Extracting prog: 1m48.097797919s Minimizing prog: 51m48.344065002s Simplifying prog options: 0s Extracting C: 27.593958518s Simplifying C: 15m33.271114744s extracting reproducer from 24 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 24 programs with base timeout 30s testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 11, 26, 40, 2, 4, 2, 19, 6, 6, 17, 7, 19, 30, 4, 9, 3, 4, 13, 11, 27, 19, 21, 21] detailed listing: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "aec32dcc8bf974cd", "6c46bf5203cea14c6d3c153ce09dedd3", "0af0cd96", "b26a7e71a1f6440a"}, 0x28) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) landlock_create_ruleset(&(0x7f00000000c0)={0x7f6e}, 0x18, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000180)=0x1, 0x4) executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000140)=[{0x0}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$tun(r2, &(0x7f0000000380)=ANY=[], 0xfdef) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00040, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000280)='27', 0x2) fcntl$getownex(r1, 0x10, 0x0) (async) openat$vimc0(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000980)={'syzkaller0\x00', 0x5032}) (async) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000009c0)={'syzkaller0\x00', 0x1}) (async) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8040, 0x0) (async) r3 = socket$inet6(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) (async) sendto$inet6(r3, &(0x7f0000000040)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000221400030500008000fbdbdf00001f56ff", @ANYRES32=r6, @ANYBLOB="080002007f000001"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) (async) recvfrom$inet6(r3, 0x0, 0x0, 0x10000, 0x0, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000300), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x21, '\x00', @st={0x4, [{0x3, @svalue=0x5}, {0x3, @uvalue=0x7}, {0x0, @uvalue=0x6}, {0x3}]}, 0x9}]}) (async) writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="010000000000260010000900000000010000000000020800450000740001400040063c817f0000017f00000104d204d2", 0x30}, {&(0x7f0000000a80)="00000f0000dba7478481709a41e0a9478b2d592773875532f6fddc40b86c99641599408f8078bcb71fce378fe20b536e4143ff2b433edfb4e7f17ef38de56359f002d65b0261770d66141d2b6e1ce763f4e69a88317c2efe9d44e71f", 0x5c}], 0x2) executing program 0: ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) (async) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40841) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x0, @llc={0x1a, 0x308, 0xf, 0x0, 0xe9, 0x8, @broadcast}, @l2={0x1f, 0xb, @none, 0x0, 0x1}, @isdn={0x22, 0x40, 0x2, 0x1, 0xc}, 0xea9e, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)='veth1\x00', 0x7, 0x9, 0x400}) (async) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x0, @llc={0x1a, 0x308, 0xf, 0x0, 0xe9, 0x8, @broadcast}, @l2={0x1f, 0xb, @none, 0x0, 0x1}, @isdn={0x22, 0x40, 0x2, 0x1, 0xc}, 0xea9e, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)='veth1\x00', 0x7, 0x9, 0x400}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24044000}, 0x4000800) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x118, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xfc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x118}, 0x1, 0x0, 0x0, 0xc4c0}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000001880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001840)={&(0x7f00000006c0)={0x1150, r5, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xbdc, 0x49}}}}, [@NL80211_ATTR_IE={0xeb, 0x2a, [@fast_bss_trans={0x37, 0x74, {0x2f, 0x2, "3670be5039a4e3ecdad0dd375018ad7d", "c1e068bf0c5039e4c9469f52ea568a1345283773e28b1a38b95683d35af58d5b", "2fc59945be76bf930f9861e5dcf42e3a0a97c053fb8f86276261ecd73d9407e3", [{0x1, 0x16, "18e5620a5335ee575a8b4061bca53a82dc8129bde637"}, {0x3, 0x8, "4d4f89d9a2225ddb"}]}}, @tim={0x5, 0x6f, {0x7, 0xe6, 0xff, "be085c6c11d2b7232b86fa74d00bbcf545b1a69b7e038620cdcca1ea525b0014ffbc45914cf15c86cb3722f152c1f6f09e1e9f23535b392d222577abc6381807abc0be5008adbaad35b78fa4f0730feddc9afa7692bf346bc0403f8bd1b6e28eb012b447f81fb73f2f81cdd0"}}]}, @NL80211_ATTR_IE={0xa, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @challenge={0x10, 0x1, 0x24}]}, @NL80211_ATTR_IE={0x19, 0x2a, [@cf={0x4, 0x6, {0x1, 0x1, 0x9, 0x3}}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x1, 0x47e8f3d2be5627ca, 0x6}}]}, @NL80211_ATTR_IE={0x1019, 0x2a, [@mesh_chsw={0x76, 0x6, {0x10, 0xfb, 0x2d, 0x7}}, @measure_req={0x26, 0x1003, {0x7, 0x0, 0x44, "6aa9952fdaf95de6a6995d58b3977e3970e184b270826fd48303294cd3752f8715085095885dc734e0083fd1e1a5fa24fda64828b91a61ac06301e784d456b67f88b10db4464e6b15e6d199ee71c5f65b3b70ced53c827f7a908722019f989cdbb0220a8adf5e31c2a79ec1420febe9ae940e6bd26b936a7aeee1575b17815b2620ec3b59384a811e7a06a00a46cd9dc87b6cf02275884651c2b9b8e894ec6f71c1d94bb04794be10bd1ba2f1664c149bbdbf5691857d34b38db9180422326f92713ee1f412a8a52f24d608376d2c074da424de960c2684cb4df5121a0cfa2282a3eb7e1658cdcd12f6f6b4b158ad60816313d49269f5c2162f55453edd903693bbbec655a6a7ec12fbed23e2fa7e1ac8f2300180235efeb4276ef78877831c3f7e7a118c209e355b0783164566b358383a48e77f8ea499e71750f2247b988cf9a59d4d3dd3afd84c5eb9329cb8333c2c184cc7298e99e688ddf97d6851f099460f0949dec5fbb744632e1154376d4594deb38625844018716710a195c53ec89cb36f5ea7c2f15a3b880a539a0377389836dcab9fa452a4490ea278bcd700ec42fe2b6e401e49d16b20d88225ac171b74ade14845922196f35660be8523bdb6d0ff3f3fc14d8152353e5963eb6fab2caea9b22dcfcdc2501e4b282cb43b7124c459125dc9a7377af45d3979150219c729312d1a73146e36d0aba962d2114f1b20c0a555d7ca37caf5177380c07890853d2ff4196485820f4f1c2989dfb2ea34a3db50ea66ca6ca33bd97d43bbe82cc1a2a9dfd7dbe237a028857aacf608ea42e70b51db0c8278b7d125ca3dcd478107976606153fc1456752ecba8587e5edb9d6c57b3a66cf6d04502eb374b6e03597976e4a2051f5c343e78707eb58a73feea629d80c1bf1f78e2905543ecbe5778e92f135eaf04dedc1cd3d7f8f37e0b9e6c1494490f1de0f689b2aa880fa72dd6c27b3bcf0aad29db461e252ea21be38f2cba6a87c17a3d3f43e9217b2ce611d6c4aef5b11ab54b7fc312695b47b7cbac14d9ae50b660a5ed0ca24fb226371c94990214934c341fd893dbe16221df1719b99028cdd5217d28ee3fc4eaad92e25dac8d01746eb44feeb58be2f87b302d833066c01f83c0d3ab134251450f70bca27e8d8b9e6f68d4f27e130fb8750a60aaf758e27f620a9af5aa72f3a2bf5a3797bb5faeff43502449ed7366af90b5d7e14b3562c6bbbd7ad58634010ad8ff5f0b6bc16c6fb6dc5be112bbf263bfc49fc7506018fd650f03b1e4b7aad5d520bff7818ff11479ab08beea58a0778ba64627124203e73ce90162a1076700c477b2ce60f0e006e2f9bc49846849800d2fb0c236b210d9bc6a689e2279003a7118f03ddc18f2cddf067cc555b5f33ad880d29aa1fba3e02d49cbee3844b8a3fb7e2a553082a4674afb8be97ef7c9da809746e0c37bb9f99531d1358aa06403bce250cf6397a4ad27f83aec5e554aad3ce96d4f6ca080fd8947ca73429b2120ae75e3f86ecb889c1b5fe6d48fc5c41c88c68308e70fb26739e2e0843752aaa00997a7d33e092989b1a9ed07ff650921c3d34be9a4c5b50c7be7ccd49a65ac73b71abe2bb44b76f90f14de6fc748cd9f0606a3aa4820cf12dc5ca68e9fa9902d214190b9f2ee5e95bb898906393c61793564c4ed6736ada2dca03786d047fc7c4c03b6c09d73a357e3504077916db0bf7f22524f3ab7a48772d9c9014b6fa095ee118829391b5515f9189ea71693f8b5c4e517db9f7999b48cff7f5f55aaf8dff92ff8bcc9b45952e40c25e7c2103cac22071d966ac4cbb4842bf2149b2880d881ae6d085bff4ac4a6bf0d1854b0cf061fa0727d8ace1e662864377dd580d076934dbf32fd62519bb3d4c78e85abf668d87a22f8d21c1b3ffdc14df276de78ea54a55b1c0bfca3ff9b58bb736019b4cb8021b0606366d6ffaa2ed1dc46c44fb6b3a631f777a53923c1cad5825f7d5d27a4e49eee91746afab9e2bff2b1188edc10c2a82137d3bf3f7bb04e25a1af62063781ec8712d46dc09f557f34782dde21d46cfc7f4c1635f1f201ea24f937f78d3223e502f5003a5f155e26c6ab937788bfdf2dbe11a6275a64cebbdbbd3dd25f598dd9d88a5119ba25fcca835ec068ced583dc986a908e125f94bd6ab8f52183853f560bffcd9b953be56ec7ef29110023d4d57e874bcaadad4174777de5a98d073171a4ba6cd8072e0f5d2f9254ea411e10dd4e957d9bfe6da4298d32c9bba8f766e8602da0437fe47ec3ffd23d4ff1e702d0527a7783653b88abccea3fb9f9819a861f98c5f639306d8e4614c41d71aed0f113f80813fef7e51b2f3191718ca021f59e97f8a3c26a8b3e181d809d0c9d87dd0cb91a1186599fb64fb8753517a393cb9031ea3bf8215b3586784c506c9dde552a903b5e1e698d5d7f99824fa2f51f56a0450222b1d8bfd58489a5abaea8f04f994d6cf94974f4cded0e79327e8e628a75dee1b903b60a5d5a854d6bf4a1e947cbc6e8e7d444ae0204bfc03a9e339a7044cf17336ab3971a8eb1b4726e873c00f37fa3257ee67b5d00349fe9902376240f352bd33d867642bfe61d7a989f8f5baac00f81d11fccb673c38a09ae2636eb7cc82f3127fded047f372ba9b4d8ef23b21587f3278b0a6686100fe971f804993a17452b08902e9d46f56a183aa7efa2e21ee2899cf83d86e3f6e3ca3c11204e7be2176f3b622f63f0b0020805da5f53f301e99356973219c3c413e87586c07faf28d4590e47a7922d2e306089bcffafd78dd5e9d751ddcf959f2c18d08d4d3fb990673a084d3b69a443e83803482617cd467f25e37cae413401e7cd4f9346dfe00eb866b32c34e67f059d5642413784c2499e2034b40530ff0ae854a3768d7159a034a9872ac3e27b329ee10f0b2f1abd5a0508256c9dbb14c6a841a4926c3ff5f3b9023add0c410993ac27a870503435b65c85370b4152fffdb97dd3257868e6fcd9caa6ceea4f15342b58df3103ce550d564191bcbb57bc7559af2ff42efb227fb11d2e0dfad155b021100d45cd822085e2f3d84905a51a2c9ef8206c18945d4ef7eab7ab556d1837e025e94dee6fe3f87d15dce08cbc95ba6babff6cc2c08194446877d55b32ec011304d0785613f927ac3a9596f2737d6de729e224421e479c830e1944e023e35abc9ec7a17e6137c1a36632ee686b9a35b574d8243ec4afc5e942906ebac65eb49ff36ad6705398fb1f3ec053e2839ef53bb4f9d50cc8b6ac84974290e98ba84b5a54f182cbb70295fe52131487427bfd8140d62e61cf60bf7db6e1e5412245b97156e994e1068d62ed03772eaaf95082c62ab60bfac61317705f3c42699cd74d68ad1fbd6d442fcfe3ae0e55d1ef0fd56fc98b7aa2479e6d40c1f528d74a0870e7c7366bf4227ac5a53003aa6afa05f499b233836addb84b591f7a4e8cc48b38a73697b0c8c3556cd0c80a8462c830a2418e4b1f386b381329a513c9e40cf4c1631f83ee8f74d508876bf3823ce142fbeb85fdd511912a3f52b4cbc3343969e78622d1d2c7253c2a251f0657cbc319c724f9afe8eff9434f31dfc96251591b9c3dbb4f387731c5985840d9c2887d8a729d157a2b55207b6d552d8668e610b1cf55c570f885e3558b955ce81f5f7f2bd5632be13fc184476ad007a04f7d2c8564358488fc462f15dfe560328f2676242c87c1ea3073c11445c9a02fab152affedd8096bee90bc10b238a414417268a7bfa10c23ac2fc7e463786ad8d1384c21adb67ed5bb945fa2a376662d93e4eb11b1b28b59a3abea1634c8df0d10ec738eb11c422284b8a09315d1902bbca18cc245b57b5c1019aec02f367797f4d477fd5bfb21c04fee8e788e54ba61cf21a0814e709213b2e9b1f48626b679ed539191640bf9cacb5732170c322afed0684e6607dfa68eea6624733314ddcb5bc4e3fbf9ec0d469d57d3f1c1640dbf551fe71386483c2811f8f8c60900d01634f5757f9e776d8ed13e4f4728a7eac478dc637d99f938e9b317cd80d899afa1c94342d9e8732bcc5fa0f946ebd002f508ba18613bd90ea8c6c1f6f5ff2175cfec56852ac420f1975a830cbc33848af3122eb31f3aa1d2df78b6466895497a35fecd1bb30114938eef64315ce2b68c7f6013b449a2ed8dad378af41f1f5a584c6eb529a482089b203ba9384c03373f0eb8093cf655dcd24d1c4accb703750dd2945979da2bf2d439ca54487da4dd45cc68e3e34d6c25879b62968cfcb94f4ae3381a2a116816a7fe07d4647799b62a60e4e859862b163e7c35a8107e702cad798a95f4870d3e775756aebc9043fc1e612d24f4863d88382d7f088fe61a6678d7a36213a876a6cb2bb786ce014d75f452521637706a2374439f62688e99dc73aef8b2454a03bbca0ab0d854f7a5f8a0066c8d5c0afee22313bb59e44877ca99654661d6b49ff7284620f8878e4e40fb38586ae1f7c8d99a1ded7bff7911610af2d922e08275ff12cb645c0cd1fef1329a947df9f1172df5d25074ac9b2de956dbfc8c99187f27768af366a0d304808ce773e5da562b43f2cb94fcbd7e15a367ea23e2092ace5e48c1ddd95b7eefa8894f45fd00397c371681689138acf60fb61605b5059104eafa422fc2393072207cddc7232bdbc3f4704aa9f2ea983f79c43a4c58760ba36d38c335d53c254f0057691a1757393c899b8770056eebc7ba941336a52250815e49871b0d811e3bd5c847f944e3621908b97d15697a542703eee1a6e4a89b7c64ee409bd27975c1c4db431747184d2aaa49b571d44c870c83c4fccb4f8856f70c28c06a8e4aa6ad858aef842e755cfcdb1f3a3f19be908f1e57302dcdea7f6e36676b5b3dc22721fc2683ce3ca0797bade8c6e231dce56bad92fbddd757e16442f9557349ba976c2fde5f9514eed5f28ed03c4bea5ca0f57a4f793ef80f9e761ddb4d4fa1b9f1039f977a19d70143cca03dc0782441f0c76ade871d61b0024d0fc605e599ee1a63828e172ab9fea87e929832cd24e1588aca6ceb92f0c8ade35f15abf3e23eeed07f877c44894ecbe775bb550e018c409b5dd3ecc393f1832c11c265dcb98312c90c87fcf719f38e7609f9ac1ea8093a6d85b9016123564c79c006c1527ae0130b5164d3c9ff6ad3b1bbe023e8ab50eaa16f3d66d90bce258ca201a0632d658f842be5f220c0d5c5df3039a8c9fa75650c255d2d5198d6eb03c807d6c00d1a0b068371a947653e55a2e37907cec4cc5c0495aa1f351487a43446b7999f362982de0bb4fe883ae255c38755b5ae57923262069525c16bc98dcc1ad5f034d378aae1f1b2a8e41ff0d878113ac9c84e1bcb530e92709cfa597643df6ca21d84f640e2f90472051652c82f42e1167992351b03ba5d8aa3c4d27ecff41c8c986ef8e6d917b2dfd06d47f4f1d62baaa8b1615492386aab5e4db31d2a2f37992e69807be924ad18e9c3cc6dbb42932af6146579217f238cb2fcabf879714c286f57d87c5bea6280248dfe1941e90ab0b33d13208ccf8cb02b400b0d40ea7e16f825d1a0ebf9d9587d30450bae272a71a6d1182c4a193e1b974311572328b755b54b18b03bd56d567235faf0f4bc461d403a62420ff564188eef00bab9902314d947398d21dfd8c1664d62b24f7efb286debbe3606a207804e1190d961ec48c044f9fd3fb7ecf5195336c8c669eb54140af26308c93822e075ce9e5f0ee07c96068b753cc7799161ad3d73d5242ca54ed4fa6a61ee74f5e24a5cf8b70b2998555f342aa14be219f39e929ac40ca0316876f40fed60"}}, @gcr_ga={0xbd, 0x6, @broadcast}]}]}, 0x1150}, 0x1, 0x0, 0x0, 0x4000000}, 0x405) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000018c0), 0x2, 0x0) ioctl$VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000001900)=0x3) r7 = syz_open_dev$radio(&(0x7f0000001940), 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r7, 0x80885659, &(0x7f0000001980)={0x0, @src_change}) pwritev(r6, &(0x7f0000001bc0)=[{&(0x7f0000001a40)="fd93f22ce39f144cd03a790bf283fc3f8c1885666cfdbfe69cec6fb4711d718d062a29e4e139d11636358bd287611cd4d6fdbf868635f4d6cf79c88273b0fb7e9997214e6e9473c82e18f9c2b27599b40cbf2a32dbfd5f46b1cd3573ee55501e5e56d37a4361eb94284124d76f099b9412bbb95f0a65141a47b12a21cb8e70c2142125fe6a8b3be26945b423414388e74a5ad2e87a", 0x95}, {&(0x7f0000001b00)="c67635e2a81bdbc54484fe7c486da3737d1c2cb2bc3e61df47acf2668ca7e007da5f681f66dee191663bee9ff1df13d17510c8b983cf4c96ecc9662df673869a4f7ddcd7d55f2a0a0e34b3b03c41ea39b1e0cc63f55c5f97c20bf90033835a3a3a12192e741ea69d3c8944378a7af9a7a762b8e12cb8a4013daff446be1c09c0ab1eee973622bb956df598014f91aad8d060b9dd6fb4b19b84", 0x99}], 0x2, 0x6, 0x160c) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000001c00)={0x6, 0x0, [{0x0, 0x0, 0x9}, {0xa61, 0x0, 0x2}, {0xb05, 0x0, 0x6}, {0x9b0, 0x0, 0x8e}, {0xad7, 0x0, 0x3}, {0x332, 0x0, 0x6}]}) connect$inet6(r0, &(0x7f0000001c80)={0xa, 0x4e22, 0x30d2, @private2, 0x1}, 0x1c) (async) connect$inet6(r0, &(0x7f0000001c80)={0xa, 0x4e22, 0x30d2, @private2, 0x1}, 0x1c) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000001cc0)=0xfffffffd) (async) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000001cc0)=0xfffffffd) timer_create(0x2, &(0x7f0000001d00)={0x0, 0x7, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000001d40)) (async) timer_create(0x2, &(0x7f0000001d00)={0x0, 0x7, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000001d40)) ioctl$VIDIOC_G_SLICED_VBI_CAP(r6, 0xc0745645, &(0x7f0000001d80)={0x3, [0xcea, 0xfe01, 0x5, 0xfffa, 0x0, 0x5, 0x246, 0x7fff, 0x800, 0x100, 0xfffd, 0xd29c, 0x0, 0x101, 0x9, 0x7, 0x6, 0x9, 0x9502, 0x7ff, 0xff, 0x3, 0x4, 0x4, 0x6, 0x9, 0xd8, 0x6b, 0x9, 0x9, 0x3055, 0x1ff, 0x3, 0x6, 0x3ff, 0x5, 0x5, 0x8000, 0x3, 0x4, 0x4, 0x3, 0xfc01, 0x101, 0x3, 0x6, 0x7, 0x7fff], 0x6}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000001e00)={0xffffffffffffffff, 0x4, 0x3, 0x3, @vifc_lcl_addr=@multicast1, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000001e00)={0xffffffffffffffff, 0x4, 0x3, 0x3, @vifc_lcl_addr=@multicast1, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000001e80), r0) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001e80), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001ec0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x58, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000001) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x58, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000001) r10 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000021c0)={0x0, &(0x7f0000002000)=[@wr_crn={0x67, 0x20, {0x0, 0x4ab4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x99, 0x7, 0x6, 0x6}}, @set_irq_handler={0xc8, 0x20, {0xb7, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0xdddd1000, 0xa263}}, @nested_intel_msr_list_add={0x155, 0x30, {0x1, 0x2, 0x38e}}, @set_irq_handler={0xc8, 0x20, {0x3d, 0x1}}, @code={0xa, 0x6e, {"b9800000c00f3235000400000f30660fe7743100c7442400b5890000c7442402ca780000c7442406000000000f011c24470f0666baf80cb89c1d098fef66bafc0ced0f9ebe00000000420f01cf363e65400f01c3c4237961fd980fc71b"}}, @nested_amd_stgi={0x17e, 0x10}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x8}], 0x196}) ioctl$KVM_NMI(r10, 0xae9a) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002200)=r0, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002200)=r0, 0x4) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000004) executing program 3: r0 = syz_open_dev$video(&(0x7f0000000ac0), 0x7, 0x40) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000b00)={0x1, 0x32314752, 0x140, 0xf2, 0x0, @stepwise={{0x7, 0x25}, {0x2, 0xffffffff}, {0x0, 0x4}}}) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000000)='ntfs3\x00', 0x819005, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/bus/pnp/drivers_autoprobe\x00', 0x0, 0x0) read(r0, &(0x7f0000000d40)=""/10, 0xa) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="14000000150001030ec00000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x200040c4) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0x200c17a) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000240), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=@newqdisc={0x8c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x1000]}}]}}]}, 0x8c}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000200)=""/188) getsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000040)={0x2, 0x3ff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000000c0)={r6, 0x2, 0x1, 0x9}, 0x10) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cifs\x00', 0x0) mount(&(0x7f0000000340)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000380)='./cifs\x00', &(0x7f00000003c0)='cifs\x00', 0x0, &(0x7f0000000400)='vers=1.0,user=root,pass=root\x00') syz_open_dev$video(&(0x7f0000000000), 0x8, 0x400800) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='27', 0x26) openat$md_new_array(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x8cffffff) executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) r2 = dup(r1) r3 = socket$inet(0x2, 0x3, 0x4) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x0) recvfrom$inet_nvme(r2, &(0x7f0000000180)=""/196, 0xc4, 0x40000143, &(0x7f0000000280)=@isdn={0x22, 0x4d, 0x1, 0x8, 0xa}, 0x80) write$UHID_INPUT(r2, &(0x7f0000000740)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r4], 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x40080) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000640)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000680), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000006c0)='veno', 0x4) recvfrom$inet(r0, &(0x7f0000000700)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x0, 0x80000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x200, 0x0, 0x25dfd9fc, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0xff, 0xa}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cifs\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f00000000c0)='./cifs\x00', &(0x7f0000000100)='cifs\x00', 0x0, &(0x7f0000000140)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,,ass=root,vers=2.1,nodfs\x00') r4 = accept(r3, 0x0, 0x0) sendto$inet(r4, &(0x7f00000001c0)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100100200"/85, 0x55, 0x2, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@nested_amd_inject_event={0x180, 0x38, {0x0, 0xd2, 0x3, 0x5}}, @wr_drn={0x68, 0x20, {0x1, 0x7}}], 0x58}) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, 0x0, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) executing program 0: mmap$IORING_OFF_SQ_RING(0x0, 0x81, 0x4000002, 0x10, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r0, &(0x7f0000000240)='27', 0x2) fcntl$getownex(r0, 0x10, 0x0) openat$vimc0(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@deltfilter={0x280c, 0x2d, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0x5, 0xfff1}, {0xf, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x73f7}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0x9}}, @TCA_ROUTE4_IIF={0x8}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xd8, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_ACT={0xbc, 0x2, [@m_csum={0xb8, 0x15, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x6, 0x3, 0x4}, 0x7f}}]}, {0x70, 0x6, "2f28d1201751ab6f85777ab3d327d342978e4fb1a9f1d78ccf8c99360be3f193e8d5532c6dbd135d817a9d6207f577250944bec51dbf0637bad298215900882f4bc96e9c71f9d12714da2835f53a9b0143e2c51de44a93f09dfe2fba2ae040a075778e5c49be85d286bf506e"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x4}, @TCA_U32_CLASSID={0x8, 0x1, {0x4, 0xc}}, @TCA_U32_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_U32_HASH={0x8, 0x2, 0x1}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xc}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @TCA_RATE={0x6, 0x5, {0x8}}, @filter_kind_options=@f_basic={{0xa}, {0x2654, 0x2, [@TCA_BASIC_ACT={0x5a4, 0x3, [@m_skbedit={0x110, 0x11, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xffe0}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xdedc}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xb}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x80, 0x8, 0x1, 0x3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1ff}]}, {0xa3, 0x6, "05e3e1491da031fe7892441eb45143366ba448df29e393deff26b9235e82ddc50916a0a0962476ca0c00ced37edf3fe24bda46cc81a6357ecca367ce1683e8d8203a0d7f56aa4e6e93182b249b8ef315ce5733979b3c8cd71166704fa94cf8cd2149f392c2d305390928b1e7e36961e1da4878595ec950f5dd344c780cdeb044fb686388516f1774ba58969898a3068b65dee9c81013933bac137bd7a98ee7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x148, 0xc, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x81}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x100}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x8, 0x8, 0x8, 0x2}}]}, {0xdb, 0x6, "ebd010b39e1e3c808f00d940b9d8fb0ba7b9285baf5ef98421a7ce3384eb291413c93cbaf9b4be80b559d9378f8b0678bb3d1d129fa5dfa5885a101854ead34895fa5b284c771812d830894c8d4308ebf7fb27259522831d7fc229c594d1854dd9378cf5030c0191e3bf506498909843d00f70137562b25de321f72e5146622b4be5a8404ffea368789f70744608879e1532f7bb22546cf9219f01314f9ab8e6772dc50267ac018491d12daa192b03fc64e47f59bf98f21286f96505fc32dc71f82fd7d6c58426afe4b90530c60fa048361350dca06418"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0xa8, 0x5, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="3932eb913668"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4502, 0x6, 0x20000000, 0x1, 0xa}, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x7, 0x10000000, 0x4f, 0x7}, 0x1}}]}, {0x1c, 0x6, "0048279663ca5bb847505ad9066073e24ce3dcbe051ce53f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x13c, 0x11, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x7fffffff, 0x1, 0x5, 0x8}, 0x1}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0xdf, 0x6, "f44a8f27862f4cdb8a74a04d5f18cc3a4bda7050a49dbf1feb42e0c3b247c7e7751fd623d2a8f94c33af03e407fec4af45ffe6c8ecea7426efcfa14651935089fef518c349ab22ce16ea135fdeb1dfe7dbcae1c0a37c5c1f1978a337491cf1130ee9b6d0c948beb71f114f28aeeb12b87a6d5f67588bf681626f143b6359cb08a2d1dbdd991a1e4a5057bd3241717b7fa0137964a97e9c21eff5c9e7b585cc5b199693ff153163013cb5f695a8ebb781532c8615e4099ed3e58e368461574429ca1a8c5d44f5f0cbe8bf1d5f4b186e8d5ad7a13869e78ccbfd442f"}, {0xc, 0x7, {0x80434279e80eac50, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x164, 0x14, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6d7, 0x1, 0x20000000, 0x2, 0x2}, 0x6}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xa603}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}]}, {0xc6, 0x6, "37f6711226dae6d5832855f47b0abb0414a23da0716b9ca225e4d3f687d9c823ba4e42ea87c85180bb955aa572cb6c46dc9faea287f8afeb8b740be146df2129ea7465fbc99cc074ab8a8905dccd5a7f2561a71c12d6b583edc71a7eb789ef5c5da2ec1a4ef3884a3e22e86c787e290451099469fb00446f48612894d022ff59ab102325506a2fb361600e8bdfadc9ca532edc08c406ca3eb0a8cb2221deb735c17d88d79fa5a3794a887ca1aac98a56fa47a16df261ca07d3248d486a6c262935b1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BASIC_ACT={0x2d0, 0x3, [@m_ct={0x13c, 0x9, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}]}, {0xf0, 0x6, "083b43f23024ebc610496ab8d05128c9dbf44b890e22a0162fd4fbef414f5cdbac39c2546a3bf463f74ea9c6c6d59ed4e99226c6fcf4cc34097825bcdaec4fc1d322cee06969dc317164d18ed4943defc969ca416acabc0a45a54474eab9525d4bc54486ccd62ce62e83194a94c706936a054ca2a06c2474cca4ed8c1fa92b47c310ac08e361e72ef23a280706f4a63e730ed95f0a6247936de03e798908800ddef9eff3557087a5e662e32db3c7f183d860d8f98101d6e99c52ac932a880735871384023169792877aa0afa2c2f681db89602b7b56872a347f8323155ce8b51bdc603f86a6e9eb8fb57e6da"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ctinfo={0x120, 0x14, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x80000000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7, 0x6, 0x2066, 0x81}}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0xffffffffffffffff, 0x7, 0x8}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0xaa, 0x6, "910ef7c52f7f14f8cf17328a636b84cf6d263304d509d2e7da4927758c14d1203e69656137aa323124916b2b2d44080441c8f0abf5ce0f25f5fdfe36bdad4f62e1606988b7abf0ed855d22f4445e05f1a0e6a6537514f08554fb6032a49124fc3a078260f58a97931434dc4f555f4682ec7e7449abd5fa8a3f964d377833f14a43ed9bac7bde4b2cfc865059f3b20f0bab5c22eeae3bc29dd5052fe2e88df142fdb97756b9c6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x70, 0x1e, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x3e, 0x6, "7a8f42de3013a4ef4b7f80d00df7e1d2b7c60e94d1c4dc824328c22d410f9ccf3c7b8dfe38158c5bc032926c9dc658ce7c1e17edf9d973debb7a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BASIC_EMATCHES={0x218, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6a}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_META={0x6c, 0x3, 0x0, 0x0, {{0xf7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x5, 0x2}, {0x8001, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_VAR="9fbf9bfe", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="e6334872", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="aea7e04e5c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xb, 0x2, 0x1}, {0x2028, 0x8}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="65518e5e48", @TCF_META_TYPE_VAR="06", @TCF_META_TYPE_VAR="ae6b082d352af3e9"]}]}}, @TCF_EM_IPT={0x38, 0x3, 0x0, 0x0, {{0xfffc, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xffffffffffffffe0}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x14c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x8001}, {{0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1, 0x3, 0x1}, {0xd4a, 0x8, 0xffffffff}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8}, {0x1, 0x2, 0xff, 0x0, 0x9, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x4, 0x8, 0x6}, {0x4, 0x2, 0x5}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x9}, {{0x2, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x5}, {0x9, 0x8, 0x1, "b30c50fd7c9300b1"}}}, @TCF_EM_IPT={0xb0, 0x2, 0x0, 0x0, {{0xdf9, 0x9, 0x61c3}, [@TCA_EM_IPT_MATCH_DATA={0xa1, 0x5, "d1360e351d561e23ae354a31f11037dbafcebaa967712e01988cec631ab16340977a86864b25caa226c7dd5c104656ae2099c8a1596c228213ef32a635eca3780d99a3d0a89e87059488343626dbb430e254f69468d5d99482a55a1bdcf98f179912d7e974a5e64339b80fa6f521a73915ae8f6ddad180276166448b0dfde6481b457153ac078119207e7614ee64ef1bc2406ec5c123c885b86fa566e2"}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3fc, 0x7, 0x4}, {{0x3, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}]}]}, @TCA_BASIC_ACT={0x1bc4, 0x3, [@m_xt={0x1b8, 0x11, 0x0, 0x0, {{0x7}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x8e, 0x6, {0x89, 'mangle\x00', 0x2, 0x100, "5685ed843cf857c716b22dcc05ef1b63977fbb6dd28b15604d43e4977793892e47c1213bbd8e41fcbae3ac69f253b121b3e722e1029914db647dff0637adfbbac781ec82ef9bc44ae6989bc98e1b471610dd2111647254d9e490cb46006f7f6f9158ba60"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xd9, 0x6, "3878c57181a9299cfcd93d57ec9e490e5ce5428eb665c7e2e1b272b2a3f1870be5a6a3e3910a0d914e8b0d8f0c5c3a7840af3c975e2542db0af81f02e392c1342b71db76419983eba6a27bf0bc46648bde166c0e77af4abb7550b24ef294a3334fc934be11a8e9ddc45fbe2aebba601bf506ab52bbc4cfc4a72b0c8cb991bf99593b4ae1d43bd836d2a83b46bf935dde1ceb3e8acf10eba8644f58a62631c12e01853eb2fa788197aa9a7af5ded0b99f02b7659d1a8ff5145994e1140a933ae27b21a0a806879ed6e39dc0ccf025aaf25d3847e1fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x1040, 0x4, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x86}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x90}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x4}}}}, @m_nat={0x9c, 0xa, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x37c1, 0x3, 0x20000000, 0x8001, 0x2}, @multicast2, @local, 0xff}}]}, {0x49, 0x6, "26d97343f3960d8f9bf529cb26376d8f471adf6a9e738a890c20528bc69838eaafc73b77ad87e6b043695ee06aae3589f9941d5115a17c2c230e9cb7258f5569798a1c8e5c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x92c, 0x9, 0x0, 0x0, {{0xb}, {0x8a4, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3ef}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x9, 0x2, 0x7, 0x5, 0x3, 0x9, 0x9b, 0xe, 0xffffff00, 0x3, 0x1, 0x8, 0x8001, 0x5b, 0x1000, 0x1, 0xfffffffb, 0xe, 0x7e89, 0x2, 0xd1f, 0x96, 0x9, 0x36, 0x0, 0x1, 0x10, 0x80000001, 0x3ff, 0xd, 0x401, 0x800, 0x2, 0x1, 0x24c0, 0x5, 0xfffffff9, 0x1, 0x2, 0xfff, 0x9, 0x401, 0xffffe4e2, 0x6, 0x80000001, 0x1e10, 0x1, 0x3, 0x5, 0xffff, 0x8, 0x7, 0x80000000, 0x7, 0xa, 0x8c, 0x800, 0x5, 0x1, 0x8, 0x7, 0x3ff, 0x9, 0x1c7, 0x8000, 0x9, 0x30000, 0x7fff, 0x80000001, 0xfc, 0x800, 0x6, 0x9, 0x5, 0x0, 0x4, 0x1, 0xfe, 0x4, 0x5, 0x37a7, 0x10001, 0x8000, 0x8, 0x6d5e, 0x800, 0x20000000, 0x3, 0xe, 0x100, 0x5c, 0x4, 0x0, 0x7, 0xfffffe00, 0x1, 0x4, 0x3, 0xcd1, 0x8, 0xb, 0x5, 0x1, 0x9, 0x2, 0x1c1, 0x400, 0x3, 0x8, 0x8, 0xfff, 0xb, 0x2, 0x0, 0x2, 0x2, 0xb, 0x100, 0xffffffff, 0x4, 0x8, 0x8, 0x1ff, 0x2ff, 0x466, 0x1, 0x53, 0x0, 0x2, 0x6, 0x7ff, 0xf, 0x9, 0x400, 0x3, 0x0, 0x9, 0xfff, 0x81, 0x401, 0x5e04, 0xa000, 0x5, 0x4, 0x81, 0x1, 0xfffffff9, 0x1, 0x2c, 0x9, 0x9, 0x2, 0xff, 0x5, 0x5, 0x3, 0x40, 0x67, 0x1000, 0x80, 0x1ff, 0x2, 0x7, 0x8, 0x3, 0x7, 0x3, 0x200, 0xf, 0x0, 0x40, 0x2, 0xf110, 0x1, 0x59, 0x9, 0x2, 0x7fff, 0x8001, 0x986d, 0x8, 0x8a23, 0x4080, 0xf, 0x2, 0x5, 0x8, 0x9, 0xf, 0x1, 0x3, 0xff, 0x200, 0x7bc9, 0x8, 0x1, 0x2, 0x10, 0x6, 0x7, 0x2, 0x7fffffff, 0x4, 0x5, 0x1000, 0xfff, 0x8, 0x6, 0x401, 0x2, 0x5, 0xff, 0x5, 0x0, 0x0, 0xf, 0x9, 0x9, 0x9d1, 0x7, 0x10000, 0x86, 0x7, 0x5, 0x9, 0x1, 0x7, 0xfffff800, 0x0, 0x8, 0x5, 0x6, 0xfffffff8, 0x633a, 0xd8, 0x4, 0x401, 0x8, 0x8, 0x8, 0x80, 0x65, 0x1, 0xf0, 0x1, 0xfffffffb, 0x9, 0xfffffffd, 0x4, 0x9, 0x65, 0x8, 0x10000, 0xfffffff8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0xfffffffd, 0x42, 0x7, 0x4, 0x14, 0x400, 0x9, 0x0, 0xffffff81, 0x6, 0xde, 0x9, 0x4, 0x3ff, 0x8a, 0x443, 0x65, 0xfffffffc, 0x5, 0x1e, 0xfff, 0x7, 0x7, 0xf, 0x40, 0x5, 0x76, 0xfffffffa, 0x2, 0x7f, 0x7, 0x2, 0x8, 0x7, 0x0, 0xb, 0x9, 0x0, 0x4, 0xf35, 0x2, 0x6, 0x5, 0x10001, 0x8, 0xecf, 0x1, 0x4, 0x8, 0xfffffff4, 0x7fff, 0x8, 0x100, 0x8, 0x101, 0xfffff800, 0x35, 0x8, 0x0, 0xffff, 0xfff, 0x3, 0x52f4, 0x9, 0x2, 0x8, 0x4, 0x4, 0x7, 0x6, 0x72, 0xa, 0x5, 0x5, 0x6, 0x0, 0x2, 0x5, 0x81, 0x0, 0x1, 0x90, 0x3ff, 0xc2, 0x5, 0x400, 0x10000, 0x0, 0x9, 0x2, 0x1, 0xff, 0x8, 0x2, 0x5, 0xd3e, 0x40, 0x9, 0x4, 0x4, 0x401, 0x3, 0x4a, 0x200, 0x80000001, 0x1a6b, 0x3, 0x7, 0x43, 0x5, 0x21, 0x400, 0x3, 0x5, 0x2, 0x40, 0x7, 0x5, 0x9f, 0x1, 0x1ff, 0x8, 0x0, 0xffffffff, 0x1000, 0x0, 0x0, 0x0, 0xf, 0x6, 0xe, 0x3, 0x3, 0x1958, 0x4, 0x4, 0x10, 0x4, 0x7, 0x63, 0x2, 0x6, 0x10, 0x2, 0x101, 0x4, 0x10001, 0x0, 0x0, 0x8, 0x2, 0x1, 0x10, 0x7, 0x80000000, 0x0, 0x7, 0x400, 0x78f1b89b, 0x4, 0x0, 0x1, 0x6, 0x533, 0xffff, 0x2, 0x2, 0x0, 0xfffffffa, 0x6, 0x7e, 0x24, 0x4, 0x5, 0xffff9cb8, 0x1, 0x7cd6, 0x4, 0x10001, 0x40, 0x3, 0x4, 0x3, 0x5, 0x5de, 0xffffffff, 0xfffffffa, 0x8, 0x100, 0x0, 0x6, 0xffff, 0x2fee, 0xe, 0x3, 0x200, 0x0, 0x400, 0x2b5c, 0x0, 0xa3e, 0x46, 0x2a, 0x200, 0xfffffff7, 0xf, 0x4, 0x4, 0x7fffffff, 0x3, 0xffffffff, 0x7, 0x3, 0x9, 0x1000, 0x9, 0x9, 0x7, 0x8000, 0x8, 0x80c1, 0x7fa, 0x8, 0x1, 0x3, 0x80, 0x6, 0x4, 0x7, 0x80000000, 0x5ab2, 0x407, 0x8, 0x0, 0x4d5b, 0xffff3df9, 0x1ff, 0x8000, 0x3, 0x20000000, 0x401, 0xd1a, 0x0, 0xff, 0x8, 0xfb, 0x7, 0x2, 0x0, 0xf3a, 0x2, 0x1, 0xd7c, 0x312c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x28f3cb43, 0x0, 0x1, 0x4, 0x0, {0x1, 0x1, 0x6, 0x7, 0x2, 0x6}, {0x64, 0x2, 0xf, 0x6, 0x2, 0xffffffff}, 0x2, 0x5, 0x2}}, @TCA_POLICE_RESULT={0x8}]]}, {0x5f, 0x6, "08d8c9ce12ac1c751db1c8b153e0197b9354d6c68dcefdc8594a1d8194d0f9a8bbb8ddddb574e5fe8447704e5676eaba95ea726206d07ebedecb9adbe9fcf2b4f7921b8a8410cfc22adfa7dc2230e14c567b5fd189d5323e2e002d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}]}]}}]}, 0x280c}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x845}, 0x4c14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000440)={0x1, 0x2, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000180)=0x100000001, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0xffffffc3) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000004c0)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000500), 0x4) sendto$inet(r2, &(0x7f0000000540), 0xffffffffffffff94, 0xb, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000000640)='./dev\x00', &(0x7f0000000680)='devtmpfs\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000600), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000780)={0xd, 0x0, 0x6, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000007c0)={0x2, 0x1, 0x3, 0x4, 0x4}) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x47, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904"], 0x0) executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0100001000010000000000ffdbdf25e0000001000000000000000000000000ac1414140000000000000000000000000000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000584d32000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000040100000027bd7000000000000a00050000000000930000001c001700000000000000001f000000000000000000000000040000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000500210001"], 0x15c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x7800, 0x8000, 0x87, 0x1, {{0x37, 0x4, 0x1, 0x34, 0xdc, 0x64, 0x0, 0xb, 0x2f, 0x0, @local, @loopback, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xb9, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0x93, 0x1, 0x8, [{@private=0xa010100, 0xfffffff9}, {@local, 0x3}, {@multicast1, 0x5}, {@broadcast, 0xa8c}, {@local, 0x8}, {@multicast1, 0x7fffffff}, {@local, 0xfffffffb}]}, @ssrr={0x89, 0x7, 0x48, [@empty]}, @generic={0x94, 0x11, "bdab867cb14240ea5de2a9228f0b2a"}, @timestamp_addr={0x44, 0x2c, 0x65, 0x1, 0x0, [{@empty, 0x9}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast2, 0x1}]}, @timestamp_prespec={0x44, 0x3c, 0xaf, 0x3, 0x0, [{@private=0xa010100, 0x9}, {@multicast1, 0x4}, {@multicast1, 0x100}, {@rand_addr=0x64010101, 0x8001}, {@loopback, 0x8}, {@local, 0xd8ef}, {@broadcast, 0x1}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, r1, 0x25, 0x2, @void}, 0x10) executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) file_setattr(r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800, 0xfffffdfe, 0x881}, 0x18, 0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000003c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001400)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="18081c0000000102000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300008520000000000000b7020000000000007b9af0ff00000000c509000000010000c3aaf0fff1000000bf8600000000000016080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000045000900000000000000030003000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000004) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000738856d5a3489d0b000008000300", @ANYRES32=r4, @ANYBLOB="080005"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) fanotify_mark(0xffffffffffffffff, 0x1, 0x8100011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000340)=@raw=[@kfunc={0x85, 0x0, 0x2, 0xfd9, 0x2}], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) executing program 1: timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = mq_open(&(0x7f0000000040)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f00000000c0)={0x0, 0x1, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedreceive(r0, &(0x7f00000001c0)=""/107, 0x6b, 0x0, &(0x7f0000000240)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000006c0)="ad00"/16, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48805}, 0xc004) executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DM_GET_TARGET_VERSION(r0, 0xc138fd11, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x238, 0x138, 0x0, 0x0, 0x200, 0x0, 0x0, {0x0, 'multipath\x00'}, "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"}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000bc0), 0x18b882, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c00)={&(0x7f0000542000/0x4000)=nil, &(0x7f00001c0000/0x1000)=nil, &(0x7f00005b9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000063000/0x4000)=nil, &(0x7f00003c5000/0x2000)=nil, &(0x7f0000276000/0x2000)=nil, &(0x7f0000035000/0x1000)=nil, &(0x7f00000a4000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00002a4000/0x2000)=nil, &(0x7f0000000ac0)="e5a7a6dcecae7b7d5007276b40a93bd525827c710c7c9b64769107a8282b942faaf826f615f2d6f5a41a7f5e5a71b5ff6cac5433c4a1da96b627741da842a0d754156d40062583debda910a10a44d880e2e9915f84750bdb5ec72aa37d930ec62c812f7775b5c5a896720e3a69622139a96de032209b0dfa0517ea794e04ff663e9bf6517fd905c6273b4b40965bd8f9661de97b2e9f5a915c4fee731ab26f5d211f717249e8155b27879ba91d65e78d62a30c3b45860fc1b6861d91b04e970df83645d3d6", 0xc5, r2}, 0x68) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) r5 = semget$private(0x0, 0x0, 0x15) semctl$SETVAL(r5, 0x4, 0x10, &(0x7f0000000880)=0x8a2) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x6, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x1, 0x0, 0x0, 0x3}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x0, 0x0, 0x2000000}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000a80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@bridge_delneigh={0x7c, 0x1d, 0x20, 0x70bd28, 0x25dfdbfb, {0x1c, 0x0, 0x0, r4, 0x4, 0xf0, 0xa}, [@NDA_DST_MAC={0xa, 0x1, @random="54e9e084bff2"}, @NDA_PROTOCOL={0x5, 0xc, 0x2}, @NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NDA_PROBES={0x8, 0x4, 0xff}, @NDA_FDB_EXT_ATTRS={0x30, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xe}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x90}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x8}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0xdde60a74e15d9cd4) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x2) write$P9_RLERRORu(r0, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="30943500142b7c7ba4b90a07bc06f5924102e29c5a02b0af87435cbcd39e74e54ee8d8312089a076cf87274d923c11f248c2cb0b7ac1bd"], 0x10) write$9p(r0, &(0x7f00000004c0)="a1", 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380000001214010028bd01800000df250800030001004c783f42b24a7b000008004b00130000000800618c9105febb6c2f9b30213def15000500000008000147317c51eb4dd8c163dfb7d56fe91299a819fd813f0914b7e315d8ad0785c68b8f86a442bfb61dae980013db9d66d4768624e343b6d11183b269acda82742b4e9be793ebebb00ecf8ecc1417613505e2625d500870206d702a9491965ee6cad83f1bb9d92fb6c2c335bbb68ba1924ddd7a50f87dd8dfb7429a9659e2f58d47159212d611be1884d4e34a8800581ede174659c8a884ead2"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0xff461abd5ab5ef62) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x4004, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x82, 0x0) write(r9, &(0x7f00000005c0)='3', 0x4e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)=[0x6], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x5961, 0x80, 0x0, 0x4e}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000340)=@IORING_OP_PIPE={0x3e, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, {0x0, 0x0, 0xffffffff}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x3fa, 0x4) mount(0x0, 0x0, 0x0, 0x8410, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000004c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'ip6_vti0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000540)="10031200e0ff020002004788aa96ec9ea021e90f40ce7f451a00", 0xfffffffffffffe6b, 0x10040, &(0x7f0000000580)={0x11, 0xf6, r6, 0x1, 0x6, 0x6, @link_local}, 0x14) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000440)={0xffffffffffffffff}, 0x106, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r8, &(0x7f0000000480)={0xb, 0x10, 0xfa00, {0x0, r9, 0x3}}, 0x18) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c) listen(r7, 0xb) listen(r0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x5}}, 0x26) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000480)={r0, &(0x7f0000000380)='batadv\x00', 0x101000, &(0x7f00000003c0)={@align=0x9, {0x7, 0x800, 0x8001, 0x8}}, 0x5, &(0x7f0000000400), &(0x7f0000000440)=0x1}) r4 = socket$netlink(0x10, 0x3, 0x0) sendto(r4, &(0x7f00000002c0)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020003000000000000000000000000000000000000001800058014002080080005000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000002c0)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000004c0)={'veth1_macvtap\x00', 0x800}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r5, 0x0, 0x0, 0x2, 0x0, 0x0) r6 = syz_clone(0x2c000200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0xfffffffffffffff8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r7) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r8, 0x48212b8952c3aff5, 0x70bd27, 0x0, {0xe, 0x0, 0xf0}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x700) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r8, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004111}, 0x844) landlock_restrict_self(0xffffffffffffffff, 0xc) sendto$inet(r5, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program crashed: general protection fault in corrupted single: successfully extracted reproducer found reproducer with 21 syscalls minimizing guilty program testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000800100000a20000000080a01030000000000000000030000080900010073797a3000000000140000001100010000000000000000000000000a61b8acb20cae6358213a9b114c4c77259a1704613d6828fac4c2ec1807515b992d56b25aedf2f26100667d8169268d02b2a2f54b51cffc8989542cd689d280ca99b3fcded1ad9c69db041cce4c25524ea9ecdd205b086097a7a62ebc7ee469f22396e855ef78b4f3e15c8f1075e303698a19ab6fa32c89b8ce02098240c524273c3b96350d654e2dce4c74bd14a5a09b6e027ebd384c55c7772f1fc1bec9f0b137f37cbe766c996be2e5dad506cc7d3427e386a32362d1f1436192d4718536da66411cc1cb"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) write(0xffffffffffffffff, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000800100000a20000000080a01030000000000000000030000080900010073797a3000000000140000001100010000000000000000000000000a61b8acb20cae6358213a9b114c4c77259a1704613d6828fac4c2ec1807515b992d56b25aedf2f26100667d8169268d02b2a2f54b51cffc8989542cd689d280ca99b3fcded1ad9c69db041cce4c25524ea9ecdd205b086097a7a62ebc7ee469f22396e855ef78b4f3e15c8f1075e303698a19ab6fa32c89b8ce02098240c524273c3b96350d654e2dce4c74bd14a5a09b6e027ebd384c55c7772f1fc1bec9f0b137f37cbe766c996be2e5dad506cc7d3427e386a32362d1f1436192d4718536da66411cc1cb"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000800100000a20000000080a01030000000000000000030000080900010073797a3000000000140000001100010000000000000000000000000a61b8acb20cae6358213a9b114c4c77259a1704613d6828fac4c2ec1807515b992d56b25aedf2f26100667d8169268d02b2a2f54b51cffc8989542cd689d280ca99b3fcded1ad9c69db041cce4c25524ea9ecdd205b086097a7a62ebc7ee469f22396e855ef78b4f3e15c8f1075e303698a19ab6fa32c89b8ce02098240c524273c3b96350d654e2dce4c74bd14a5a09b6e027ebd384c55c7772f1fc1bec9f0b137f37cbe766c996be2e5dad506cc7d3427e386a32362d1f1436192d4718536da66411cc1cb"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(0xffffffffffffffff, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000800100000a20000000080a01030000000000000000030000080900010073797a3000000000140000001100010000000000000000000000000a61b8acb20cae6358213a9b114c4c77259a1704613d6828fac4c2ec1807515b992d56b25aedf2f26100667d8169268d02b2a2f54b51cffc8989542cd689d280ca99b3fcded1ad9c69db041cce4c25524ea9ecdd205b086097a7a62ebc7ee469f22396e855ef78b4f3e15c8f1075e303698a19ab6fa32c89b8ce02098240c524273c3b96350d654e2dce4c74bd14a5a09b6e027ebd384c55c7772f1fc1bec9f0b137f37cbe766c996be2e5dad506cc7d3427e386a32362d1f1436192d4718536da66411cc1cb"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program crashed: BUG: spinlock bad magic in corrupted testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) (async) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program crashed: general protection fault in corrupted testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000800100000a20000000080a01030000000000000000030000080900010073797a3000000000140000001100010000000000000000000000000a61b8acb20cae6358213a9b114c4c77259a1704613d6828fac4c2ec1807515b992d56b25aedf2f26100667d8169268d02b2a2f54b51cffc8989542cd689d280ca99b3fcded1ad9c69db041cce4c25524ea9ecdd205b086097a7a62ebc7ee469f22396e855ef78b4f3e15c8f1075e303698a19ab6fa32c89b8ce02098240c524273c3b96350d654e2dce4c74bd14a5a09b6e027ebd384c55c7772f1fc1bec9f0b137f37cbe766c996be2e5dad506cc7d3427e386a32362d1f1436192d4718536da66411cc1cb"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program crashed: KASAN: use-after-free Read in __remove_hrtimer testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000800100000a20000000080a01030000000000000000030000080900010073797a3000000000140000001100010000000000000000000000000a61b8acb20cae6358213a9b114c4c77259a1704613d6828fac4c2ec1807515b992d56b25aedf2f26100667d8169268d02b2a2f54b51cffc8989542cd689d280ca99b3fcded1ad9c69db041cce4c25524ea9ecdd205b086097a7a62ebc7ee469f22396e855ef78b4f3e15c8f1075e303698a19ab6fa32c89b8ce02098240c524273c3b96350d654e2dce4c74bd14a5a09b6e027ebd384c55c7772f1fc1bec9f0b137f37cbe766c996be2e5dad506cc7d3427e386a32362d1f1436192d4718536da66411cc1cb"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000006c0), 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x10000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r3, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program crashed: general protection fault in corrupted testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, 0x0, &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', 0x0, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x48}}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program crashed: general protection fault in __hrtimer_run_queues testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, 0x0, 0x0) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0), 0x0) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, 0x0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (rerun: 64) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program crashed: general protection fault in __run_timers testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async) syz_emit_ethernet(0x4e, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(0x0, 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000007c0)) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program crashed: general protection fault in __run_timers testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program crashed: general protection fault in corrupted testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) preadv(r3, 0x0, 0x0, 0x7ffc, 0x0) program did not crash testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) preadv(r3, &(0x7f00000000c0)=[{0x0}], 0x1, 0x7ffc, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv program crashed: general protection fault in corrupted simplifying C reproducer testing compiled C program (duration=48.9239582s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv program did not crash testing compiled C program (duration=48.9239582s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv program did not crash testing compiled C program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv program did not crash testing compiled C program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv program did not crash testing compiled C program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv program crashed: BUG: unable to handle kernel paging request in corrupted a never seen crash title: BUG: unable to handle kernel paging request in corrupted, ignore testing compiled C program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv program crashed: BUG: spinlock bad magic in try_to_wake_up a never seen crash title: BUG: spinlock bad magic in try_to_wake_up, ignore testing compiled C program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv program crashed: general protection fault in rcu_core a never seen crash title: general protection fault in rcu_core, ignore testing compiled C program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv program crashed: KASAN: null-ptr-deref Write in nsim_fib_event_work a never seen crash title: KASAN: null-ptr-deref Write in nsim_fib_event_work, ignore testing compiled C program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv program crashed: BUG: spinlock bad magic in try_to_wake_up a never seen crash title: BUG: spinlock bad magic in try_to_wake_up, ignore testing compiled C program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv program did not crash testing compiled C program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv program crashed: BUG: unable to handle kernel paging request in __remove_hrtimer a never seen crash title: BUG: unable to handle kernel paging request in __remove_hrtimer, ignore testing compiled C program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv program did not crash testing compiled C program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv program crashed: general protection fault in corrupted testing compiled C program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv program did not crash testing compiled C program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv program did not crash testing compiled C program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv program crashed: general protection fault in corrupted testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program crashed: BUG: spinlock bad magic in try_to_wake_up validation run: crashed=true testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash validation run: crashed=false testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash validation run: crashed=false testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program did not crash validation run: crashed=false testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program crashed: BUG: unable to handle kernel paging request in corrupted validation run: crashed=true testing program (duration=48.9239582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-lseek-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-openat-openat$fuse-mount$fuse-mount-socket$nl_netfilter-sendmsg$NFT_BATCH-openat-write-write$binfmt_format-syz_emit_ethernet-openat$procfs-syz_open_dev$usbfs-ioctl$USBDEVFS_IOCTL-preadv detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000500)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x7ffc, 0x0) program crashed: general protection fault in psi_task_change validation run: crashed=true reproducing took 1h13m58.357887414s repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000033: 0000 [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000198-0x000000000000019f] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:cgroup_ino include/linux/cgroup.h:724 [inline] RIP: 0010:cgroup_psi include/linux/psi.h:39 [inline] RIP: 0010:task_psi_group kernel/sched/psi.c:884 [inline] RIP: 0010:task_psi_group kernel/sched/psi.c:880 [inline] RIP: 0010:psi_task_change+0x20f/0x530 kernel/sched/psi.c:916 Code: 03 80 3c 02 00 0f 85 ff 02 00 00 4d 8b bd 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d bf a0 01 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e0 02 00 00 4d 8b af a0 01 00 00 48 ba 00 00 00 RSP: 0018:ffffc900006a0c68 EFLAGS: 00010007 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001 RDX: 0000000000000033 RSI: ffffffff8e60120c RDI: 000000000000019f RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 R13: ffff888054570000 R14: 0000000000000001 R15: ffffffffffffffff FS: 0000000000000000(0000) GS:ffff8880d457c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5894989140 CR3: 00000000372ab000 CR4: 0000000000352ef0 Call Trace: psi_enqueue kernel/sched/stats.h:159 [inline] enqueue_task+0x1dc/0x4f0 kernel/sched/core.c:2199 activate_task kernel/sched/core.c:2237 [inline] ttwu_do_activate+0x174/0x800 kernel/sched/core.c:3897 ttwu_queue kernel/sched/core.c:4150 [inline] try_to_wake_up+0xce0/0x1ca0 kernel/sched/core.c:4488 hrtimer_wakeup+0x47/0x60 kernel/time/hrtimer.c:2335 __run_hrtimer kernel/time/hrtimer.c:2079 [inline] __hrtimer_run_queues+0x448/0x9a0 kernel/time/hrtimer.c:2136 hrtimer_interrupt+0x441/0xaa0 kernel/time/hrtimer.c:2255 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1051 [inline] __sysvec_apic_timer_interrupt+0x109/0x470 arch/x86/kernel/apic/apic.c:1068 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0x9e/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: 67 a1 02 e9 43 61 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 7d 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 RSP: 0018:ffffc90000177e00 EFLAGS: 00000206 RAX: 000000000003cdf9 RBX: ffff88802069a580 RCX: ffffffff8bee4325 RDX: 0000000000000001 RSI: ffffffff8e628221 RDI: ffffffff8c835380 RBP: ffffed10040d34b0 R08: 0000000000000001 R09: ffffed100d426825 R10: ffff88806a13412b R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 1ffff9200002efc4 R15: dffffc0000000000 arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline] default_idle+0x9/0x10 arch/x86/kernel/process.c:768 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x3ae/0x5b0 kernel/sched/idle.c:355 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:458 start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x158 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:cgroup_ino include/linux/cgroup.h:724 [inline] RIP: 0010:cgroup_psi include/linux/psi.h:39 [inline] RIP: 0010:task_psi_group kernel/sched/psi.c:884 [inline] RIP: 0010:task_psi_group kernel/sched/psi.c:880 [inline] RIP: 0010:psi_task_change+0x20f/0x530 kernel/sched/psi.c:916 Code: 03 80 3c 02 00 0f 85 ff 02 00 00 4d 8b bd 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d bf a0 01 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e0 02 00 00 4d 8b af a0 01 00 00 48 ba 00 00 00 RSP: 0018:ffffc900006a0c68 EFLAGS: 00010007 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001 RDX: 0000000000000033 RSI: ffffffff8e60120c RDI: 000000000000019f RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 R13: ffff888054570000 R14: 0000000000000001 R15: ffffffffffffffff FS: 0000000000000000(0000) GS:ffff8880d457c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5894989140 CR3: 00000000372ab000 CR4: 0000000000352ef0 ---------------- Code disassembly (best guess): 0: 03 80 3c 02 00 0f add 0xf00023c(%rax),%eax 6: 85 ff test %edi,%edi 8: 02 00 add (%rax),%al a: 00 4d 8b add %cl,-0x75(%rbp) d: bd 88 00 00 00 mov $0x88,%ebp 12: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 19: fc ff df 1c: 49 8d bf a0 01 00 00 lea 0x1a0(%r15),%rdi 23: 48 89 fa mov %rdi,%rdx 26: 48 c1 ea 03 shr $0x3,%rdx * 2a: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 e0 02 00 00 jne 0x314 34: 4d 8b af a0 01 00 00 mov 0x1a0(%r15),%r13 3b: 48 rex.W 3c: ba .byte 0xba 3d: 00 00 add %al,(%rax) final repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000033: 0000 [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000198-0x000000000000019f] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:cgroup_ino include/linux/cgroup.h:724 [inline] RIP: 0010:cgroup_psi include/linux/psi.h:39 [inline] RIP: 0010:task_psi_group kernel/sched/psi.c:884 [inline] RIP: 0010:task_psi_group kernel/sched/psi.c:880 [inline] RIP: 0010:psi_task_change+0x20f/0x530 kernel/sched/psi.c:916 Code: 03 80 3c 02 00 0f 85 ff 02 00 00 4d 8b bd 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d bf a0 01 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e0 02 00 00 4d 8b af a0 01 00 00 48 ba 00 00 00 RSP: 0018:ffffc900006a0c68 EFLAGS: 00010007 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001 RDX: 0000000000000033 RSI: ffffffff8e60120c RDI: 000000000000019f RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 R13: ffff888054570000 R14: 0000000000000001 R15: ffffffffffffffff FS: 0000000000000000(0000) GS:ffff8880d457c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5894989140 CR3: 00000000372ab000 CR4: 0000000000352ef0 Call Trace: psi_enqueue kernel/sched/stats.h:159 [inline] enqueue_task+0x1dc/0x4f0 kernel/sched/core.c:2199 activate_task kernel/sched/core.c:2237 [inline] ttwu_do_activate+0x174/0x800 kernel/sched/core.c:3897 ttwu_queue kernel/sched/core.c:4150 [inline] try_to_wake_up+0xce0/0x1ca0 kernel/sched/core.c:4488 hrtimer_wakeup+0x47/0x60 kernel/time/hrtimer.c:2335 __run_hrtimer kernel/time/hrtimer.c:2079 [inline] __hrtimer_run_queues+0x448/0x9a0 kernel/time/hrtimer.c:2136 hrtimer_interrupt+0x441/0xaa0 kernel/time/hrtimer.c:2255 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1051 [inline] __sysvec_apic_timer_interrupt+0x109/0x470 arch/x86/kernel/apic/apic.c:1068 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0x9e/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: 67 a1 02 e9 43 61 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 7d 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 RSP: 0018:ffffc90000177e00 EFLAGS: 00000206 RAX: 000000000003cdf9 RBX: ffff88802069a580 RCX: ffffffff8bee4325 RDX: 0000000000000001 RSI: ffffffff8e628221 RDI: ffffffff8c835380 RBP: ffffed10040d34b0 R08: 0000000000000001 R09: ffffed100d426825 R10: ffff88806a13412b R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 1ffff9200002efc4 R15: dffffc0000000000 arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline] default_idle+0x9/0x10 arch/x86/kernel/process.c:768 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x3ae/0x5b0 kernel/sched/idle.c:355 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:458 start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x158 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:cgroup_ino include/linux/cgroup.h:724 [inline] RIP: 0010:cgroup_psi include/linux/psi.h:39 [inline] RIP: 0010:task_psi_group kernel/sched/psi.c:884 [inline] RIP: 0010:task_psi_group kernel/sched/psi.c:880 [inline] RIP: 0010:psi_task_change+0x20f/0x530 kernel/sched/psi.c:916 Code: 03 80 3c 02 00 0f 85 ff 02 00 00 4d 8b bd 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d bf a0 01 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e0 02 00 00 4d 8b af a0 01 00 00 48 ba 00 00 00 RSP: 0018:ffffc900006a0c68 EFLAGS: 00010007 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001 RDX: 0000000000000033 RSI: ffffffff8e60120c RDI: 000000000000019f RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 R13: ffff888054570000 R14: 0000000000000001 R15: ffffffffffffffff FS: 0000000000000000(0000) GS:ffff8880d457c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5894989140 CR3: 00000000372ab000 CR4: 0000000000352ef0 ---------------- Code disassembly (best guess): 0: 03 80 3c 02 00 0f add 0xf00023c(%rax),%eax 6: 85 ff test %edi,%edi 8: 02 00 add (%rax),%al a: 00 4d 8b add %cl,-0x75(%rbp) d: bd 88 00 00 00 mov $0x88,%ebp 12: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 19: fc ff df 1c: 49 8d bf a0 01 00 00 lea 0x1a0(%r15),%rdi 23: 48 89 fa mov %rdi,%rdx 26: 48 c1 ea 03 shr $0x3,%rdx * 2a: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 e0 02 00 00 jne 0x314 34: 4d 8b af a0 01 00 00 mov 0x1a0(%r15),%r13 3b: 48 rex.W 3c: ba .byte 0xba 3d: 00 00 add %al,(%rax)