3a3dcb57ecfd75c7a22f38f770ba5060b6361e82e196b4549aaa7193f3d64b63a189017d6a105f36132c7a90216f92479ada785fb503b035f75cea061f19e531670a2dc53c471761491e5858290f118b9038dc19aa27d0e463b1c3d150ee8efff9b538a5483bb8f63741027ed1bf71b2e0b9dc9171180d4ce8ebca56eff589d50ddfe3e18c4cd8a01c08c5c11eadaa3609aff5efa589ac369426890c28eb04996b1a21399ec0e64fe747ebb55b0736da081e391eaecf63347bd456231682e1ec9dc61b043ff209c52fa7952480906358c97b101e1d83a23b79725b2b789aaa3c9a503a2052436d163c48c92a021ede2431e2798a5cece110683b2b35ca3c498f5660e89dd9a4f4021aef3951e8eb9e2efe9df9fb628a3ef83e2e7c0b2d183152ed28dc55b0e77bbf9dcfb06227536b83e3810961a0e864a56bbd5598b92723a7f98fc6a97cfe3476a58fa97f25e15c0c22614eb30c3e786f917d254fecd160e8b708f8a3b60fbf8b68019001792ad40be844c6553a971ee5b852df41f8ede075078afc03c486ff624423b7674002c45fc997862dbce5b2a84ee17855681d43b26555d8a8d5e05f334ec249359f022a856f65fca67f8893a4b2ebc1d69969476bf17c66ac611808426f842db584b5176c8256245a4d2a101de029ea026cd9c0842f2f7ecdeb78c37a4e87f2f3b08ad597db826d6da45d1aefed6e43cb57c17e1000673406f4408439fdffac1cecdd8d8d289e61134791ab8bdef10587e5d58ffc3af7fe58f44b57dd17c626b7ffedce4a073a67957ffe75740b9febc39e8569aeed3994edaaa6fcaaabc8012bd0c77cdc4d25041c1a731356a4298656dca04f8639fdc92bb081f62a9eda6495fa4d42172ed58bda4a7a544a25e99593e7c48e7594e9c2307599dd321222e2f0a19b258b4f7fdab10774bcf6bf2e39c67135443b69f75cc274d446fbb6974991648998e3eb417f82c0a6c4b2f50293aa141e02244aa80b34d2287edaf5b55a93860b2c3825de1de7c47e54e13e29eb0dab1e8a153c7637a09715ca3c26b5eb08a0170fda34150f145787af57a0c7941bdeb51440b20cbbfc2e9aacf227d913aec29eab862e4975d2d65785001e4412b29fceca1b433392a1154156db2364258628592e59674b160bec9676d14f62e1af529a2a58aa315ac9e8ed04a1bcc4b9fde26ca9ab9156c3e1ca8bb764d5d6fddb681a56d34d25b2edc10e753e45dd7b7f427acf4e2433e92bb5ff8a34490ad591ae3b903f300b2b4cb1b639e209e64bcce7434862069e5b7318da4f48ef77cbac27d5331f0b162947af4bfb627658ad6fb7cd3166aca8ba68f0fd43d868ebe72672c5725fece3e5258280222cb495141cc4e819fa79010d45dbf11e373dc5075371768033b311d1d26ec3d0a914e5813b007f7e53acc293f49659ce192d9f0b4315f3d975201cbdd4f4a6cafe29fa0d232e094a83a6aeb33b84c24f6fdde9afad0819fa9d0294f5e6eadea9e4943bf99767a73b4c61778defcb356f46f50d76925fe8ed5d78d608f184a000c5693266922a283205db07af0f26f3cce20ff08011cf607cba12c56db8324ec5a55471e3dab8f5977f71ae490a7f7c9a442f4b656154c266fa46228ced771dcc91fa7fc2c57f7c85a779a790ab3b273a3571f5a9da4250f225ab9b7bf61a1584eb00f0a39c63a4a180441f2243cac2a29f8c0cbf8a0007537b5465d46aeaf717d2b2dd81d173b4ec912578ce3fafe6ca58065a28fbd1536daed43b3172efb923306a20c5b8eea6f1dfb38dc2e9572bba9fd74ebc026044aad85b098518c8dd5584b067306fdcaed7c4b69f9f8e7bb969cff0bd942131302d852bb1e3956403ad3525387d35b83442106b108cba554fbfd81e7f39a4a5f1cc67b29", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30] detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="c70759fca68be5fa7a809ab9133a33ddbedba102d1b8cbeb8769744a10c953e043e7742c19296cbeb9940a5099681edfbf02be5ecf6a3f5492f9fb13973d7073e47b70f4cff6c36325daca4f091e8274c7740521c6b19471c502be90a0291dc725c3f05cceea3ccca0db169596763410cdb163a8f772fa42d333004452173f619d7f4c84905394bb0cd41ffbec02a575cadf84f537e53b55d766d5270eaad45433ab38331c5b1a240c1b42e47147da152641738c93dc13ccd0067aecae91fbc2f6cfa6c152f5831819a1f3225de86d7f5e5f82b18ff8fc9169d50871392f6bb33e4dfadc399abf0c9c21cab16e353ea45e9502269e0e06702828c25f97d56a037c233ea04f0842c1151c96b40f33b21c82a0bf3d985fb39696b3187b52e89f18e48a9846489b440b4785be178289fe3b94ba0aa5b7a0529586cbd203a67fa78da1e64777bbdf3edf7721fb094b12a4537835986f173c6dc258ad0420fa05118bb38ab562fdf895121f2240e13515def0ec2a01a9b641782669b735f27ad8beddf47e862071cecfd996e6c0724ce5fad8cc5224e3fc98ee005e0256dad58a6da24fa2a84a18dc75609d18b5588180ad0224a9c9664235e9cb0a1adf69dbdfc96a8b51d4490ed93313b73596070696918d0ed8b0cee0b9f0bc41d7d9ec4b7294d7ca19befe0ef81c1509123d82f63a440fd40821304441261359d4db4f61c15e60d32ec07ebb81c33495cbac0528184c9c9921224ab9284491af01014066216aefe086b47816c49eefdf325e2bda7701896ed5183cbb58a7732dd4dcf10948f41824f966b1b151189ac4aeec0bb4e9a8a6a848a3a5ab7f17e0094728ec979eb66c5ad1323efafc36e843f367175b2ee2d066558d861ac8e31c7b936c51ab89f622d761571ad222ff32ba7308ce5a99b87ee0b3dd568bb12361d292f957afbd58de543c47f3d9c0fc14da295260f958ff341655c36efbac4d3b635ba956819f47d2c6150597507e028aa720af75e010f0961beef9cbbb081c0647b879e81f45f82f0c5a5d41217474fc9161d2c5eff1e85eb74f0ff6e4494df47cdf394c2ccb8e78ba0d3c3e8c5f65322f9cb84c973cd685a146bb545ace4d943a10b85b9724db426c3fe275403d415d33a2235f28d3a0c94e62384470125508c4e7a3975a452a3fd668b251d67b654395f8854a2648ec52ad271f05c0b7c141c3860d84e01fec25cae7e9f3adee412dfd9ffb371f49bb380d1a0eca9dae93cc9c5b6fba00fa47c75aff9bd5215ed32ba239abefdaa9c48adce1060fbb25b885fe8d77ae4e01265965272b9836c9909b83ce9c44695410d114ecab5e30478255c2df4a4d660ae3b3bfcbb7c16790bf6d5da33ddf6c608f34fdc7bebcd8c9a56b41dd132a4e9fede515a20e6b9a8be2b3ed072ac6ce191ec481313d59da1075d3ffe73ca8505d9438015f9a27d259aaeb0d3238baccdaceb32184737e73762a704c0f06942c60a662d6758fc92d8ee205c9d118bff228b1e91b1c0ec22f30f982350c8f6fd2bdab6ae20d61463c8d285f1a026a9ad19f55fe48f899f692fd8fbf177047e60c85a8bf816ea5db8683ec570c708c359c2cbb8646ed32a21cf180f02effe061598a399bbfc192258f3c9e72fefa874a310183b69c723b572ec8d201ff7e2bb537cfc1e9834393b760d4bf7c33ea982c98f7a8cfa209ccd7174daa99e2acba33e31fc16ba2472ba65b6630c64829f7a57b48da4a084c51d28a4aad3a01caf4e9686282679554e291dfd8fc5fdf4aac6dc3061dcd98f2f89a1cbeedb445e65eda8327f87201c924171ad62450fd514835005091ab8dc5ce96d420940d47b689ba5913ac94c8271bc4fc7600d291fc85e6a41cf7c251d0414bd249942abd43ba3705ea57be43785d3037a32d8ae307d27e61bb1c62baf10345908a81a53e534e97666017100b84362555f830be5bd0bdde23e30a4a063cc200aad4182767c5cc235a776f27c6296372df5d4fb392515f0835f95387fef7060238e445635aa292e1905c415a1e4fc312d3930b67f984c952fd24216e10a348536f22158303416f784b851c73b68bfd7ac5587ba839dde4da7d9e58ce85b112c955ee33cc22b8e4f7a0c3103549a42273305e764f74acb9cf922ded5f489b639db6975dfaed56f8fa6fea6083f4c38a2f63ac597083e12bc82e94f80c5fad27545f9d2be630479fae40e403517745873526938df2b08596f61ae947aa5c86e4f48ea1e142afa426d38592010c65603bdcd6b4fd8131e70a885123afd9ef81d23840ad772c721faf23dbf5f31ec25418d69f3a758ed8760e1a71341339947f03aa9b80687dcd6164e93eca45e0bf9506f08e8cd9e1f87f84bf4b0b618b44d4ec92a3d9e084c022c032c6e1643695603e438f61445f65c53d6381e55b8953b845560f625223d7406bd5d7a5e3a3dcb57ecfd75c7a22f38f770ba5060b6361e82e196b4549aaa7193f3d64b63a189017d6a105f36132c7a90216f92479ada785fb503b035f75cea061f19e531670a2dc53c471761491e5858290f118b9038dc19aa27d0e463b1c3d150ee8efff9b538a5483bb8f63741027ed1bf71b2e0b9dc9171180d4ce8ebca56eff589d50ddfe3e18c4cd8a01c08c5c11eadaa3609aff5efa589ac369426890c28eb04996b1a21399ec0e64fe747ebb55b0736da081e391eaecf63347bd456231682e1ec9dc61b043ff209c52fa7952480906358c97b101e1d83a23b79725b2b789aaa3c9a503a2052436d163c48c92a021ede2431e2798a5cece110683b2b35ca3c498f5660e89dd9a4f4021aef3951e8eb9e2efe9df9fb628a3ef83e2e7c0b2d183152ed28dc55b0e77bbf9dcfb06227536b83e3810961a0e864a56bbd5598b92723a7f98fc6a97cfe3476a58fa97f25e15c0c22614eb30c3e786f917d254fecd160e8b708f8a3b60fbf8b68019001792ad40be844c6553a971ee5b852df41f8ede075078afc03c486ff624423b7674002c45fc997862dbce5b2a84ee17855681d43b26555d8a8d5e05f334ec249359f022a856f65fca67f8893a4b2ebc1d69969476bf17c66ac611808426f842db584b5176c8256245a4d2a101de029ea026cd9c0842f2f7ecdeb78c37a4e87f2f3b08ad597db826d6da45d1aefed6e43cb57c17e1000673406f4408439fdffac1cecdd8d8d289e61134791ab8bdef10587e5d58ffc3af7fe58f44b57dd17c626b7ffedce4a073a67957ffe75740b9febc39e8569aeed3994edaaa6fcaaabc8012bd0c77cdc4d25041c1a731356a4298656dca04f8639fdc92bb081f62a9eda6495fa4d42172ed58bda4a7a544a25e99593e7c48e7594e9c2307599dd321222e2f0a19b258b4f7fdab10774bcf6bf2e39c67135443b69f75cc274d446fbb6974991648998e3eb417f82c0a6c4b2f50293aa141e02244aa80b34d2287edaf5b55a93860b2c3825de1de7c47e54e13e29eb0dab1e8a153c7637a09715ca3c26b5eb08a0170fda34150f145787af57a0c7941bdeb51440b20cbbfc2e9aacf227d913aec29eab862e4975d2d65785001e4412b29fceca1b433392a1154156db2364258628592e59674b160bec9676d14f62e1af529a2a58aa315ac9e8ed04a1bcc4b9fde26ca9ab9156c3e1ca8bb764d5d6fddb681a56d34d25b2edc10e753e45dd7b7f427acf4e2433e92bb5ff8a34490ad591ae3b903f300b2b4cb1b639e209e64bcce7434862069e5b7318da4f48ef77cbac27d5331f0b162947af4bfb627658ad6fb7cd3166aca8ba68f0fd43d868ebe72672c5725fece3e5258280222cb495141cc4e819fa79010d45dbf11e373dc5075371768033b311d1d26ec3d0a914e5813b007f7e53acc293f49659ce192d9f0b4315f3d975201cbdd4f4a6cafe29fa0d232e094a83a6aeb33b84c24f6fdde9afad0819fa9d0294f5e6eadea9e4943bf99767a73b4c61778defcb356f46f50d76925fe8ed5d78d608f184a000c5693266922a283205db07af0f26f3cce20ff08011cf607cba12c56db8324ec5a55471e3dab8f5977f71ae490a7f7c9a442f4b656154c266fa46228ced771dcc91fa7fc2c57f7c85a779a790ab3b273a3571f5a9da4250f225ab9b7bf61a1584eb00f0a39c63a4a180441f2243cac2a29f8c0cbf8a0007537b5465d46aeaf717d2b2dd81d173b4ec912578ce3fafe6ca58065a28fbd1536daed43b3172efb923306a20c5b8eea6f1dfb38dc2e9572bba9fd74ebc026044aad85b098518c8dd5584b067306fdcaed7c4b69f9f8e7bb969cff0bd942131302d852bb1e3956403ad3525387d35b83442106b108cba554fbfd81e7f39a4a5f1cc67b29", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 30] detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 30] detailed listing: executing program 0: executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="c70759fca68be5fa7a809ab9133a33ddbedba102d1b8cbeb8769744a10c953e043e7742c19296cbeb9940a5099681edfbf02be5ecf6a3f5492f9fb13973d7073e47b70f4cff6c36325daca4f091e8274c7740521c6b19471c502be90a0291dc725c3f05cceea3ccca0db169596763410cdb163a8f772fa42d333004452173f619d7f4c84905394bb0cd41ffbec02a575cadf84f537e53b55d766d5270eaad45433ab38331c5b1a240c1b42e47147da152641738c93dc13ccd0067aecae91fbc2f6cfa6c152f5831819a1f3225de86d7f5e5f82b18ff8fc9169d50871392f6bb33e4dfadc399abf0c9c21cab16e353ea45e9502269e0e06702828c25f97d56a037c233ea04f0842c1151c96b40f33b21c82a0bf3d985fb39696b3187b52e89f18e48a9846489b440b4785be178289fe3b94ba0aa5b7a0529586cbd203a67fa78da1e64777bbdf3edf7721fb094b12a4537835986f173c6dc258ad0420fa05118bb38ab562fdf895121f2240e13515def0ec2a01a9b641782669b735f27ad8beddf47e862071cecfd996e6c0724ce5fad8cc5224e3fc98ee005e0256dad58a6da24fa2a84a18dc75609d18b5588180ad0224a9c9664235e9cb0a1adf69dbdfc96a8b51d4490ed93313b73596070696918d0ed8b0cee0b9f0bc41d7d9ec4b7294d7ca19befe0ef81c1509123d82f63a440fd40821304441261359d4db4f61c15e60d32ec07ebb81c33495cbac0528184c9c9921224ab9284491af01014066216aefe086b47816c49eefdf325e2bda7701896ed5183cbb58a7732dd4dcf10948f41824f966b1b151189ac4aeec0bb4e9a8a6a848a3a5ab7f17e0094728ec979eb66c5ad1323efafc36e843f367175b2ee2d066558d861ac8e31c7b936c51ab89f622d761571ad222ff32ba7308ce5a99b87ee0b3dd568bb12361d292f957afbd58de543c47f3d9c0fc14da295260f958ff341655c36efbac4d3b635ba956819f47d2c6150597507e028aa720af75e010f0961beef9cbbb081c0647b879e81f45f82f0c5a5d41217474fc9161d2c5eff1e85eb74f0ff6e4494df47cdf394c2ccb8e78ba0d3c3e8c5f65322f9cb84c973cd685a146bb545ace4d943a10b85b9724db426c3fe275403d415d33a2235f28d3a0c94e62384470125508c4e7a3975a452a3fd668b251d67b654395f8854a2648ec52ad271f05c0b7c141c3860d84e01fec25cae7e9f3adee412dfd9ffb371f49bb380d1a0eca9dae93cc9c5b6fba00fa47c75aff9bd5215ed32ba239abefdaa9c48adce1060fbb25b885fe8d77ae4e01265965272b9836c9909b83ce9c44695410d114ecab5e30478255c2df4a4d660ae3b3bfcbb7c16790bf6d5da33ddf6c608f34fdc7bebcd8c9a56b41dd132a4e9fede515a20e6b9a8be2b3ed072ac6ce191ec481313d59da1075d3ffe73ca8505d9438015f9a27d259aaeb0d3238baccdaceb32184737e73762a704c0f06942c60a662d6758fc92d8ee205c9d118bff228b1e91b1c0ec22f30f982350c8f6fd2bdab6ae20d61463c8d285f1a026a9ad19f55fe48f899f692fd8fbf177047e60c85a8bf816ea5db8683ec570c708c359c2cbb8646ed32a21cf180f02effe061598a399bbfc192258f3c9e72fefa874a310183b69c723b572ec8d201ff7e2bb537cfc1e9834393b760d4bf7c33ea982c98f7a8cfa209ccd7174daa99e2acba33e31fc16ba2472ba65b6630c64829f7a57b48da4a084c51d28a4aad3a01caf4e9686282679554e291dfd8fc5fdf4aac6dc3061dcd98f2f89a1cbeedb445e65eda8327f87201c924171ad62450fd514835005091ab8dc5ce96d420940d47b689ba5913ac94c8271bc4fc7600d291fc85e6a41cf7c251d0414bd249942abd43ba3705ea57be43785d3037a32d8ae307d27e61bb1c62baf10345908a81a53e534e97666017100b84362555f830be5bd0bdde23e30a4a063cc200aad4182767c5cc235a776f27c6296372df5d4fb392515f0835f95387fef7060238e445635aa292e1905c415a1e4fc312d3930b67f984c952fd24216e10a348536f22158303416f784b851c73b68bfd7ac5587ba839dde4da7d9e58ce85b112c955ee33cc22b8e4f7a0c3103549a42273305e764f74acb9cf922ded5f489b639db6975dfaed56f8fa6fea6083f4c38a2f63ac597083e12bc82e94f80c5fad27545f9d2be630479fae40e403517745873526938df2b08596f61ae947aa5c86e4f48ea1e142afa426d38592010c65603bdcd6b4fd8131e70a885123afd9ef81d23840ad772c721faf23dbf5f31ec25418d69f3a758ed8760e1a71341339947f03aa9b80687dcd6164e93eca45e0bf9506f08e8cd9e1f87f84bf4b0b618b44d4ec92a3d9e084c022c032c6e1643695603e438f61445f65c53d6381e55b8953b845560f625223d7406bd5d7a5e3a3dcb57ecfd75c7a22f38f770ba5060b6361e82e196b4549aaa7193f3d64b63a189017d6a105f36132c7a90216f92479ada785fb503b035f75cea061f19e531670a2dc53c471761491e5858290f118b9038dc19aa27d0e463b1c3d150ee8efff9b538a5483bb8f63741027ed1bf71b2e0b9dc9171180d4ce8ebca56eff589d50ddfe3e18c4cd8a01c08c5c11eadaa3609aff5efa589ac369426890c28eb04996b1a21399ec0e64fe747ebb55b0736da081e391eaecf63347bd456231682e1ec9dc61b043ff209c52fa7952480906358c97b101e1d83a23b79725b2b789aaa3c9a503a2052436d163c48c92a021ede2431e2798a5cece110683b2b35ca3c498f5660e89dd9a4f4021aef3951e8eb9e2efe9df9fb628a3ef83e2e7c0b2d183152ed28dc55b0e77bbf9dcfb06227536b83e3810961a0e864a56bbd5598b92723a7f98fc6a97cfe3476a58fa97f25e15c0c22614eb30c3e786f917d254fecd160e8b708f8a3b60fbf8b68019001792ad40be844c6553a971ee5b852df41f8ede075078afc03c486ff624423b7674002c45fc997862dbce5b2a84ee17855681d43b26555d8a8d5e05f334ec249359f022a856f65fca67f8893a4b2ebc1d69969476bf17c66ac611808426f842db584b5176c8256245a4d2a101de029ea026cd9c0842f2f7ecdeb78c37a4e87f2f3b08ad597db826d6da45d1aefed6e43cb57c17e1000673406f4408439fdffac1cecdd8d8d289e61134791ab8bdef10587e5d58ffc3af7fe58f44b57dd17c626b7ffedce4a073a67957ffe75740b9febc39e8569aeed3994edaaa6fcaaabc8012bd0c77cdc4d25041c1a731356a4298656dca04f8639fdc92bb081f62a9eda6495fa4d42172ed58bda4a7a544a25e99593e7c48e7594e9c2307599dd321222e2f0a19b258b4f7fdab10774bcf6bf2e39c67135443b69f75cc274d446fbb6974991648998e3eb417f82c0a6c4b2f50293aa141e02244aa80b34d2287edaf5b55a93860b2c3825de1de7c47e54e13e29eb0dab1e8a153c7637a09715ca3c26b5eb08a0170fda34150f145787af57a0c7941bdeb51440b20cbbfc2e9aacf227d913aec29eab862e4975d2d65785001e4412b29fceca1b433392a1154156db2364258628592e59674b160bec9676d14f62e1af529a2a58aa315ac9e8ed04a1bcc4b9fde26ca9ab9156c3e1ca8bb764d5d6fddb681a56d34d25b2edc10e753e45dd7b7f427acf4e2433e92bb5ff8a34490ad591ae3b903f300b2b4cb1b639e209e64bcce7434862069e5b7318da4f48ef77cbac27d5331f0b162947af4bfb627658ad6fb7cd3166aca8ba68f0fd43d868ebe72672c5725fece3e5258280222cb495141cc4e819fa79010d45dbf11e373dc5075371768033b311d1d26ec3d0a914e5813b007f7e53acc293f49659ce192d9f0b4315f3d975201cbdd4f4a6cafe29fa0d232e094a83a6aeb33b84c24f6fdde9afad0819fa9d0294f5e6eadea9e4943bf99767a73b4c61778defcb356f46f50d76925fe8ed5d78d608f184a000c5693266922a283205db07af0f26f3cce20ff08011cf607cba12c56db8324ec5a55471e3dab8f5977f71ae490a7f7c9a442f4b656154c266fa46228ced771dcc91fa7fc2c57f7c85a779a790ab3b273a3571f5a9da4250f225ab9b7bf61a1584eb00f0a39c63a4a180441f2243cac2a29f8c0cbf8a0007537b5465d46aeaf717d2b2dd81d173b4ec912578ce3fafe6ca58065a28fbd1536daed43b3172efb923306a20c5b8eea6f1dfb38dc2e9572bba9fd74ebc026044aad85b098518c8dd5584b067306fdcaed7c4b69f9f8e7bb969cff0bd942131302d852bb1e3956403ad3525387d35b83442106b108cba554fbfd81e7f39a4a5f1cc67b29", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open minimized 23 calls -> 0 calls minimizing program #1 before concatenation testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 29] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 28] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xf82f, 0x700, 0xd129, 0xff, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0xa, "39311503343eec63"}, {0x2, 0x5, "f4de5c"}, {0x7, 0x9, "b5723a0f5c6deb"}, {0x5, 0x2}, {0x0, 0x10, "2ca9d0d0e0c790878b049b841429"}, {0x0, 0xb, "71bd0d466b3d1c4382"}, {0x5, 0xe, "6d3cc263a15dc837986d8a50"}]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0x3, [0x7, 0xd3c, 0x4, 0x4, 0x6, 0x3, 0xffffffb4]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010100]}, @ssrr={0x89, 0x1f, 0x18, [@multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @broadcast, @remote]}, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x8, [{@local, 0xfff}, {@remote, 0x6}, {@loopback, 0x9}, {@remote, 0x7f}]}]}}}}}) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 27] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="01002cbd7000ffdbdf250400000014c11874732162cf2cb9"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 26] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 25] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 24] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 23] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 22] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 21] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f00000003c0)="94a3fc8624ae1afc5124256072f4c221185c7c55b9e47878ed340602274e95363f8761a089488d68b370c66f382fd1954fb394b4bb4197fe5641bc6d64989f136b0fc7810b467b1ad1c0c82d089da154e2865c0a", 0x54}, {0x0}, {&(0x7f0000000240)="078c534d37b984b05329212fd02b7b95e2b52e25a38343c881773296a4ff0c18d93c4feeebe5aab211363cc30413", 0x2e}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f0000001880)="1d9ce5f6d4ee9cf38b0ca02c980d39e015e3c871c9af8ff9124d2daf0646881cb206ddfa69ce94f935e55c70628f8cc136ecfc77643604894d959c3e34652b27362ba3ebb8f9570bf3f0de44722bd08967c9af7e75865453bc6c5e484b2b0aeab6b7c03f85b22e00ae97f4712d636df7ae08b9ac91c17027ae593e33617ffb4b93", 0x81}], 0x5) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 20] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 19] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 18] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 17] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 16] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 15] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 14] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) unshare(0x4000400) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 13] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, 0xee00) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 12] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x40, &(0x7f0000000500)) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 11] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x148) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 10] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 9] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 9] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program crashed: KASAN: use-after-free Read in dvb_frontend_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 8] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 8] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 8] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 8] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 8] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 8] detailed listing: executing program 2: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7] detailed listing: executing program 2: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6] detailed listing: executing program 2: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program crashed: KASAN: use-after-free Read in dvb_device_open minimized 30 calls -> 6 calls testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program crashed: KASAN: use-after-free Read in dvb_device_open bisect: concatenation succeeded found reproducer with 6 syscalls minimizing guilty program testing program (duration=1m16.28000199s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) program did not crash testing program (duration=1m16.28000199s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-syz_open_dev$dvb_frontend detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program did not crash testing program (duration=1m16.28000199s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-writev-syz_open_dev$dvb_frontend detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program did not crash testing program (duration=1m16.28000199s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program did not crash testing program (duration=1m16.28000199s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program did not crash testing program (duration=1m16.28000199s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend detailed listing: executing program 0: sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program did not crash testing program (duration=1m16.28000199s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend detailed listing: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program did not crash testing program (duration=1m16.28000199s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program did not crash testing program (duration=1m16.28000199s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program did not crash testing program (duration=1m16.28000199s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program did not crash testing program (duration=1m16.28000199s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program did not crash testing program (duration=1m16.28000199s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program did not crash testing program (duration=1m16.28000199s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program did not crash testing program (duration=1m16.28000199s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) program did not crash extracting C reproducer testing compiled C program (duration=1m16.28000199s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend program crashed: KASAN: use-after-free Read in dvb_frontend_open simplifying C reproducer testing compiled C program (duration=1m16.28000199s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend program crashed: KASAN: use-after-free Read in dvb_device_open testing compiled C program (duration=1m16.28000199s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend program did not crash testing compiled C program (duration=1m16.28000199s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend program crashed: KASAN: use-after-free Read in dvb_device_open testing compiled C program (duration=1m16.28000199s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend program crashed: KASAN: use-after-free Read in dvb_device_open testing compiled C program (duration=1m16.28000199s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend program crashed: KASAN: use-after-free Read in dvb_device_open testing compiled C program (duration=1m16.28000199s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend program crashed: KASAN: use-after-free Read in dvb_device_open testing compiled C program (duration=1m16.28000199s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend program crashed: KASAN: use-after-free Read in dvb_device_open testing program (duration=1m16.28000199s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program crashed: KASAN: use-after-free Read in dvb_device_open validation run: crashed=true testing program (duration=1m16.28000199s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program crashed: KASAN: use-after-free Read in dvb_device_open validation run: crashed=true testing program (duration=1m16.28000199s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_open_dev$dvb_frontend detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) program crashed: KASAN: use-after-free Read in dvb_device_open validation run: crashed=true reproducing took 3h32m3.321856485s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 drivers/media/dvb-core/dvbdev.c:109 Read of size 8 at addr ffff8880279e1c18 by task syz.0.66/4466 CPU: 0 PID: 4466 Comm: syz.0.66 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106 print_address_description+0x60/0x2d0 mm/kasan/report.c:248 __kasan_report mm/kasan/report.c:434 [inline] kasan_report+0xdf/0x130 mm/kasan/report.c:451 dvb_device_open+0xc5/0x360 drivers/media/dvb-core/dvbdev.c:109 chrdev_open+0x585/0x5f0 fs/char_dev.c:414 do_dentry_open+0x7f7/0xf90 fs/open.c:826 do_open fs/namei.c:3659 [inline] path_openat+0x2718/0x2fb0 fs/namei.c:3793 do_filp_open+0x1df/0x400 fs/namei.c:3820 do_sys_openat2+0x14b/0x500 fs/open.c:1255 do_sys_open fs/open.c:1271 [inline] __do_sys_openat fs/open.c:1287 [inline] __se_sys_openat fs/open.c:1282 [inline] __x64_sys_openat+0x135/0x160 fs/open.c:1282 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f0c365b198e Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 RSP: 002b:00007ffdd1242268 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055559190e500 RCX: 00007f0c365b198e RDX: 0000000000000002 RSI: 00007ffdd1242340 RDI: ffffffffffffff9c RBP: 00007ffdd1242340 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd R13: 00007f0c36878fac R14: 00007f0c36878fa0 R15: 00007f0c36878fa0 Allocated by task 1: kasan_save_stack mm/kasan/common.c:38 [inline] kasan_set_track mm/kasan/common.c:46 [inline] set_alloc_info mm/kasan/common.c:434 [inline] ____kasan_kmalloc mm/kasan/common.c:513 [inline] __kasan_kmalloc+0xaf/0xe0 mm/kasan/common.c:522 kmalloc include/linux/slab.h:607 [inline] kzalloc include/linux/slab.h:738 [inline] dvb_register_device+0x300/0x1dc0 drivers/media/dvb-core/dvbdev.c:488 dvb_register_frontend+0x629/0x900 drivers/media/dvb-core/dvb_frontend.c:3034 vidtv_bridge_dvb_init drivers/media/test-drivers/vidtv/vidtv_bridge.c:438 [inline] vidtv_bridge_probe+0x9c1/0xf30 drivers/media/test-drivers/vidtv/vidtv_bridge.c:510 platform_probe+0x137/0x1c0 drivers/base/platform.c:1391 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x276/0xc70 drivers/base/dd.c:595 __driver_probe_device+0x1f5/0x390 drivers/base/dd.c:775 driver_probe_device+0x4f/0x420 drivers/base/dd.c:805 __driver_attach+0x45d/0x660 drivers/base/dd.c:1184 bus_for_each_dev+0x182/0x1f0 drivers/base/bus.c:303 bus_add_driver+0x324/0x5d0 drivers/base/bus.c:620 driver_register+0x32d/0x430 drivers/base/driver.c:240 vidtv_bridge_init+0x45/0x80 drivers/media/test-drivers/vidtv/vidtv_bridge.c:604 do_one_initcall+0x272/0x730 init/main.c:1276 do_initcall_level+0x13d/0x1f0 init/main.c:1349 do_initcalls+0x4b/0x90 init/main.c:1365 kernel_init_freeable+0x3d5/0x560 init/main.c:1589 kernel_init+0x19/0x1b0 init/main.c:1480 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 Freed by task 4458: kasan_save_stack mm/kasan/common.c:38 [inline] kasan_set_track+0x4b/0x70 mm/kasan/common.c:46 kasan_set_free_info+0x1f/0x40 mm/kasan/generic.c:360 ____kasan_slab_free+0xd5/0x110 mm/kasan/common.c:366 kasan_slab_free include/linux/kasan.h:230 [inline] slab_free_hook mm/slub.c:1710 [inline] slab_free_freelist_hook+0xec/0x170 mm/slub.c:1736 slab_free mm/slub.c:3504 [inline] kfree+0xef/0x2a0 mm/slub.c:4564 dvb_free_device drivers/media/dvb-core/dvbdev.c:635 [inline] kref_put include/linux/kref.h:65 [inline] dvb_device_put drivers/media/dvb-core/dvbdev.c:650 [inline] dvb_device_open+0x2d2/0x360 drivers/media/dvb-core/dvbdev.c:123 chrdev_open+0x585/0x5f0 fs/char_dev.c:414 do_dentry_open+0x7f7/0xf90 fs/open.c:826 do_open fs/namei.c:3659 [inline] path_openat+0x2718/0x2fb0 fs/namei.c:3793 do_filp_open+0x1df/0x400 fs/namei.c:3820 do_sys_openat2+0x14b/0x500 fs/open.c:1255 do_sys_open fs/open.c:1271 [inline] __do_sys_openat fs/open.c:1287 [inline] __se_sys_openat fs/open.c:1282 [inline] __x64_sys_openat+0x135/0x160 fs/open.c:1282 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 The buggy address belongs to the object at ffff8880279e1c00 which belongs to the cache kmalloc-256 of size 256 The buggy address is located 24 bytes inside of 256-byte region [ffff8880279e1c00, ffff8880279e1d00) The buggy address belongs to the page: page:ffffea00009e7800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880279e1200 pfn:0x279e0 head:ffffea00009e7800 order:1 compound_mapcount:0 flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) raw: 00fff00000010200 ffffea0000a68c88 ffffea00006dec88 ffff888016c41b40 raw: ffff8880279e1200 000000000010000e 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2772, ts 11832173324, free_ts 0 prep_new_page mm/page_alloc.c:2426 [inline] get_page_from_freelist+0x24f6/0x2670 mm/page_alloc.c:4192 __alloc_pages+0x1ee/0x480 mm/page_alloc.c:5501 alloc_slab_page mm/slub.c:1780 [inline] allocate_slab mm/slub.c:1917 [inline] new_slab+0xc0/0x4b0 mm/slub.c:1980 ___slab_alloc+0x807/0xdd0 mm/slub.c:3013 __slab_alloc mm/slub.c:3100 [inline] slab_alloc_node mm/slub.c:3191 [inline] slab_alloc mm/slub.c:3233 [inline] kmem_cache_alloc_trace+0xf9/0x290 mm/slub.c:3250 kmalloc include/linux/slab.h:607 [inline] kzalloc include/linux/slab.h:738 [inline] set_kthread_struct kernel/kthread.c:103 [inline] kthread+0x10a/0x520 kernel/kthread.c:296 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 page_owner free stack trace missing Memory state around the buggy address: ffff8880279e1b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff8880279e1b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc >ffff8880279e1c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8880279e1c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8880279e1d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 drivers/media/dvb-core/dvbdev.c:109 Read of size 8 at addr ffff8880279e1c18 by task syz.0.66/4466 CPU: 0 PID: 4466 Comm: syz.0.66 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106 print_address_description+0x60/0x2d0 mm/kasan/report.c:248 __kasan_report mm/kasan/report.c:434 [inline] kasan_report+0xdf/0x130 mm/kasan/report.c:451 dvb_device_open+0xc5/0x360 drivers/media/dvb-core/dvbdev.c:109 chrdev_open+0x585/0x5f0 fs/char_dev.c:414 do_dentry_open+0x7f7/0xf90 fs/open.c:826 do_open fs/namei.c:3659 [inline] path_openat+0x2718/0x2fb0 fs/namei.c:3793 do_filp_open+0x1df/0x400 fs/namei.c:3820 do_sys_openat2+0x14b/0x500 fs/open.c:1255 do_sys_open fs/open.c:1271 [inline] __do_sys_openat fs/open.c:1287 [inline] __se_sys_openat fs/open.c:1282 [inline] __x64_sys_openat+0x135/0x160 fs/open.c:1282 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f0c365b198e Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 RSP: 002b:00007ffdd1242268 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055559190e500 RCX: 00007f0c365b198e RDX: 0000000000000002 RSI: 00007ffdd1242340 RDI: ffffffffffffff9c RBP: 00007ffdd1242340 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd R13: 00007f0c36878fac R14: 00007f0c36878fa0 R15: 00007f0c36878fa0 Allocated by task 1: kasan_save_stack mm/kasan/common.c:38 [inline] kasan_set_track mm/kasan/common.c:46 [inline] set_alloc_info mm/kasan/common.c:434 [inline] ____kasan_kmalloc mm/kasan/common.c:513 [inline] __kasan_kmalloc+0xaf/0xe0 mm/kasan/common.c:522 kmalloc include/linux/slab.h:607 [inline] kzalloc include/linux/slab.h:738 [inline] dvb_register_device+0x300/0x1dc0 drivers/media/dvb-core/dvbdev.c:488 dvb_register_frontend+0x629/0x900 drivers/media/dvb-core/dvb_frontend.c:3034 vidtv_bridge_dvb_init drivers/media/test-drivers/vidtv/vidtv_bridge.c:438 [inline] vidtv_bridge_probe+0x9c1/0xf30 drivers/media/test-drivers/vidtv/vidtv_bridge.c:510 platform_probe+0x137/0x1c0 drivers/base/platform.c:1391 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x276/0xc70 drivers/base/dd.c:595 __driver_probe_device+0x1f5/0x390 drivers/base/dd.c:775 driver_probe_device+0x4f/0x420 drivers/base/dd.c:805 __driver_attach+0x45d/0x660 drivers/base/dd.c:1184 bus_for_each_dev+0x182/0x1f0 drivers/base/bus.c:303 bus_add_driver+0x324/0x5d0 drivers/base/bus.c:620 driver_register+0x32d/0x430 drivers/base/driver.c:240 vidtv_bridge_init+0x45/0x80 drivers/media/test-drivers/vidtv/vidtv_bridge.c:604 do_one_initcall+0x272/0x730 init/main.c:1276 do_initcall_level+0x13d/0x1f0 init/main.c:1349 do_initcalls+0x4b/0x90 init/main.c:1365 kernel_init_freeable+0x3d5/0x560 init/main.c:1589 kernel_init+0x19/0x1b0 init/main.c:1480 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 Freed by task 4458: kasan_save_stack mm/kasan/common.c:38 [inline] kasan_set_track+0x4b/0x70 mm/kasan/common.c:46 kasan_set_free_info+0x1f/0x40 mm/kasan/generic.c:360 ____kasan_slab_free+0xd5/0x110 mm/kasan/common.c:366 kasan_slab_free include/linux/kasan.h:230 [inline] slab_free_hook mm/slub.c:1710 [inline] slab_free_freelist_hook+0xec/0x170 mm/slub.c:1736 slab_free mm/slub.c:3504 [inline] kfree+0xef/0x2a0 mm/slub.c:4564 dvb_free_device drivers/media/dvb-core/dvbdev.c:635 [inline] kref_put include/linux/kref.h:65 [inline] dvb_device_put drivers/media/dvb-core/dvbdev.c:650 [inline] dvb_device_open+0x2d2/0x360 drivers/media/dvb-core/dvbdev.c:123 chrdev_open+0x585/0x5f0 fs/char_dev.c:414 do_dentry_open+0x7f7/0xf90 fs/open.c:826 do_open fs/namei.c:3659 [inline] path_openat+0x2718/0x2fb0 fs/namei.c:3793 do_filp_open+0x1df/0x400 fs/namei.c:3820 do_sys_openat2+0x14b/0x500 fs/open.c:1255 do_sys_open fs/open.c:1271 [inline] __do_sys_openat fs/open.c:1287 [inline] __se_sys_openat fs/open.c:1282 [inline] __x64_sys_openat+0x135/0x160 fs/open.c:1282 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 The buggy address belongs to the object at ffff8880279e1c00 which belongs to the cache kmalloc-256 of size 256 The buggy address is located 24 bytes inside of 256-byte region [ffff8880279e1c00, ffff8880279e1d00) The buggy address belongs to the page: page:ffffea00009e7800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880279e1200 pfn:0x279e0 head:ffffea00009e7800 order:1 compound_mapcount:0 flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) raw: 00fff00000010200 ffffea0000a68c88 ffffea00006dec88 ffff888016c41b40 raw: ffff8880279e1200 000000000010000e 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2772, ts 11832173324, free_ts 0 prep_new_page mm/page_alloc.c:2426 [inline] get_page_from_freelist+0x24f6/0x2670 mm/page_alloc.c:4192 __alloc_pages+0x1ee/0x480 mm/page_alloc.c:5501 alloc_slab_page mm/slub.c:1780 [inline] allocate_slab mm/slub.c:1917 [inline] new_slab+0xc0/0x4b0 mm/slub.c:1980 ___slab_alloc+0x807/0xdd0 mm/slub.c:3013 __slab_alloc mm/slub.c:3100 [inline] slab_alloc_node mm/slub.c:3191 [inline] slab_alloc mm/slub.c:3233 [inline] kmem_cache_alloc_trace+0xf9/0x290 mm/slub.c:3250 kmalloc include/linux/slab.h:607 [inline] kzalloc include/linux/slab.h:738 [inline] set_kthread_struct kernel/kthread.c:103 [inline] kthread+0x10a/0x520 kernel/kthread.c:296 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 page_owner free stack trace missing Memory state around the buggy address: ffff8880279e1b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff8880279e1b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc >ffff8880279e1c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8880279e1c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8880279e1d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ==================================================================