ING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) 22:15:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000bc0)={'tunl0\x00', &(0x7f0000000b40)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast1, {[@generic={0x0, 0x2}]}}}}}) 22:15:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, {0x2, 0x0, @empty}, 0x24, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='pimreg0\x00'}) 22:15:44 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x4, &(0x7f00000011c0)=@raw=[@cb_func, @func, @call], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, 0x0, 0x101}, 0x14}}, 0x0) 22:15:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 22:15:44 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff}, 0xc) sendmmsg$inet6(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x2f0}}], 0x1, 0x0) 22:15:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x40, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x4}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}]}, 0x40}}, 0x0) 22:15:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={0x0}}, 0x0) 22:15:45 executing program 3: syz_emit_ethernet(0x32, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv4={0x8035, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @multicast2}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "a36c2f", 0x0, "d4d0fa"}}}}}}, 0x0) 22:15:45 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:45 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000001bc0)={0xfffffffffffffffe, 0x0, 0x0}, 0x0) 22:15:45 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @multicast2=0xe0000001}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "a36c2f", 0x0, "d4d0fa"}}}}}}, 0x0) 22:15:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x38, 0x2, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}]}, 0x38}}, 0x0) 22:15:45 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 468.833158][ T6439] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 22:15:45 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x4, &(0x7f0000001000)=@framed={{}, [@exit]}, &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001140), 0x10}, 0x80) 22:15:45 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x3c, 0x0, @remote, @multicast2}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "a36c2f", 0x0, "d4d0fa"}}}}}}, 0x0) 22:15:45 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0xc, &(0x7f0000001000)=@framed={{}, [@exit, @map_idx, @initr0, @map_idx_val, @btf_id]}, &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001140), 0x10}, 0x80) 22:15:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48) 22:15:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003300)=[{{&(0x7f0000000040)={0x2, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x1, 0x0) 22:15:45 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:45 executing program 3: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x69]}, 0x8) 22:15:45 executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @multicast2}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "a36c2f", 0x0, "d4d0fa"}}}}}}, 0x0) [ 469.004157][ T6459] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 22:15:45 executing program 0: r0 = epoll_create1(0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) [ 469.045657][ T6459] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 22:15:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="1200000000000000290000000b000000620000000000000014"], 0x30}, 0x0) 22:15:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x40, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x4}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}]}, 0x40}}, 0x0) 22:15:45 executing program 1: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) pipe(&(0x7f00000011c0)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[r0, 0xffffffffffffffff, 0x1]}, 0x80) pipe(0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002c40)) 22:15:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="12000000000000002900000074bd0016620000000000000014"], 0x30}, 0x0) 22:15:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8990, &(0x7f0000000600)={'syztnl0\x00', 0x0}) 22:15:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x48, 0x0, &(0x7f0000000080)) 22:15:45 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="40010000100a05"], 0x140}}, 0x0) 22:15:45 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000008800)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000001400)=[{0x0}, {&(0x7f00000000c0)=' ', 0x1}], 0x2}}], 0x1, 0x0) [ 469.208230][ T6476] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 22:15:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 22:15:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000002380)=ANY=[], 0xf}, 0x0) 22:15:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 22:15:45 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 469.370566][ T6493] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.1'. 22:15:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_MASK={0x8}]}, 0x2c}}, 0x0) 22:15:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8942, &(0x7f0000000600)={'syztnl0\x00', 0x0}) 22:15:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x306}}], 0x1, 0x0) 22:15:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8917, &(0x7f0000000600)={'syztnl0\x00', 0x0}) 22:15:45 executing program 1: syz_emit_ethernet(0x5e, &(0x7f0000000480)={@local, @local, @val, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "410685f98197020eecd25ba73c617e9491167fe14465649c35f280a29e882047fde93befa2ddac98b0b631740045a66f0da4350e637fa1574d15ba9a01f58c3a"}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @multicast2}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "a36c2f", 0x0, "d4d0fa"}}}}}}, 0x0) 22:15:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89a1, &(0x7f0000000600)={'syztnl0\x00', 0x0}) 22:15:45 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:46 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x4, &(0x7f00000011c0)=@raw=[@func, @call, @map_fd], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="04d7f7f0", @ANYRES32=0x1, @ANYBLOB="0000000000000000023177012e18000018120000", @ANYRES64, @ANYBLOB="000000000000000018260000", @ANYRES32, @ANYBLOB="0000000087000000cc66c1ff0000000018300000030000000000000000000000186a0000020000000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0xdf, &(0x7f0000000100)=""/223, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x5, 0x82}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) 22:15:46 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f00000011c0)=@raw=[@btf_id={0x18, 0x5}, @map_fd, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @func, @call={0x85, 0x0, 0x0, 0xb}, @map_fd], &(0x7f0000001240)='syzkaller\x00', 0xb2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[0xffffffffffffffff, 0x1]}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) 22:15:46 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x0, 0x0, 0x0, &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:46 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000bc0)={'tunl0\x00', &(0x7f0000000b40)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) 22:15:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003300)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x18, 0x0, 0x0, &(0x7f0000000700)=[@tclass={{0x14}}, @hopopts_2292={{0x18}}], 0x30}}], 0x1, 0x0) 22:15:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) 22:15:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 22:15:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000008800)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000001400)=[{0x0}, {&(0x7f00000000c0)=' ', 0x1}, {0x0}, {&(0x7f0000000200)="ab", 0x1}], 0x4}}], 0x1, 0x0) 22:15:46 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x2, 0x0, 0x0, 0x0) 22:15:46 executing program 3: syz_emit_ethernet(0x32, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2b, 0x0, @remote, @multicast2}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "a36c2f", 0x0, "d4d0fa"}}}}}}, 0x0) 22:15:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) [ 470.436242][ T6536] Zero length message leads to an empty skb 22:15:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}}, 0x0) 22:15:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, 0x1, 0xa, 0x3}, 0x14}}, 0x0) 22:15:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="1800000000000000010000003d000000620000000000000014"], 0x30}, 0x0) 22:15:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, 0x1, 0x6, 0x3}, 0x14}}, 0x0) 22:15:46 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003300)=[{{&(0x7f0000000040)={0x41, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x1, 0x0) 22:15:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=')', 0x1}], 0x1}}], 0x1, 0xc004) 22:15:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x3, &(0x7f00000011c0)=@raw=[@call, @map_fd], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x2c, 0x2, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}]}, 0x2c}}, 0x0) 22:15:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00)'], 0x128}, 0x0) 22:15:47 executing program 3: r0 = epoll_create1(0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x2, 0x0) 22:15:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@gettclass={0x24}, 0x24}}, 0x0) 22:15:47 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:47 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv4={0x800, @dccp={{0x4, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @multicast2}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "a36c2f", 0x0, "d4d0fa"}}}}}}, 0x0) 22:15:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8921, &(0x7f0000000600)={'syztnl0\x00', 0x0}) 22:15:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003300)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@tclass={{0x14}}, @hopopts_2292={{0x18}}, @rthdr={{0x18}}], 0x48}}], 0x1, 0x0) 22:15:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="18000000000000000100000037000000620000000000000014"], 0x30}, 0x0) [ 471.200879][ T6566] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 22:15:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000008800)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000040)="cd07a340391e1a731ef6d1fdd6f82e35a0f1675a2988c0b391744d1c0267de33fb0ead7056551acafc7ac73dd3ccfce9ec26a6f3252383668bd37a41f6d7651c17c4aa1a78c3577366f43251b14d63d7e0deb3c8", 0x54}, {&(0x7f00000000c0)="202aed2f7ef115cbb40c8b5d85830c06e2f3b7aa3a889fd2a9b2d18a954dd4be", 0x20}, {&(0x7f0000000100)="a459273bc9a3d4f536b70d289c9968698c9a0cc4bed599a89a7e09838d895f33691075b757be4b9f5dd0207f81821e14aa13f82497e8d7a84dcc6d2df6fef06622b16823f16337e53cde826b6962a1edc7725a30704970e0bebcd6168d0279e34fd778e5ce36f82b61645f73425c284482ace3d3dc36ac2ee2aff039b9b6d6df2f01a4c83eb8537bf3edd708196ae54fb5479e05698017a8", 0x98}, {&(0x7f0000000200)="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", 0x3c4}], 0x4}}], 0x1, 0x0) 22:15:47 executing program 1: r0 = epoll_create1(0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x4020940d, 0x0) 22:15:47 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x2, 0xdf, &(0x7f0000000100)=""/223, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xfffffd62}, 0x14}}, 0x0) 22:15:47 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="04d7f7f0", @ANYRES32=0x1, @ANYBLOB="0000000000000000023177012e18000018120000", @ANYRES64, @ANYBLOB="000000000000000018260000", @ANYRES32, @ANYBLOB="0000000087000000cc66c1ff0000000018300000030000000000000000000000186a0000020000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0xdf, &(0x7f0000000100)=""/223, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x5, 0x82}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) 22:15:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x1600bd5f, 0x0, &(0x7f0000000080)) 22:15:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x30, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0xb}]}]}, 0x30}}, 0x0) 22:15:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8930, &(0x7f0000000600)={'syztnl0\x00', 0x0}) 22:15:47 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) 22:15:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8912, &(0x7f0000000600)={'syztnl0\x00', 0x0}) 22:15:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="40010000040a05"], 0x140}}, 0x0) [ 471.600398][ T6602] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.1'. 22:15:48 executing program 2: r0 = socket(0x1, 0x2, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 22:15:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x1600bd61, 0x0, &(0x7f0000000080)) 22:15:48 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:48 executing program 0: r0 = epoll_create1(0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x40049409, 0x0) 22:15:48 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f00000011c0)=@raw=[@btf_id, @map_fd, @alu={0x0, 0x0, 0x0, 0xb, 0x8, 0x0, 0x8}, @cb_func={0x18, 0x7}, @func, @call, @map_fd], &(0x7f0000001240)='syzkaller\x00', 0xb2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0), 0x10}, 0x80) 22:15:48 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="18000000000000000100000002000000620000000000000014"], 0x30}, 0x0) 22:15:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 22:15:48 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000040)) 22:15:48 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x5411, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) 22:15:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x47, 0x0, &(0x7f0000000080)) 22:15:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000080)=0xfffffffffffffea1) 22:15:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000ac0)={'wg2\x00'}) 22:15:48 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 22:15:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 22:15:48 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x5, &(0x7f0000001000)=@framed={{}, [@map_idx]}, &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)}, 0x80) 22:15:48 executing program 2: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000d80)={'syztnl2\x00', &(0x7f0000000d00)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}) 22:15:48 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000001680)=0x3, 0x4) 22:15:48 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x9, &(0x7f00000011c0)=@raw=[@btf_id, @alu, @cb_func, @func, @call, @map_fd], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000880), 0x4) 22:15:48 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10}, 0x10}}, 0x0) 22:15:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="400100000d0a05"], 0x140}}, 0x0) 22:15:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x58, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x58}}, 0x0) 22:15:48 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dontfrag={{0x14}}, @hopopts_2292={{0x18}}], 0x30}}], 0x1, 0x0) 22:15:48 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x4, 0x0, @multicast, "66853f00", @multicast, "1c511c8a"}}}}, 0x0) 22:15:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)=';', 0x1}], 0x1}}], 0x1, 0x0) 22:15:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_timeval(r0, 0x2, 0x0, 0x0, 0x0) [ 472.694749][ T6655] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.0'. [ 472.706565][ T6656] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 472.732231][ T6656] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 22:15:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f00000011c0)=@raw=[@btf_id, @map_fd, @alu, @cb_func, @func, @call={0x85, 0x0, 0x0, 0xb}, @map_fd={0x18, 0xb}], &(0x7f0000001240)='syzkaller\x00', 0xb2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:49 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000008800)=[{{&(0x7f0000000000)={0xa, 0x0, 0x6, @private0}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000040)="cd", 0x1}, {&(0x7f00000000c0)=' ', 0x1}, {&(0x7f0000000100)="a4", 0x1}], 0x3, &(0x7f0000001480)=[@hoplimit={{0x14}}, @hoplimit={{0x14}}], 0x30}}], 0x1, 0x0) 22:15:49 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x6, &(0x7f00000011c0)=@raw=[@cb_func, @func, @call, @map_fd], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14}, 0x14}}, 0xc040) 22:15:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000001000)=@framed, &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:49 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x3, &(0x7f00000011c0)=@raw=[@btf_id, @call], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x38, 0x1, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}]}, 0x38}}, 0x0) 22:15:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x12, 0x0, &(0x7f0000000040)) 22:15:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="04"], &(0x7f00000000c0)='GPL\x00', 0x2, 0xdf, &(0x7f0000000100)=""/223, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003300)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x2}}], 0x1, 0x0) 22:15:49 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 473.084427][ T6679] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 22:15:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x2, &(0x7f00000011c0)=@raw=[@cb_func], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0)={0x0, 0x0, 0x53682858}, 0x10}, 0x80) 22:15:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="12000000000000002900000004000000620000000000000014"], 0x30}, 0x0) [ 473.130463][ T6679] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 22:15:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003300)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x401}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@tclass={{0x14}}, @hopopts_2292={{0x18}}], 0x30}}], 0x1, 0x0) 22:15:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 22:15:50 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x4, &(0x7f00000011c0)=@raw=[@btf_id, @cb_func], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:50 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(0xffffffffffffffff, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:50 executing program 4: r0 = socket(0xa, 0x3, 0x92) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 22:15:50 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:50 executing program 2: syz_emit_ethernet(0x14, &(0x7f0000000000)={@remote, @broadcast, @val={@void, {0x8100, 0x5}}, {@mpls_uc={0x8847, {[], @generic="8aa4"}}}}, 0x0) 22:15:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}]}]}, 0x3c}}, 0x0) 22:15:50 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0) 22:15:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x44, 0x1, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1}}}]}]}, 0x44}}, 0x0) 22:15:50 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(0xffffffffffffffff, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private2, 0x7c}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}], 0x28}}], 0x1, 0x0) 22:15:50 executing program 3: pipe(&(0x7f0000002fc0)) 22:15:50 executing program 2: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, &(0x7f0000001300)) 22:15:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003300)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, 0x0, 0xf7ffff7f}}], 0x1, 0x0) [ 473.999055][ T6711] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 22:15:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8911, &(0x7f0000000300)={'sit0\x00', 0x0}) 22:15:50 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(0xffffffffffffffff, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000bc0)={'tunl0\x00', &(0x7f0000000b40)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast1}}}}) 22:15:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="18000000000000000100000024000000620000000000000014"], 0x30}, 0x0) 22:15:50 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x2, &(0x7f00000011c0)=@raw=[@cb_func], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:50 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x2, &(0x7f00000011c0)=@raw=[@btf_id], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:50 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x3c}, 0x3c}}, 0x0) 22:15:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000001680), 0x4) 22:15:50 executing program 0: syz_emit_ethernet(0x12, &(0x7f0000000000)={@remote, @broadcast, @val={@void}, {@mpls_uc}}, 0x0) 22:15:50 executing program 4: socketpair(0x0, 0x8080c, 0x0, &(0x7f00000002c0)) 22:15:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x80, 0x1, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x48, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0x66, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}]}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}]}, 0x80}}, 0x0) 22:15:50 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:50 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000001300)) 22:15:50 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x8, &(0x7f0000001000)=@framed={{}, [@exit, @map_idx, @initr0]}, &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff]}, 0x80) 22:15:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 22:15:50 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000002c0), 0x10) 22:15:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 22:15:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x1600bd63, 0x0, &(0x7f0000000080)) 22:15:50 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 474.436675][ T6752] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 474.467773][ T6752] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 22:15:50 executing program 0: pipe(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0xa0002000}) 22:15:50 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 22:15:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000bc0)={'tunl0\x00', 0x0}) 22:15:50 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:50 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000040)) 22:15:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000008800)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000040)="cd07a340391e1a731ef6d1fdd6f82e35a0f1675a2988c0b391744d1c0267de33fb0ead7056551acafc7ac73dd3ccfce9ec26a6f3252383668bd37a41f6d7651c17c4aa1a78c3577366f43251b14d63d7e0deb3c8af", 0x55}, {&(0x7f00000000c0)="202aed2f7ef115cbb40c8b5d85830c06e2f3b7aa3a889fd2a9b2d18a954dd4be", 0x20}, {&(0x7f0000000100)="a459273bc9a3d4f536b70d289c9968698c9a0cc4bed599a89a7e09838d895f33691075b757be4b9f5dd0207f81821e14aa13f82497e8d7a84dcc6d2df6fef06622b16823f16337e53cde826b6962a1edc7725a30704970e0bebcd6168d0279e34fd778e5ce36f82b61645f73425c284482ace3d3dc36ac2ee2aff039b9b6d6df2f01a4c83eb8537bf3edd708196ae54fb5479e05698017", 0x97}, {&(0x7f0000000200)="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", 0x3c4}], 0x4}}], 0x1, 0x0) 22:15:50 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x3b, 0x0, &(0x7f0000000080)) 22:15:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000010903000000000000000100000000001400018008000100e0feffe70700023797e7b252"], 0x38}}, 0x0) 22:15:50 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x75f, {{0x2, 0x0, @multicast2}}}, 0x88) 22:15:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 22:15:51 executing program 2: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000d80)={'syztnl2\x00', 0x0}) 22:15:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x1600bd59, 0x0, &(0x7f0000000080)) 22:15:51 executing program 5: r0 = syz_io_uring_setup(0x73d7, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003300)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x1, 0x0) 22:15:51 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) accept4$inet(r0, 0x0, 0x0, 0x0) 22:15:51 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x1, &(0x7f00000011c0)=@raw=[@call], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:51 executing program 0: bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) 22:15:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 22:15:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x1c, r2, 0x1, 0x0, 0x6, @local}, 0x14) 22:15:51 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000440)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0x1001) 22:15:51 executing program 5: r0 = syz_io_uring_setup(0x73d7, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:51 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb080045"], 0x0) 22:15:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="18000000000000000100000025000000620000000000000014"], 0x30}, 0x0) 22:15:51 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="04d7f7f0", @ANYRES32=0x1, @ANYBLOB="0000000000000000023177012e1800", @ANYBLOB="000000000000000018260000", @ANYRES32], &(0x7f00000000c0)='GPL\x00', 0x2, 0xdf, &(0x7f0000000100)=""/223, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:51 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}]}}, &(0x7f00000003c0)=""/4096, 0x46, 0x1000, 0x1}, 0x20) 22:15:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0x4, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {}, ["", "", "", ""]}, 0xfd79}}, 0x0) 22:15:51 executing program 3: pipe(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 22:15:51 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f0000001840)={&(0x7f0000001780), 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x3c}, 0x3c}}, 0x0) 22:15:51 executing program 5: r0 = syz_io_uring_setup(0x73d7, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003300)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x401}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) 22:15:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)=')', 0x1}], 0x1}}], 0x1, 0x0) 22:15:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 22:15:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="18000000000000002900000032000000620000000000000014"], 0x30}, 0x0) 22:15:52 executing program 3: r0 = epoll_create1(0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xc01047d0, 0x0) 22:15:52 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000880)={0x6c, 0x13, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_USERDATA={0x0, 0x8, "09c75ada0241059ee0789693a429a5763f6a4ade58814a1c92c7bf3c47d53e572765405ab9c361c794fadb5aadec8354b6d51081141fc439974d4f0834b593523b1719b9b0f7d1d6ef611d0a55b9b18bd83b195f8a852946754dc725788355ce804cb1a73b074314b5fcc8d020b483844bade839ee8c763166f4dd93b705e68474710c9a34699a7943cfa838930f792e345a669ab7689e288a260be5365a9ef20ce07caec87b6d42283df16551a37016160a7d68b5c6da4bccb9fb19abe0af"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x0, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0x9}]}, 0x6c}}, 0x0) 22:15:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003300)=[{{&(0x7f0000000040)={0x2, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) 22:15:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="18000000000000002900000004000000620000000000000014"], 0x30}, 0x0) 22:15:52 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) 22:15:52 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x1, &(0x7f00000011c0)=@raw=[@func], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070a03"], 0x1c}}, 0x0) [ 475.929805][ T6837] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 22:15:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x5, &(0x7f0000001000)=@framed={{}, [@initr0]}, &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 22:15:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="18000000000000002902000037000000620000000000000014"], 0x30}, 0x0) 22:15:52 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="18000000000000000100000037000000620000000000000014"], 0x30}, 0x0) 22:15:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, {0x2, 0x0, @empty}, 0x24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='pimreg0\x00'}) 22:15:52 executing program 1: r0 = epoll_create(0x7c3c) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x88000000, 0x0, 0x0) 22:15:52 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv4={0x8848, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @multicast2}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "a36c2f", 0x0, "d4d0fa"}}}}}}, 0x0) 22:15:52 executing program 0: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180), 0x10) [ 476.094331][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 22:15:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003300)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x18}}], 0x1, 0x0) 22:15:52 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0) 22:15:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 22:15:52 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 22:15:52 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x3c, 0x0, &(0x7f0000000080)) 22:15:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a2, &(0x7f0000000300)={'sit0\x00', 0x0}) 22:15:52 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000008800)=[{{&(0x7f0000000000)={0xa, 0x0, 0x6, @private0}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000040)="cd07a340391e1a731ef6d1fdd6f82e35a0f1675a2988c0b391744d1c0267de33fb0ead7056551acafc7ac73dd3ccfce9ec26a6f3252383668bd37a41f6d7651c17c4aa1a78c3577366f43251b14d63d7e0deb3c8af", 0x55}, {&(0x7f00000000c0)="202aed2f7ef115cbb40c8b5d85830c06e2f3b7aa3a889fd2a9b2d18a954dd4be", 0x20}, {&(0x7f0000000100)="a459273bc9a3d4f536b70d289c9968698c9a0cc4bed599a89a7e09838d895f33691075b757be4b9f5dd0207f81821e14aa13f82497e8d7a84dcc6d2df6fef06622b16823f16337e53cde826b6962a1edc7725a30704970e0bebcd6168d0279e34fd778e5ce36f82b61645f73425c284482ace3d3dc36ac2ee2aff039b9b6d6df2f01a4c83eb8537bf3edd708196ae54fb5479e05698017a8", 0x98}, {&(0x7f0000000200)="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", 0x3c4}], 0x4, &(0x7f0000001480)=[@hoplimit={{0x14}}, @hoplimit={{0x14}}], 0x30}}], 0x1, 0x0) 22:15:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003300)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x1, 0x0) 22:15:53 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)) 22:15:53 executing program 2: syz_emit_ethernet(0x0, 0xfffffffffffffffd, 0x0) 22:15:53 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:53 executing program 3: socketpair(0x0, 0xaf4dd9c86feb81c2, 0x0, 0x0) 22:15:53 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x107a01, 0x0) 22:15:53 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x8903, &(0x7f0000000000)) 22:15:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={0x0}}, 0x0) 22:15:53 executing program 0: pipe(&(0x7f0000001400)={0xffffffffffffffff}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 22:15:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)='syz_tun\x00'}) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 22:15:53 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xba, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}) 22:15:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) 22:15:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xa, 0x0, &(0x7f0000000140)) 22:15:53 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:53 executing program 0: r0 = socket(0x1, 0x5, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, 0x0) 22:15:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x52, 0x4) 22:15:53 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xba, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 22:15:53 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x1}]}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f00000013c0)=""/210, 0x31, 0xd2, 0x1}, 0x20) 22:15:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400"], 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x0) 22:15:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "56159c56e8bbc3ebb94d6f11a8c8017b4d3cdb"}) 22:15:53 executing program 4: bpf$MAP_CREATE(0x3, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0xfffffff8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001bc0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'vlan0\x00', 0x2}) 22:15:53 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 477.497851][ T77] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 477.688807][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 477.777830][ T77] usb 3-1: Using ep0 maxpacket: 32 [ 477.927739][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 478.047858][ T22] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 478.158243][ T77] usb 3-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.40 [ 478.167446][ T77] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.175875][ T77] usb 3-1: Product: syz [ 478.180532][ T77] usb 3-1: Manufacturer: syz [ 478.185199][ T77] usb 3-1: SerialNumber: syz [ 478.218350][ T22] usb 1-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.40 [ 478.227410][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.235554][ T22] usb 1-1: Product: syz [ 478.245060][ T22] usb 1-1: Manufacturer: syz [ 478.249882][ T22] usb 1-1: SerialNumber: syz [ 478.306757][ T22] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 478.505496][ T22] usb 1-1: USB disconnect, device number 3 [ 478.518409][ T77] usbhid 3-1:1.0: can't add hid device: -22 [ 478.524520][ T77] usbhid: probe of 3-1:1.0 failed with error -22 [ 478.534336][ T77] usb 3-1: USB disconnect, device number 2 22:15:55 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x4, @string={0x4, 0x3, "903a"}}}, 0x0) 22:15:55 executing program 3: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 22:15:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000400001a"], 0x34}}, 0x0) 22:15:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 22:15:55 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:55 executing program 1: r0 = socket(0x1, 0x80802, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 22:15:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="0100000000000004000052"], 0x34}}, 0x0) 22:15:55 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000001200)) [ 479.008367][ T6933] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 22:15:55 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x10, 0x4) [ 479.101330][ T6940] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. 22:15:55 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000001200)) 22:15:55 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3}]}]}}, &(0x7f00000013c0)=""/210, 0x2e, 0xd2, 0x1}, 0x20) [ 479.247847][ T77] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 479.298127][ T5227] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 479.497736][ T77] usb 4-1: Using ep0 maxpacket: 16 [ 479.567795][ T5227] usb 3-1: Using ep0 maxpacket: 16 [ 479.617892][ T77] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 479.698008][ T5227] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 479.707781][ T5227] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.787821][ T77] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 479.801549][ T77] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.809806][ T77] usb 4-1: Product: syz [ 479.814076][ T77] usb 4-1: Manufacturer: syz [ 479.818937][ T77] usb 4-1: SerialNumber: syz [ 479.897985][ T5227] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 479.907055][ T5227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.920389][ T5227] usb 3-1: Product: syz [ 479.924569][ T5227] usb 3-1: Manufacturer: syz [ 479.932985][ T5227] usb 3-1: SerialNumber: syz [ 479.968222][ T6936] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 480.419670][ T77] usb 3-1: USB disconnect, device number 3 22:15:57 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x13, 0x0, &(0x7f0000000140)) 22:15:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x8}]}, 0x18}}, 0x0) 22:15:58 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000001200)) 22:15:58 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x9201, 0x0) 22:15:58 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r0, 0x0, 0x20, &(0x7f0000000040)=""/76, &(0x7f00000000c0)=0x4c) [ 481.974729][ T899] usb 4-1: USB disconnect, device number 2 22:15:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1b, 0x0, &(0x7f0000000140)) 22:15:58 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:15:58 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000001200)) 22:15:58 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f00000001c0)) 22:15:58 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x541b, &(0x7f0000000000)) 22:15:58 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x19, 0x0, &(0x7f0000000140)) 22:15:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1e, 0x0, &(0x7f0000000140)) 22:15:59 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 22:15:59 executing program 0: r0 = socket(0x1, 0x80802, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 22:15:59 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x9204, 0x0) 22:15:59 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x9}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x4, @string={0x4, 0x3, "903a"}}}, 0x0) 22:15:59 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:59 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 22:15:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x80000001) 22:15:59 executing program 1: process_vm_writev(0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/58, 0x3a}], 0x1, &(0x7f00000013c0)=[{0x0}, {0x0}], 0x2, 0x0) 22:15:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) 22:15:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x8, 0x0, &(0x7f0000000140)) 22:15:59 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:15:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000140)) [ 483.277881][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd 22:15:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000300)=0x3f, 0x4) 22:15:59 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x2) 22:15:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x8, 0x0, &(0x7f0000000140)=0x7) [ 483.517798][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 483.637891][ T22] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 483.807920][ T22] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 483.817000][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.825104][ T22] usb 5-1: Product: syz [ 483.829339][ T22] usb 5-1: Manufacturer: syz [ 483.834477][ T22] usb 5-1: SerialNumber: syz [ 484.305282][ T5227] usb 5-1: USB disconnect, device number 2 22:16:01 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) r1 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x25, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x9b}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x0, 0x7, 0x7, 0x8}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x411}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000440)={0x14, 0x0, 0x0}, 0x0) getpeername$packet(r0, 0x0, 0x0) r2 = accept$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000840)=0x14) getpeername$packet(r2, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000900)=0x14) 22:16:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0xf, &(0x7f0000000040)="a6", 0x1) 22:16:01 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:01 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x25, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x59, 0x9b}}]}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000007c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e00), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) 22:16:01 executing program 1: socket(0x1, 0x80802, 0x0) 22:16:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x3, &(0x7f0000000000)="05342811", 0x4) 22:16:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000240)="88d8c373", 0x4) 22:16:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x2, 0x0, &(0x7f0000000140)) 22:16:01 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000200)) 22:16:01 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:01 executing program 0: socket(0x1, 0x80805, 0x0) 22:16:01 executing program 3: socketpair(0xa, 0x3, 0x3a, &(0x7f0000000000)) [ 485.198096][ T899] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 485.207828][ T5227] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 485.457759][ T899] usb 3-1: Using ep0 maxpacket: 16 [ 485.462997][ T5227] usb 5-1: Using ep0 maxpacket: 16 [ 485.587936][ T899] usb 3-1: config 1 interface 0 altsetting 37 bulk endpoint 0x1 has invalid maxpacket 8 [ 485.598086][ T5227] usb 5-1: config 1 interface 0 altsetting 37 bulk endpoint 0x1 has invalid maxpacket 8 [ 485.607986][ T5227] usb 5-1: config 1 interface 0 altsetting 37 bulk endpoint 0x82 has invalid maxpacket 32 [ 485.618027][ T899] usb 3-1: config 1 interface 0 altsetting 37 bulk endpoint 0x82 has invalid maxpacket 32 [ 485.628028][ T5227] usb 5-1: config 1 interface 0 has no altsetting 0 [ 485.634705][ T899] usb 3-1: config 1 interface 0 has no altsetting 0 [ 485.867928][ T5227] usb 5-1: string descriptor 0 read error: -22 [ 485.874228][ T5227] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 485.884271][ T899] usb 3-1: string descriptor 0 read error: -22 [ 485.890824][ T899] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 485.900018][ T899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.908111][ T5227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.938144][ T7068] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 485.943276][ T7069] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 485.945580][ T7068] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 485.955460][ T7069] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 486.194858][ T899] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 37 proto 2 vid 0x0525 pid 0xA4A8 [ 486.209330][ T5227] usblp 5-1:1.0: usblp1: USB Bidirectional printer dev 3 if 0 alt 37 proto 2 vid 0x0525 pid 0xA4A8 [ 486.233541][ T899] usb 3-1: USB disconnect, device number 4 [ 486.246592][ T5227] usb 5-1: USB disconnect, device number 3 [ 486.269243][ T899] usblp0: removed [ 486.288841][ T5227] usblp1: removed 22:16:02 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000280)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000300)='syzkaller\x00', 0x6, 0xd9, &(0x7f0000000340)=""/217, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:16:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xc, 0x0, &(0x7f0000000140)) 22:16:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}}, &(0x7f00000013c0)=""/210, 0x2e, 0xd2, 0x1}, 0x20) 22:16:02 executing program 2: socketpair(0x2, 0x2, 0x11, &(0x7f0000000040)) 22:16:02 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 22:16:02 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0) 22:16:02 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, 0x0) 22:16:02 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x8901, &(0x7f0000000000)) 22:16:03 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfe, 0x0, 0xf9, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x0, 0x6}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x81, 0x1b}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x72, 0x8, 0x0, 0x0, 0x4}, 0x1c, &(0x7f00000000c0)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "ed36f79e3e133d1aa9422ab13fe8c464"}, @generic={0x3}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x80c}}, {0x0, 0x0}, {0xe0, &(0x7f0000000200)=@string={0xe0, 0x3, "5e2ec3a3c8afb69e113c52a92b03109ee08e9d3e8aa7a96b4de9d3a8cc76a3457e5641613cc5a53c4943d97db1c8b7c2a4676d5dc6abb589020c0a6bc7b308f09f5cb82f72c80c55b02320456d1a2213e72b00c8da378bb1e924821dde8d6f6f3a7c7c8f69d0880071e8aaaf02ac12b0a0984aee84465bb851e5e859f7c5dc5774ae7ee346b48f4111c78a4acf201e9d94e1c7ffa44971d83de0447c029f1eb2f6135e4af3fa0684e0379198e82d0bd6a40723547d8a3d07b23063cf7954b92fc9b978364b1507b057b37af0ce6c4b22ed56059012a3f15046a636f4d905"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000440)=@lang_id={0x4}}]}) 22:16:03 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x309000) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0) 22:16:03 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "3df9d66f2c23ff3693ecf437e31a3acf157aa8"}) 22:16:03 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 22:16:03 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xba, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 22:16:03 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x4}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x437}}, {0x0, 0x0}, {0x36, &(0x7f0000000200)=@string={0x36, 0x3, "c355fcc828d62e5cebb37c3068a849c3f789d5c7680a5c7ac729e264152995848766fd314b323b19d269296c8799c60124f6dbc1"}}]}) 22:16:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x20000000) 22:16:03 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:03 executing program 3: timer_create(0x0, &(0x7f00000001c0)={0x0, 0x2a, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) [ 487.108113][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 487.187890][ T5182] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 487.267780][ T5133] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 487.288483][ T77] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 487.377741][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 487.508314][ T22] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 487.522274][ T5133] usb 5-1: Using ep0 maxpacket: 32 [ 487.548039][ T77] usb 1-1: Using ep0 maxpacket: 8 [ 487.678151][ T5133] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 487.698180][ T5182] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 487.709702][ T77] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 487.722589][ T5182] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 487.736323][ T22] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 487.745867][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.753953][ T22] usb 2-1: Product: syz [ 487.758372][ T22] usb 2-1: Manufacturer: syz [ 487.762998][ T22] usb 2-1: SerialNumber: syz [ 487.868025][ T5133] usb 5-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.40 [ 487.877378][ T5133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.885647][ T5133] usb 5-1: Product: syz [ 487.890241][ T5133] usb 5-1: Manufacturer: syz [ 487.895008][ T5133] usb 5-1: SerialNumber: syz [ 487.941325][ T5133] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 488.013479][ T5227] usb 2-1: USB disconnect, device number 2 [ 488.148687][ T5133] usb 5-1: USB disconnect, device number 4 [ 488.157996][ T77] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 488.177197][ T77] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.185693][ T5182] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.40 [ 488.195013][ T77] usb 1-1: Product: 嗃주혨尮ë«ã¼ê¡¨ì‰è§·ìŸ•à©¨ç©œâ§‡æ“¢â¤•è’•æš‡ã‡½ã‰‹á¤»æ§’氩馇dž쇛 [ 488.206054][ T5182] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.214758][ T77] usb 1-1: SerialNumber: syz [ 488.219693][ T5182] usb 3-1: Manufacturer: à Œ [ 488.224318][ T5182] usb 3-1: SerialNumber: ⹞êƒê¿ˆéº¶ã°‘ꥒ̫é¸è» ãºêžŠæ®©î¥ê£“盌䖣噾æ…씼㲥ä‰ç·™ì¢±ìŠ·æž¤åµ­ê¯†è¦µà°‚權ë‡ï€ˆå²Ÿâ¾¸ì¡²å”ŒâŽ°ä” á©­áŒ¢â¯§ì €ãŸšë†‹â“©á¶‚跞潯簺轼í©Âˆî¡±ê¾ªê°‚뀒颠䚄롛姨엷埜깴î¾ë‘†ä†ìœ‘䪊âƒé´žî†”ￇ䦤籄鼂눞á¶ä©žï«³è†ãŸ é¢‘ⷨ혋ޤå£è©½Ü½ã‚²ì½£å‘¹â¾¹ë§‰ã™¸á•‹ë€‡ë—ïºæ³Žâ‰‹å›­é€…ꌒ僱Ꙇï¶×™ 22:16:04 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xff, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x59, 0x9b, 0xd8}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x81, 0x7, 0x7, 0x8}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x8, 0x77c0}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1409}}]}) 22:16:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x1}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f00000013c0)=""/210, 0x30, 0xd2, 0x1}, 0x20) [ 488.513029][ T5227] usb 1-1: USB disconnect, device number 4 [ 488.588006][ T5182] usbhid 3-1:1.0: can't add hid device: -22 [ 488.597073][ T5182] usbhid: probe of 3-1:1.0 failed with error -22 [ 488.614117][ T5182] usb 3-1: USB disconnect, device number 5 [ 488.837758][ T899] usb 2-1: new high-speed USB device number 3 using dummy_hcd 22:16:05 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)='syz_tun\x00'}) 22:16:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x0) 22:16:05 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x22, 0x0, &(0x7f0000000140)) 22:16:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000004000020"], 0x34}}, 0x0) 22:16:05 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5452, &(0x7f0000000000)) [ 489.077755][ T899] usb 2-1: Using ep0 maxpacket: 16 22:16:05 executing program 4: r0 = getpid() process_vm_writev(r0, &(0x7f0000001280)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, &(0x7f0000001800)=[{&(0x7f0000001300)=""/144, 0x90}, {&(0x7f00000013c0)=""/233, 0xe9}, {&(0x7f00000014c0)=""/186, 0xba}, {&(0x7f0000001580)=""/136, 0x88}, {&(0x7f0000001640)=""/136, 0x88}, {&(0x7f0000001700)=""/233, 0x20000179}], 0x6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f00000011c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r1, 0x0, 0x20004880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 22:16:05 executing program 0: syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400}}}}}]}}]}}, 0x0) 22:16:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="1800000000000000290000003b000000620000000000000014"], 0x30}, 0x0) 22:16:05 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 489.198432][ T899] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 489.398035][ T899] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 489.407330][ T899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.416510][ T899] usb 2-1: Product: К [ 489.421048][ T899] usb 2-1: Manufacturer: ã [ 489.432415][ T899] usb 2-1: SerialNumber: Б [ 489.468304][ T7124] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 489.476658][ T7124] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 489.517886][ T5133] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 489.694769][ T899] usb 2-1: USB disconnect, device number 3 [ 489.877922][ T5133] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 490.047992][ T5133] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 490.057089][ T5133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.065415][ T5133] usb 1-1: Product: syz [ 490.069906][ T5133] usb 1-1: Manufacturer: syz [ 490.074529][ T5133] usb 1-1: SerialNumber: syz [ 490.108159][ T7141] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 22:16:06 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x6, 0x1, &(0x7f0000001440)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}], &(0x7f0000001480)='syzkaller\x00', 0x3, 0xda, &(0x7f00000014c0)=""/218, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:16:06 executing program 3: r0 = socket(0x1, 0x5, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 22:16:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f9ffff7f00000004000052"], 0x34}}, 0x0) 22:16:06 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:06 executing program 4: process_vm_writev(0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/58, 0x3a}], 0x1, &(0x7f00000013c0)=[{&(0x7f0000001180)=""/19, 0x13}, {0x0}], 0x2, 0x0) 22:16:06 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f00000000c0)={0x0, [0x7, 0x27d0, 0x1f], [{0x0, 0xffffffff, 0x0, 0x0, 0x1}], 0x8}) 22:16:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000003c0)=0x8, 0x4) 22:16:06 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5452, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) 22:16:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x3}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) [ 490.344789][ T5179] usb 1-1: USB disconnect, device number 5 22:16:07 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 22:16:07 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x2}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) 22:16:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000080)={0x56, r1, 0x1, 0x0, 0x0, {}, [{{0xa}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_method={{}, {}, {0x0, 0x4, 'hash\x00'}}}]}}]}, 0x60}}, 0x0) 22:16:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x3, 0x1, @lb_port_stats={{{0xfffffffffffffee8}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 22:16:07 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 22:16:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={0x0}}, 0x81) 22:16:07 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x496802) 22:16:07 executing program 0: lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x3) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f00000001c0)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040000) recvmsg(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002800)=[{&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000001500)=""/182, 0xb6}, {&(0x7f00000015c0)=""/156, 0x9c}, {&(0x7f0000001680)=""/80, 0x50}, {&(0x7f0000001700)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000028c0)=""/156, 0x9c}, 0x10100) syz_genetlink_get_family_id$tipc2(&(0x7f0000003440), 0xffffffffffffffff) [ 490.914562][ T7173] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:16:07 executing program 3: r0 = socket(0x28, 0x5, 0x0) connect$netlink(r0, 0x0, 0x0) 22:16:07 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:07 executing program 1: bpf$BPF_BTF_LOAD(0x4, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) [ 490.998628][ T7173] netlink: 54 bytes leftover after parsing attributes in process `syz-executor.4'. 22:16:07 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18270000", @ANYRES32, @ANYBLOB="0000000001d90000185800000000006c20"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xa5, &(0x7f0000000200)=""/165, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x8, 0x10, &(0x7f0000000300), 0x10}, 0x91) 22:16:07 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001440)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@name, 0x10, 0x0}, 0x0) 22:16:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 22:16:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={0x0, &(0x7f0000001140)=""/130, 0x0, 0x82, 0x3f4}, 0x20) 22:16:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'veth0_to_hsr\x00', 0x2}) 22:16:07 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x18, 0x0, 0x0, 0x2}}, &(0x7f0000001140)=""/130, 0x1a, 0x82, 0x1}, 0x20) 22:16:07 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001440)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 22:16:07 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00'}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 22:16:07 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000008c0)) 22:16:07 executing program 4: openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/ipc\x00') 22:16:07 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x7, 0x0, 0x8}, 0x48) 22:16:07 executing program 1: bpf$BPF_BTF_LOAD(0x3, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 22:16:07 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup/syz1\x00', 0x200002, 0x0) 22:16:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f00000010c0)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001140)=""/130, 0x1a, 0x82, 0x1}, 0x20) 22:16:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000001140)=""/130, 0x1000000, 0x82, 0x1}, 0x20) 22:16:07 executing program 1: r0 = syz_clone(0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) syz_open_procfs$namespace(r0, 0x0) 22:16:07 executing program 3: socketpair(0x2, 0x2, 0x0, &(0x7f0000001480)) 22:16:07 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000040)={0x10e0, 0x14, 0x0, 0x0, 0x0, {0xf}, [@INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "f2c9724a1191267d9b1562d3a3d12a30e56d4e6610cf30efda91276fbdef3d4d285b6238b8c7f6ae1acf94fae59fbc41432f205fec6281a3000168ec439c50c2ddf8efbaf5a03e9ccda41fda32360a4db425d74b6d314b73a2c44a3ba759ae500f91b1603f36c7c6991e09205daad8bec6a4c2d6501ce27c42f954ecb7c1fdc2e0e728f507881e9731ffedb5bf88dbdbef5869f1ec62350fe00cd8226a80ee4e4354914e488c80b2bd8c62478a0ea6b66abcd36641ddd82f6a0e82d283e674863a"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x10e0}, 0x1, 0x0, 0x0, 0x400c081}, 0x40) 22:16:07 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x30, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 22:16:07 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd26, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8}]}, 0x34}}, 0x0) sendfile(r2, r1, 0x0, 0x7000000) 22:16:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x14, 0x0, 0x0) 22:16:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x11, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}, @sadb_spirange={0x2}]}, 0x30}}, 0x0) 22:16:07 executing program 0: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ptrace(0x10, 0x0) ptrace(0x11, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, 0x0) ptrace(0x11, 0x0) ptrace(0x10, r0) ptrace(0x11, 0x0) ptrace(0xffffffffffffffff, 0x0) 22:16:07 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 22:16:07 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) [ 491.801097][ T27] audit: type=1804 audit(1674771368.013:2): pid=7255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4232159193/syzkaller.M4R8bK/150/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 22:16:08 executing program 4: syz_genetlink_get_family_id$tipc(0xfffffffffffffffc, 0xffffffffffffffff) 22:16:08 executing program 0: r0 = socket(0x29, 0x802, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) 22:16:08 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:08 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xa, 0x0, 0x0) 22:16:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001540)=ANY=[@ANYBLOB="550000004349f7"], 0x78}}, 0x0) 22:16:08 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, &(0x7f0000000040)) 22:16:08 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000001200)) 22:16:08 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_crypto(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@upd={0xe0, 0x12, 0x0, 0x0, 0x0, {{'drbg_nopr_sha1\x00'}}}, 0xe0}}, 0x0) 22:16:08 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000500)={&(0x7f0000000380), 0xc, &(0x7f00000004c0)={0x0}}, 0x4041) 22:16:08 executing program 4: bpf$MAP_CREATE(0x5, &(0x7f0000000080)=@bloom_filter, 0x48) 22:16:08 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x23, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 22:16:08 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:08 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$inet(r1, 0x0, 0x0) 22:16:08 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x1fffffbf, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 22:16:08 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xf, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 22:16:08 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, 0x0) 22:16:08 executing program 0: bpf$MAP_CREATE(0x14, &(0x7f0000000080)=@bloom_filter, 0x48) 22:16:08 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x20) 22:16:08 executing program 1: bpf$MAP_CREATE(0x16, &(0x7f0000000080)=@bloom_filter, 0x48) 22:16:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x0) 22:16:08 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:08 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000400)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) 22:16:08 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8946, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private}}}}) 22:16:08 executing program 1: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x3f}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xfffffffffffffff7]}, 0x8}) 22:16:08 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f00000019c0)="60bc095e", 0x4) [ 493.077574][ T7289] syz-executor.2: vmalloc error: size 138412032, page order 9, failed to allocate pages, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 493.097882][ T7289] CPU: 1 PID: 7289 Comm: syz-executor.2 Not tainted 6.2.0-rc5-next-20230123-syzkaller #0 [ 493.107733][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 493.117807][ T7289] Call Trace: [ 493.121094][ T7289] [ 493.124028][ T7289] dump_stack_lvl+0xd1/0x138 [ 493.128679][ T7289] warn_alloc.cold+0x95/0x1a7 [ 493.133386][ T7289] ? zone_watermark_ok_safe+0x300/0x300 [ 493.138998][ T7289] ? find_held_lock+0x2d/0x110 [ 493.143806][ T7289] ? lock_downgrade+0x6e0/0x6e0 [ 493.148680][ T7289] __vmalloc_node_range+0xef7/0x12e0 [ 493.153988][ T7289] ? xt_alloc_table_info+0x40/0xa0 [ 493.159158][ T7289] ? vfree_atomic+0xe0/0xe0 [ 493.163680][ T7289] ? kvmalloc_node+0x76/0x1a0 [ 493.168418][ T7289] ? rcu_read_lock_sched_held+0x3e/0x70 [ 493.173995][ T7289] ? xt_alloc_table_info+0x40/0xa0 [ 493.179120][ T7289] kvmalloc_node+0x156/0x1a0 [ 493.183726][ T7289] ? xt_alloc_table_info+0x40/0xa0 [ 493.188848][ T7289] xt_alloc_table_info+0x40/0xa0 [ 493.193796][ T7289] do_ipt_set_ctl+0x514/0xb10 [ 493.198546][ T7289] ? trace_contention_end+0x173/0x1e0 [ 493.203972][ T7289] ? __mutex_lock+0x231/0x1350 [ 493.208758][ T7289] ? compat_do_replace.constprop.0+0x400/0x400 [ 493.214935][ T7289] ? wait_for_completion_io_timeout+0x20/0x20 [ 493.221014][ T7289] ? ip_sock_set_tos+0x40/0x40 [ 493.225821][ T7289] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 493.231855][ T7289] nf_setsockopt+0x87/0xe0 [ 493.236292][ T7289] ip_setsockopt+0xf2/0x110 [ 493.240814][ T7289] raw_setsockopt+0x23e/0x2d0 [ 493.245522][ T7289] ? raw_bind+0x580/0x580 [ 493.249874][ T7289] ? sock_common_setsockopt+0x2f/0x110 [ 493.255396][ T7289] ? sock_common_recvmsg+0x190/0x190 [ 493.260710][ T7289] __sys_setsockopt+0x2c6/0x5b0 [ 493.265612][ T7289] ? __ia32_sys_recv+0x100/0x100 [ 493.270597][ T7289] __x64_sys_setsockopt+0xbe/0x160 [ 493.275748][ T7289] ? syscall_enter_from_user_mode+0x26/0xb0 [ 493.281660][ T7289] do_syscall_64+0x39/0xb0 [ 493.286095][ T7289] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 493.292043][ T7289] RIP: 0033:0x7f25d1c8c0c9 [ 493.296463][ T7289] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 493.316690][ T7289] RSP: 002b:00007f25d2937168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 493.325128][ T7289] RAX: ffffffffffffffda RBX: 00007f25d1dabf80 RCX: 00007f25d1c8c0c9 [ 493.333103][ T7289] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 493.341075][ T7289] RBP: 00007f25d1ce7ae9 R08: 0000000000000328 R09: 0000000000000000 [ 493.349048][ T7289] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 493.357020][ T7289] R13: 00007ffc1ed9c89f R14: 00007f25d2937300 R15: 0000000000022000 [ 493.365011][ T7289] [ 493.375655][ T7289] Mem-Info: [ 493.379040][ T7289] active_anon:397 inactive_anon:329118 isolated_anon:0 [ 493.379040][ T7289] active_file:12646 inactive_file:496 isolated_file:0 [ 493.379040][ T7289] unevictable:768 dirty:39 writeback:0 [ 493.379040][ T7289] slab_reclaimable:20124 slab_unreclaimable:99567 [ 493.379040][ T7289] mapped:19705 shmem:1433 pagetables:1091 [ 493.379040][ T7289] sec_pagetables:0 bounce:0 [ 493.379040][ T7289] kernel_misc_reclaimable:0 [ 493.379040][ T7289] free:1045681 free_pcp:8805 free_cma:0 [ 493.425507][ T7289] Node 0 active_anon:1588kB inactive_anon:1316472kB active_file:50512kB inactive_file:1984kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:78820kB dirty:152kB writeback:0kB shmem:4196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 71680kB writeback_tmp:0kB kernel_stack:10548kB pagetables:4364kB sec_pagetables:0kB all_unreclaimable? no [ 493.460011][ T7289] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 493.492422][ T7289] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 493.521507][ T7289] lowmem_reserve[]: 0 2617 2619 2619 2619 [ 493.527750][ T7289] Node 0 DMA32 free:234776kB boost:0kB min:35440kB low:44300kB high:53160kB reserved_highatomic:0KB active_anon:1584kB inactive_anon:1316432kB active_file:48964kB inactive_file:1984kB unevictable:1536kB writepending:152kB present:3129332kB managed:2684492kB mlocked:0kB bounce:0kB free_pcp:17932kB local_pcp:2004kB free_cma:0kB [ 493.558549][ T7289] lowmem_reserve[]: 0 0 1 1 1 [ 493.564741][ T7289] Node 0 Normal free:16kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1548kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1612kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 493.592434][ T7289] lowmem_reserve[]: 0 0 0 0 0 [ 493.597289][ T7289] Node 1 Normal free:3932348kB boost:0kB min:54444kB low:68052kB high:81660kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117608kB mlocked:0kB bounce:0kB free_pcp:17664kB local_pcp:9760kB free_cma:0kB [ 493.627996][ T7289] lowmem_reserve[]: 0 0 0 0 0 [ 493.632762][ T7289] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 493.646049][ T7289] Node 0 DMA32: 2*4kB (ME) 0*8kB 1*16kB (E) 6*32kB (ME) 15*64kB (E) 5*128kB (E) 6*256kB (UME) 8*512kB (UME) 8*1024kB (UME) 1*2048kB (U) 53*4096kB (M) = 234776kB [ 493.663752][ T7289] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 493.676511][ T7289] Node 1 Normal: 153*4kB (UE) 47*8kB (UME) 26*16kB (UE) 80*32kB (UME) 21*64kB (UME) 4*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (UM) 0*2048kB 958*4096kB (ME) = 3932348kB [ 493.693873][ T7289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 493.703733][ T7289] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 493.713407][ T7289] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 493.723234][ T7289] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 493.733727][ T7289] 14577 total pagecache pages [ 493.739114][ T7289] 0 pages in swap cache [ 493.743286][ T7289] Free swap = 0kB [ 493.746991][ T7289] Total swap = 0kB [ 493.751287][ T7289] 2097051 pages RAM [ 493.755211][ T7289] 0 pages HighMem/MovableOnly [ 493.760753][ T7289] 392283 pages reserved [ 493.765848][ T7289] 0 pages cma reserved 22:16:10 executing program 2: bpf$MAP_CREATE(0xa, &(0x7f0000000080)=@bloom_filter, 0x48) 22:16:10 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 22:16:10 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:10 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, 0x0) 22:16:10 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:10 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) bind$can_j1939(r1, 0x0, 0x0) 22:16:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000130a01010000000000000000020000090900020073797a31"], 0x30}, 0x1, 0x0, 0x0, 0xc080810}, 0x4009000) 22:16:11 executing program 0: bpf$MAP_CREATE(0xe, &(0x7f0000000080)=@bloom_filter, 0x48) 22:16:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) [ 494.896317][ T7321] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 494.936180][ T7316] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:11 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private}}}}) 22:16:11 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, 0x0) 22:16:11 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x80108906, 0x0) 22:16:11 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000000)) [ 495.171926][ T7316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 495.254693][ T7316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:11 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x3c}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 22:16:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) 22:16:11 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @broadcast}}}}) 22:16:11 executing program 2: pselect6(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8}) [ 495.370298][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 495.385015][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 495.395836][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:11 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_crypto(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xa0048c4) 22:16:11 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="7646303ab0de53298de77878261bd70e8a8742e34ff4d9ff5a639e5ac7a69e621c5020cb145b9594c4", 0x29) 22:16:11 executing program 4: bpf$MAP_CREATE(0x2, &(0x7f0000000080)=@bloom_filter, 0x48) 22:16:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd26, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) sendfile(r2, r1, 0x0, 0x7000000) 22:16:11 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8901, &(0x7f00000000c0)) 22:16:11 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 495.658098][ T7349] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 495.713117][ T27] audit: type=1804 audit(1674771371.923:3): pid=7354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4194400876/syzkaller.t2jgZw/179/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 [ 495.761206][ T7349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 495.775237][ T7349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 495.906585][ T7358] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 495.924139][ T7358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 495.932388][ T7358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:12 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:12 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2a, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 22:16:12 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, &(0x7f0000000040)) 22:16:12 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x5, 0x0, 0x0) 22:16:12 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x20}}, 0x0) 22:16:12 executing program 1: bpf$MAP_CREATE(0x1c, &(0x7f0000000080)=@bloom_filter, 0x48) 22:16:12 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private, {[@generic={0x0, 0x2}]}}}}}) 22:16:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8914, 0x0) 22:16:12 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1a, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 22:16:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8923, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private}}}}) [ 496.156577][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 496.218276][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 496.307525][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 496.420090][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 496.440250][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 496.455650][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:12 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) 22:16:12 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x11, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}]}, 0x20}}, 0x0) 22:16:12 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:12 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x13, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 22:16:12 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 22:16:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="ac000000010901"], 0xac}}, 0x0) 22:16:12 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, 0x0) 22:16:12 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xff000000}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 22:16:12 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x40086602, &(0x7f00000000c0)) 22:16:12 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:12 executing program 4: bpf$MAP_CREATE(0x10, &(0x7f0000000080)=@bloom_filter, 0x48) [ 496.721059][ T7404] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 496.788356][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 496.851617][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 496.869769][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 497.004026][ T7407] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 497.016543][ T7407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 497.024676][ T7407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:13 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x41, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 22:16:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x5000000, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:13 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x24, 0x0, 0x0) 22:16:13 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{}, "2f0bbaefeeb49f62", "bb8e3a46aaa92cfdd117db63b828fb71c85de59d89c8886216855805d292c6af", "23228e8c", "f623142095c13c08"}, 0x38) 22:16:13 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:13 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8901, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(xchacha12-generic,crc32-generic)\x00'}, 0x58) 22:16:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x28}}, 0x0) [ 497.175703][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:13 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2, 0x0, 0x0) [ 497.252676][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 497.272067][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:13 executing program 0: bpf$OBJ_GET_PROG(0x8, &(0x7f0000000080)={0x0, 0x0, 0x18}, 0x10) 22:16:13 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x14, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) [ 497.422327][ T7425] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 497.490839][ T7425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 497.505976][ T7425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:13 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 22:16:13 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:13 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x401c5820, &(0x7f00000000c0)) 22:16:13 executing program 2: bpf$OBJ_GET_PROG(0x12, &(0x7f0000000080)={0x0, 0x0, 0x18}, 0x10) 22:16:13 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) 22:16:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 22:16:13 executing program 2: bpf$MAP_CREATE(0x15, &(0x7f0000000080)=@bloom_filter, 0x48) 22:16:13 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="6377c157", 0x4) 22:16:14 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)='c', 0x1) 22:16:14 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:14 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x1008) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002800)=[{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000002b40)='?', 0x1}], 0x1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0), 0x8) [ 497.810580][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 497.895634][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 497.922774][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:14 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:14 executing program 0: bpf$MAP_CREATE(0xf, &(0x7f0000000080)=@bloom_filter, 0x48) 22:16:14 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 22:16:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8922, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private}}}}) 22:16:14 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 498.073273][ T7469] sit0: mtu greater than device maximum [ 498.178265][ T7475] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 498.197412][ T7475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 498.206337][ T7475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(xchacha12-generic,crc32-generic)\x00'}, 0x58) 22:16:14 executing program 0: bpf$MAP_CREATE(0x13, &(0x7f0000000080)=@bloom_filter, 0x48) 22:16:14 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 22:16:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc3ffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:16:14 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:14 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x0, 0x0, 0x4}, 0x48) [ 498.566148][ T7483] device lo entered promiscuous mode 22:16:14 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x1008) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002800)=[{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000002b40)='?', 0x1}], 0x1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0), 0x8) [ 498.596169][ T7483] device tunl0 entered promiscuous mode 22:16:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0x20}, 0xb}, 0x0) [ 498.648534][ T7483] device gre0 entered promiscuous mode 22:16:14 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:14 executing program 1: r0 = socket$inet(0x2, 0x3, 0xb) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) [ 498.688774][ T7483] device gretap0 entered promiscuous mode [ 498.730323][ T7483] device erspan0 entered promiscuous mode [ 498.769294][ T7483] device ip_vti0 entered promiscuous mode 22:16:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, &(0x7f0000000040)) [ 498.812000][ T7483] device ip6_vti0 entered promiscuous mode [ 498.832113][ T7483] device sit0 entered promiscuous mode [ 498.864325][ T7483] device ip6tnl0 entered promiscuous mode [ 498.902900][ T7483] device ip6gre0 entered promiscuous mode [ 498.923874][ T7483] device syz_tun entered promiscuous mode [ 498.960602][ T7483] device ip6gretap0 entered promiscuous mode [ 498.970035][ T7483] device bridge0 entered promiscuous mode [ 498.978216][ T7483] device vcan0 entered promiscuous mode [ 498.984277][ T7483] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 498.993819][ T7483] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 499.003552][ T7483] device bond0 entered promiscuous mode [ 499.018417][ T7483] device bond_slave_0 entered promiscuous mode 22:16:15 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x17, 0x0, 0x0) 22:16:15 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x3, 0x0, 0x0) 22:16:15 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 499.025654][ T7483] device bond_slave_1 entered promiscuous mode [ 499.035903][ T7483] device team0 entered promiscuous mode [ 499.062747][ T7483] device team_slave_0 entered promiscuous mode [ 499.094583][ T7483] device team_slave_1 entered promiscuous mode [ 499.109624][ T7483] device dummy0 entered promiscuous mode [ 499.156493][ T7483] device nlmon0 entered promiscuous mode [ 499.165366][ T7483] device caif0 entered promiscuous mode [ 499.185427][ T7483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 22:16:15 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8906, 0x0) 22:16:15 executing program 0: bpf$MAP_CREATE(0x1d, &(0x7f0000000080)=@bloom_filter, 0x48) [ 499.207011][ T7484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 499.226512][ T7484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 499.265723][ T7484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:15 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:15 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, &(0x7f0000000040)) 22:16:15 executing program 4: bpf$MAP_CREATE(0x6, &(0x7f0000000080)=@bloom_filter, 0x48) 22:16:15 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:15 executing program 0: gettid() syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x37, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\b\x00'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x4}]}, 0x34}}, 0x0) 22:16:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @broadcast}}}}) [ 499.327301][ T7489] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 499.341296][ T7489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 499.349528][ T7489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:15 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000400)='./file0/file0\x00'}, 0x10) 22:16:15 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) 22:16:15 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002102) 22:16:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x1, 0x301}, 0x14}}, 0x0) [ 499.471807][ T7521] device  entered promiscuous mode 22:16:15 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xa, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 22:16:15 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, &(0x7f0000000080)) [ 499.571499][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 499.600486][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 499.647009][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 499.759502][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 499.810172][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 499.823316][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:16 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:16 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x5, 0x4) 22:16:16 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:16 executing program 4: bpf$MAP_CREATE(0xb, &(0x7f0000000080)=@bloom_filter, 0x48) 22:16:16 executing program 1: r0 = socket(0x2, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 22:16:16 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) 22:16:16 executing program 0: pselect6(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xfffffffffffffff7]}, 0x8}) 22:16:16 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 499.993776][ T7546] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 500.062221][ T7546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 500.082179][ T7546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 500.173174][ T7552] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 500.199171][ T7552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 500.218826][ T7552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:16 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10) 22:16:16 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 22:16:16 executing program 0: r0 = socket(0x18, 0x0, 0x1) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) 22:16:16 executing program 4: bpf$MAP_CREATE(0x9, &(0x7f0000000080)=@bloom_filter, 0x48) 22:16:16 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:16 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[], 0xe4}}, 0x0) 22:16:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000130a01010000000000000000020000090900020073797a3100000000080003"], 0x30}}, 0x0) 22:16:16 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000980)={0x14}, 0x14}}, 0x2000c081) 22:16:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 500.443812][ T7560] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:16 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 500.511790][ T7560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 500.522556][ T7570] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 500.539104][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 500.548942][ T7560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:16 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 22:16:16 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1a, 0x0, 0x0) [ 500.585697][ T7577] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. 22:16:16 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:16 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x8000000, 0x2c8, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) [ 500.663595][ T7569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 500.701458][ T7569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:16:16 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x1c}}, 0x0) [ 500.745362][ T7569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:17 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x24) 22:16:17 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:17 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:17 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x25, 0x0, 0x0) [ 501.041712][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 501.064357][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 501.097540][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 501.175359][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 501.201443][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 501.209126][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 501.286291][ T1202] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.292689][ T1202] ieee802154 phy1 wpan1: encryption failed: -22 22:16:17 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5c0f3bf7cae418d4b468674edc21ff90", 0x10) 22:16:17 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100), 0x4) 22:16:17 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x21, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 22:16:17 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:17 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80004400}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) [ 501.480924][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 501.590807][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 501.618240][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 501.676719][ T7610] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 501.695199][ T7610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 501.713252][ T7610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:18 executing program 2: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={r0, r1+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x800000000000000]}, 0x8}) 22:16:18 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x40002040) 22:16:18 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:18 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)='v', 0x1) 22:16:18 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:18 executing program 1: bpf$MAP_CREATE(0x1e, &(0x7f0000000080)=@bloom_filter, 0x48) 22:16:18 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000100)) 22:16:18 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, 0x0) [ 502.695534][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:18 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 502.757047][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 502.782500][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:19 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x15, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 22:16:19 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0xfffffffffffffe1d) 22:16:19 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000080)) [ 502.924039][ T7622] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 502.950248][ T7622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 502.989247][ T7622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:19 executing program 2: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x80) 22:16:19 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:19 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) 22:16:19 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) read$fb(r0, 0x0, 0x0) 22:16:19 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f00000026c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000027c0), 0xffffffffffffffff) 22:16:19 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_devices(r0, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) 22:16:19 executing program 4: r0 = getpgrp(0x0) prlimit64(r0, 0x0, &(0x7f00000011c0), &(0x7f0000001200)) 22:16:19 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x7dced03a1ff5f59f, 0x0) [ 503.541647][ T7642] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:19 executing program 2: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 503.603612][ T7642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:16:19 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 22:16:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) connect$netlink(r0, &(0x7f0000000000), 0xc) [ 503.648026][ T7642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x300, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast1, @private, 0x0, 0x0, 'veth0\x00', 'syz_tun\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@ttl={{0x28}}, @common=@icmp={{0x28}, {0x0, "c264"}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "4c335fb185ba4090e73cca2c58a60a84c2ce68d74cff9a4e4eefb1d5dba8"}}}, {{@ip={@loopback, @loopback, 0x0, 0x0, 'dummy0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@ah={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 22:16:19 executing program 2: bpf$OBJ_GET_PROG(0x1c, 0x0, 0x0) 22:16:20 executing program 0: r0 = epoll_create(0x4d82) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) [ 503.808177][ T7667] x_tables: duplicate underflow at hook 2 [ 503.816097][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 503.853782][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 503.880009][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:20 executing program 4: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x100080, 0x0) 22:16:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000002740)={&(0x7f0000002640), 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 22:16:20 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') 22:16:20 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:20 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:20 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) write$binfmt_script(r0, 0x0, 0x0) 22:16:20 executing program 4: mount$9p_unix(0x0, 0x0, 0x0, 0x8aa4843438deb312, 0x0) 22:16:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 22:16:20 executing program 0: setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) 22:16:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x7}, 0x8) 22:16:20 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:20 executing program 1: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$yama_ptrace_scope(r0, 0x0, 0x0) 22:16:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3ff, 0x2}) [ 504.086610][ T7681] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) [ 504.150107][ T7681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:16:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}}, 0xa0) 22:16:20 executing program 4: sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) getpgid(0x0) r0 = syz_clone(0x40000, &(0x7f00000003c0)="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", 0xb9c, &(0x7f00000013c0), &(0x7f0000001400), &(0x7f0000001440)="b71df98f7d3406109e5e3138304e1b36149b6c65b890421687e023dfc551bca6c24b5769240d433527a66a53abf3a237c277e6752e09d375291076af9540e42b54af49ab66fa3ddf15e467b306b3e14a4fa87cbcf48dda0fc352c099ef0c7fbe4accb3e006af0c61") sched_rr_get_interval(r0, &(0x7f0000001540)) [ 504.254325][ T7681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 504.423411][ T7690] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 504.443198][ T7690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 504.453798][ T7690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:20 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:20 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) 22:16:20 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:20 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000280)) 22:16:20 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xe9}]}) 22:16:20 executing program 2: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x48080) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) 22:16:20 executing program 4: pipe2$9p(&(0x7f0000001300), 0x0) 22:16:20 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x7375440333d30c66, &(0x7f0000000040)=[{0x2}]}) 22:16:20 executing program 2: syz_open_dev$dri(&(0x7f0000000680), 0x1, 0x60242) 22:16:20 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000280)) 22:16:20 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0xfffffa1b}, 0x8) 22:16:20 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 504.664428][ T7720] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 504.748500][ T7720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 504.796300][ T7720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:21 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000002000), 0x4300, 0x0) 22:16:21 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x224202, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, 0x0, 0x0) 22:16:21 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x200) 22:16:21 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x44000, 0x0) 22:16:21 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:21 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:21 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x165841, 0x0) 22:16:21 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r0) 22:16:21 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f00000000c0)) 22:16:21 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) 22:16:21 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x453, 0x0, 0x0, 0x0, "e2", [""]}, 0x14}}, 0x0) 22:16:21 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) read$fb(r0, &(0x7f00000003c0)=""/245, 0xf5) 22:16:21 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 505.074717][ T7742] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 505.082531][ T7747] random: crng reseeded on system resumption [ 505.139944][ T7742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 505.169428][ T7742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:21 executing program 1: r0 = epoll_create(0x4d82) epoll_pwait(r0, &(0x7f0000000340)=[{}], 0x1, 0x0, &(0x7f00000003c0)={[0x8]}, 0x8) [ 505.182365][ T27] audit: type=1107 audit(1674771381.393:4): pid=7754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='â' 22:16:21 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0) 22:16:21 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c40)='./cgroup/syz0\x00', 0x200002, 0x0) 22:16:21 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:21 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:21 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, &(0x7f00000031c0)) 22:16:21 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000087c0), 0x0, 0x0) 22:16:21 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000003180)=@assoc_value, &(0x7f00000031c0)=0x8) 22:16:21 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x453, 0x0, 0x0, 0x0, "e2"}, 0x14}}, 0x4000000) 22:16:21 executing program 2: syz_open_dev$usbmon(&(0x7f0000000f00), 0xffffffffffffffff, 0x0) 22:16:21 executing program 0: semget(0x1, 0x2c34791660db21c7, 0x0) 22:16:21 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) [ 505.446000][ T7774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 505.455896][ T27] audit: type=1107 audit(1674771381.663:5): pid=7770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='â' 22:16:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001540)={0x14, r1, 0x1}, 0x14}}, 0x0) 22:16:21 executing program 2: r0 = epoll_create(0x4d82) epoll_pwait(r0, &(0x7f0000000340)=[{}], 0x1, 0x40, 0x0, 0x0) [ 505.502382][ T7774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:16:21 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000280)={{}, {0x0, 0x9}}) [ 505.558687][ T7774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:21 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:21 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3ff, 0x2, 0x9}) 22:16:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="f5"], 0x14}}, 0x0) 22:16:21 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0xfffffffffffffd6f, 0xfa00, {&(0x7f00000000c0)}}, 0x18) 22:16:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 22:16:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, 0x0, 0x0) 22:16:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x24}}, 0x0) 22:16:22 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:22 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001340)={0x420}, 0x420}}, 0x0) 22:16:22 executing program 4: socket$inet(0x2, 0xa, 0x8058) 22:16:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000600)={&(0x7f00000004c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0) [ 505.860929][ T7795] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 505.913634][ T7795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 505.967358][ T7795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:22 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:22 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001e40), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) 22:16:22 executing program 4: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) 22:16:22 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f00000007c0)) 22:16:22 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) 22:16:22 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x450803) 22:16:22 executing program 4: rt_sigprocmask(0x2, &(0x7f0000000000)={[0x7]}, &(0x7f0000000040), 0x8) 22:16:22 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "8d"}}, 0x119) 22:16:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r0) 22:16:22 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:22 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x30000, 0x0) [ 506.288968][ T5237] hid-generic 0000:0000:0000.0001: item fetching failed at offset 0/1 [ 506.290670][ T7824] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 506.330140][ T5237] hid-generic: probe of 0000:0000:0000.0001 failed with error -22 [ 506.369067][ T7824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 506.438418][ T7824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:23 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:23 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) 22:16:23 executing program 2: shmget(0x3, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) 22:16:23 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0xba504, 0x0) 22:16:23 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x4b0800) 22:16:23 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:23 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) 22:16:23 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffffff, 0x0) 22:16:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) 22:16:23 executing program 1: openat$ptp0(0xffffffffffffff9c, &(0x7f0000001bc0), 0x4401, 0x0) 22:16:23 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x10}, 0x10}}, 0x0) 22:16:23 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 507.303550][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 507.366658][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 507.402033][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x84) 22:16:23 executing program 2: getitimer(0x0, &(0x7f0000000280)) 22:16:23 executing program 0: openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) 22:16:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, 0x0) 22:16:23 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:23 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000140)) 22:16:23 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300), 0x2) 22:16:23 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 22:16:23 executing program 0: epoll_create(0x4d82) 22:16:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, 0x0) 22:16:23 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 507.764111][ T7874] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 507.806264][ T7874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 507.851814][ T7874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:24 executing program 1: r0 = epoll_create(0x4d82) epoll_pwait(r0, &(0x7f0000000340)=[{}], 0x1, 0x40, &(0x7f00000003c0)={[0x8]}, 0x8) 22:16:24 executing program 4: r0 = getpgrp(0xffffffffffffffff) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1, &(0x7f0000000380)=[{&(0x7f0000000280)=""/231, 0xe7}], 0x1, 0x0) 22:16:24 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000300)) 22:16:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0xb, 0x4) 22:16:24 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 508.017152][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 508.030511][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 508.039181][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:24 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) 22:16:24 executing program 4: accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x1800) 22:16:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @private}], 0x10) 22:16:24 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10}, 0x10}}, 0x0) 22:16:24 executing program 4: mount$pvfs2(0x0, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00), 0x0, &(0x7f0000000f40)) 22:16:24 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 508.217482][ T7903] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 508.287377][ T7903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 508.338261][ T7903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 508.471287][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, 0x0, 0x0) 22:16:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x338, 0xffffffff, 0x0, 0xd0, 0x300, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast1, @private, 0x0, 0x0, 'veth0\x00', 'syz_tun\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@ttl={{0x28}}, @common=@icmp={{0x28}, {0x0, "c264"}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "4c335fb185ba4090e73cca2c58a60a84c2ce68d74cff9a4e4eefb1d5dba8"}}}, {{@ip={@loopback, @loopback, 0x0, 0x0, 'dummy0\x00', 'geneve1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 22:16:24 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0x7f}}) 22:16:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f00000026c0)={0x1c, 0x0, 0x4, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 22:16:24 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 508.511450][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 508.519901][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:24 executing program 4: process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1, 0x0, 0x0, 0x0) 22:16:24 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)) 22:16:24 executing program 0: r0 = epoll_create(0x338) r1 = epoll_create(0x3d) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 22:16:24 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x41) 22:16:24 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:24 executing program 4: mount$pvfs2(&(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0) [ 508.727316][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 508.790564][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 508.845849][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 508.901945][ T7936] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfe, 0x10}, 0xc) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xe1060858}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) 22:16:25 executing program 2: openat$vmci(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) 22:16:25 executing program 1: sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)) 22:16:25 executing program 4: epoll_pwait(0xffffffffffffffff, &(0x7f0000000a80)=[{}], 0x1, 0x0, 0x0, 0x0) 22:16:25 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 508.961177][ T7936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 508.986816][ T7936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:25 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, 0x0, 0x0) 22:16:25 executing program 1: mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 22:16:25 executing program 4: mq_unlink(&(0x7f0000000ec0)='$]{#)\x00') 22:16:25 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x46081) 22:16:25 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:25 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000a00), 0x24800, 0x0) [ 509.180993][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 509.232069][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 509.285887][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 509.400198][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 509.423684][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:16:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:25 executing program 1: statx(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x800, 0x0, 0x0) 22:16:25 executing program 4: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 22:16:25 executing program 2: mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0) 22:16:25 executing program 0: socketpair(0x25, 0x1, 0x2, 0x0) 22:16:25 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 509.463181][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:25 executing program 4: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff) 22:16:25 executing program 1: sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/uts\x00') 22:16:25 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x641, 0x2a2b81) 22:16:25 executing program 2: symlinkat(&(0x7f0000000580)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000600)='./file0\x00') 22:16:25 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:25 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000380)={{0x0, 0x2}}) [ 509.633783][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 509.688029][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 509.716813][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 509.780762][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 509.834052][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 509.850595][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:26 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 22:16:26 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) 22:16:26 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, 0x8) 22:16:26 executing program 4: openat$nullb(0xffffffffffffff9c, 0x0, 0xba504, 0x0) 22:16:26 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:26 executing program 1: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x4dc080) 22:16:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}}, 0x0) [ 509.947624][ T8000] sctp: [Deprecated]: syz-executor.0 (pid 8000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 509.947624][ T8000] Use struct sctp_sack_info instead 22:16:26 executing program 2: sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0xb9462c2de789377d) 22:16:26 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0) 22:16:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x300, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast1, @private, 0x0, 0x0, 'veth0\x00', 'syz_tun\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x2a, 0x29], 0x0, 0x0, 0x8}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@ttl={{0x28}}, @common=@icmp={{0x28}, {0x0, "c264"}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "4c335fb185ba4090e73cca2c58a60a84c2ce68d74cff9a4e4eefb1d5dba8"}}}, {{@ip={@loopback, @loopback, 0x0, 0x0, 'dummy0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x1ff}}, @common=@ah={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 22:16:26 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 510.082253][ T8006] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 510.134581][ T8006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 510.177897][ T8014] x_tables: duplicate underflow at hook 2 [ 510.195065][ T8006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 510.307233][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:26 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) 22:16:26 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000600)=""/168, 0xa8) 22:16:26 executing program 4: symlinkat(&(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00') setxattr$incfs_id(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 22:16:26 executing program 1: mount(&(0x7f0000000b00)=ANY=[@ANYBLOB='/dev/sr0'], 0x0, 0x0, 0x0, 0x0) 22:16:26 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 510.351881][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 510.363084][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:26 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0x101, 0x0) 22:16:26 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, 0x0, 0x0) 22:16:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @empty, @multicast2}, 0xc) 22:16:26 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 22:16:26 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) [ 510.513340][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:26 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 510.615351][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 510.668531][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 510.716323][ T8038] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 510.727385][ T8038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 510.748073][ T8038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:27 executing program 2: r0 = getpid() sched_setaffinity(r0, 0x0, 0x0) 22:16:27 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) 22:16:27 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/186) 22:16:27 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) 22:16:27 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:27 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x1000, 0xa0}) 22:16:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000a80)=@proc, 0xc) 22:16:27 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x224202, 0x0) 22:16:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r0, 0x0, &(0x7f0000000fc0)) 22:16:27 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) 22:16:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0xf0}}, 0x0) [ 510.986058][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 511.057050][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 511.080419][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 511.156780][ T8063] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 511.170414][ T8063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 511.191380][ T8063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:27 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, &(0x7f00000000c0)) 22:16:27 executing program 1: setrlimit(0x0, &(0x7f0000000000)={0x5, 0xa23f}) 22:16:27 executing program 4: socketpair(0x1d, 0x0, 0x8, 0x0) 22:16:27 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4200) [ 511.214589][ T8067] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.0'. 22:16:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 22:16:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000480)=0x100) 22:16:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) 22:16:27 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0xaea8c1, 0x0) 22:16:27 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) 22:16:27 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) [ 511.429516][ T8079] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 511.504738][ T8079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 511.546111][ T8079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 511.630810][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 511.651642][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 511.659642][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:27 executing program 2: syz_open_dev$usbmon(&(0x7f0000000b40), 0xfffffffffffffffb, 0x0) 22:16:27 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb) 22:16:27 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x10}, 0x10}}, 0x0) 22:16:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, 0x0) 22:16:27 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8000000000000000) 22:16:27 executing program 2: mount$pvfs2(0x0, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00), 0x0, 0x0) 22:16:27 executing program 1: socketpair(0x2b, 0x1, 0xba14, 0x0) 22:16:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14"], 0x414}}, 0x0) [ 511.812072][ T8104] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:28 executing program 0: rt_sigprocmask(0x2, &(0x7f0000000000)={[0x7]}, 0x0, 0x8) 22:16:28 executing program 1: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000005680), 0xa300, 0x0) [ 511.866059][ T8104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 511.906982][ T8104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 511.987391][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:28 executing program 2: sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) 22:16:28 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:28 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x80000001, 0x8) 22:16:28 executing program 0: openat$userio(0xffffffffffffff9c, &(0x7f0000003900), 0x0, 0x0) 22:16:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000006c0)) [ 512.039186][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.058928][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:28 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) 22:16:28 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 22:16:28 executing program 2: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0x90000, 0x0) 22:16:28 executing program 0: openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0xac122, 0x0) [ 512.228779][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:28 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) 22:16:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000e00000001003b000000000008003b000000000006ea270000000087"], 0x38}}, 0x0) [ 512.270808][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.328421][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 512.434389][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 512.450203][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.472685][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:28 executing program 2: r0 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f00000007c0)) 22:16:28 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:28 executing program 1: openat$sw_sync(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) 22:16:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000008000000003d00000008005d00007cd4d746"], 0x24}}, 0x0) 22:16:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000002740)={&(0x7f0000002640), 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x1c, 0x0, 0x4, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 22:16:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 22:16:28 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) 22:16:28 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x64141) 22:16:28 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) 22:16:28 executing program 2: syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), 0xffffffffffffffff) 22:16:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20841) ioctl$BLKDISCARD(r0, 0x1277, 0x0) [ 512.732169][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 512.789708][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.814505][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 512.911304][ T8165] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 512.943187][ T8165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:16:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:29 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x42240, 0x0) 22:16:29 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:29 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) 22:16:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x0, @remote}}}, 0x90) 22:16:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x0, @multicast, 'pim6reg0\x00'}}, 0x1e) [ 512.957260][ T8165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:29 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x1b, 0x5, 0x400, 0x150, 0x150, 0xffffffff, 0x248, 0x0, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'macvlan1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @loopback, @private}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @multicast1, @port, @icmp_id}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@addrtype={{0x30}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @private, @port, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'wlan0\x00', 'dvmrp1\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ah={{0x30}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) 22:16:29 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) 22:16:29 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000280)={{0x3}}) 22:16:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r0) 22:16:29 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:29 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000400)) [ 513.133295][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 513.139966][ T8184] x_tables: duplicate underflow at hook 1 [ 513.212511][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 513.259332][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 513.353608][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 513.375755][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 513.395692][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:29 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x800}) 22:16:29 executing program 2: setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x100) 22:16:29 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, 0x0, 0x0) 22:16:29 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:29 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) 22:16:29 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) 22:16:29 executing program 1: r0 = getpid() capset(&(0x7f0000000000)={0x20080522, r0}, 0x0) 22:16:29 executing program 0: mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000600)) 22:16:29 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) 22:16:29 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:29 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) [ 513.595308][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 513.620652][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 513.659970][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 513.814944][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 513.867359][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 513.884474][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:30 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) 22:16:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x4, 0x200}) 22:16:30 executing program 1: openat$nullb(0xffffffffffffff9c, 0x0, 0x40, 0x0) 22:16:30 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000200)=@unspec, 0xc) 22:16:30 executing program 1: kexec_load(0x0, 0x1, &(0x7f0000001500)=[{0x0, 0x0, 0x0, 0xf98d}], 0x0) 22:16:30 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f00000007c0)={r0}) 22:16:30 executing program 0: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={[0x7fffffff]}, 0x8) 22:16:30 executing program 2: sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) r0 = epoll_create(0x4d82) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000f80)) 22:16:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 514.073527][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:30 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 514.113773][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 514.175098][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 514.273333][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 514.291842][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 514.301309][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:30 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) 22:16:30 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) 22:16:30 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40) 22:16:30 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000001300)={0x7, 0x1, &(0x7f0000001200)=[0x0], &(0x7f0000001240), &(0x7f0000001280), 0x0}) 22:16:30 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:30 executing program 4: r0 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) 22:16:30 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) 22:16:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000001140)=0x80, 0x4) 22:16:30 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x82601, 0x0) 22:16:30 executing program 4: socketpair(0xa, 0x0, 0xfff, 0x0) 22:16:30 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000040)={0x12}) [ 514.526643][ T8260] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 514.622906][ T8260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 514.645760][ T8260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:31 executing program 1: sysinfo(&(0x7f00000008c0)=""/4096) 22:16:31 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x1c}}, 0x0) 22:16:31 executing program 4: ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 22:16:31 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) [ 514.726328][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 514.755728][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 514.766103][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:31 executing program 1: ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001040)={0x0}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) 22:16:31 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) 22:16:31 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper, 0x2}) 22:16:31 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400), 0xc) 22:16:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000003c0)) 22:16:31 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x103083, 0x0) [ 514.949690][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 514.994413][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 515.023485][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 515.085594][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 515.120796][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 515.141448][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:31 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001640)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) 22:16:31 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:31 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0) 22:16:31 executing program 1: mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 22:16:31 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f00000034c0)={0x0, 0x0, 0x18}, 0x10) 22:16:31 executing program 4: syz_clone(0x18008800, 0x0, 0x0, 0x0, 0x0, 0x0) 22:16:31 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14}}], 0x18}, 0x0) 22:16:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x40049409, &(0x7f0000000540)) 22:16:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x5451, 0x0) 22:16:31 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:31 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xc}, {0x1}, {0xa}, {0x7, 0x2}]}, @restrict={0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000001640)=""/4096, 0x58, 0x1000, 0x1}, 0x20) [ 515.332370][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 515.351791][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 515.373809][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 515.496548][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 515.515018][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 515.524097][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:31 executing program 0: bpf$BPF_BTF_LOAD(0x3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 22:16:31 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:31 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 22:16:31 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='G', 0x1}], 0x1}, 0x850) 22:16:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="b6", 0x1}], 0x1, &(0x7f0000000840)=[@ip_ttl={{0x14}}, @ip_retopts={{0x10}}], 0x28}, 0x0) 22:16:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x1b03}) 22:16:31 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x100000}]}}, &(0x7f0000002640)=""/4106, 0x26, 0x100a, 0x1}, 0x20) 22:16:31 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x1000000}]}}, &(0x7f0000002640)=""/4106, 0x26, 0x100a, 0x1}, 0x20) 22:16:31 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='-', @ANYRESDEC, @ANYRES8], 0x68) 22:16:31 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454ca, &(0x7f0000000540)) [ 515.723187][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 515.766362][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 515.796152][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 515.933027][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 515.974667][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 515.984747][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:32 executing program 0: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001dc0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 22:16:32 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={0xffffffffffffffff, 0x24, 0x0, 0x0, 0x0}, 0x20) 22:16:32 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:32 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:16:32 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000004100)={{0x1, 0x1, 0x18}, './file0\x00'}) 22:16:32 executing program 0: syz_io_uring_setup(0x1840, &(0x7f0000002580)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000002600)) 22:16:32 executing program 4: fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x0) 22:16:32 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 22:16:32 executing program 1: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x181002, 0x0) 22:16:32 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:32 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000006880)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) [ 516.161534][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 516.224998][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 516.249711][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 516.363118][ T8367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 516.385698][ T8367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 516.397948][ T8367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:32 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) 22:16:32 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) read$FUSE(r0, 0x0, 0x0) 22:16:32 executing program 0: r0 = epoll_create(0x800) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280), &(0x7f00000002c0), 0x8) 22:16:32 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:32 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents(r0, &(0x7f0000000100)=""/176, 0xb0) 22:16:32 executing program 2: r0 = fsopen(&(0x7f0000000800)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='{\x00', &(0x7f00000000c0)='{\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='{\x00', 0x0) 22:16:32 executing program 1: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 22:16:32 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000005380), 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 22:16:32 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 22:16:32 executing program 1: openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) [ 516.558715][ T8384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:32 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0xfffffffffffffcb2) [ 516.605594][ T8384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 516.652385][ T8384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:33 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:33 executing program 4: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x44281, 0x0) 22:16:33 executing program 0: syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='.\x00', 0x2010, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}}, 0x0, 0x0, 0x0) 22:16:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$TUNSETIFINDEX(r0, 0x541b, 0x0) 22:16:33 executing program 2: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') rmdir(&(0x7f0000000100)='./file0\x00') [ 516.743948][ T8391] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 516.756730][ T8391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 516.767373][ T8391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:33 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 22:16:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(r0, &(0x7f0000001200)=[{&(0x7f0000001280)='-', 0x1}], 0x1) 22:16:33 executing program 0: r0 = io_uring_setup(0x2fea, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000000c0)=[0x0, 0x8000000], 0x2) 22:16:33 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:33 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:33 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) [ 516.957507][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 517.023621][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 517.086167][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 517.144656][ T8418] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 517.185055][ T8418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 517.209427][ T8418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:33 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) mount$9p_virtio(0x0, &(0x7f0000002480)='./file0\x00', 0x0, 0x100000, 0x0) 22:16:33 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:33 executing program 4: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001200), 0x40, 0x0) 22:16:33 executing program 0: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00') mount$9p_xen(0x0, &(0x7f00000023c0)='./file0/../file0\x00', 0x0, 0x108022, 0x0) 22:16:33 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:33 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x6480, 0x0) 22:16:33 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:33 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 22:16:33 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 22:16:33 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 517.410802][ T8434] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:33 executing program 4: mknodat$null(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x103) [ 517.472848][ T8434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 517.523665][ T8434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 517.596029][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:33 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:33 executing program 0: lstat(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) 22:16:33 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/39, 0x27}], 0x1, 0x0, 0x0) 22:16:33 executing program 4: renameat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 22:16:33 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 517.656499][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 517.665818][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:33 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:33 executing program 4: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) readv(r0, &(0x7f00000017c0)=[{&(0x7f0000000500)=""/83, 0x53}], 0x5d) 22:16:33 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read$FUSE(r0, 0x0, 0x0) 22:16:34 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 22:16:34 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002580)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/39, 0x27}], 0x1, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000040)=""/100, 0x64) 22:16:34 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=ANY=[], 0xd) [ 517.880859][ T8464] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 517.962777][ T8464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 518.014663][ T8464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:34 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:34 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000007480), 0x0) 22:16:34 executing program 4: r0 = io_uring_setup(0x3ea1, &(0x7f0000000180)) syz_io_uring_setup(0x297d, &(0x7f0000000000)={0x0, 0x0, 0x4b4, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 22:16:34 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000940)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, r2}}, 0x128) 22:16:34 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 518.095601][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 518.120242][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 518.128941][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:34 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:34 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 22:16:34 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x1df}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 22:16:34 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x2010, 0x0) 22:16:34 executing program 0: r0 = io_uring_setup(0x3971, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0) [ 518.324665][ T8487] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:34 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000005380), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000005380), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r1, &(0x7f00000021c0)={0x18, 0x0, r2}, 0x18) [ 518.381524][ T8487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 518.415758][ T8487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 518.532860][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 518.546899][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 518.555297][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:34 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:34 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) 22:16:34 executing program 2: mount$binderfs(&(0x7f00000016c0), &(0x7f0000001700)='./binderfs\x00', &(0x7f0000001740), 0x0, &(0x7f0000005800)={[{@stats}]}) 22:16:34 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x280013, r0, 0x0) 22:16:34 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:34 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:34 executing program 4: r0 = syz_io_uring_setup(0x29bd, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 22:16:34 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x185c02) 22:16:34 executing program 2: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x0) 22:16:35 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:35 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006740)={0x2020}, 0x2020) [ 518.785454][ T8514] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 518.839078][ T8514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 518.858215][ T8514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:35 executing program 2: mount$9p_tcp(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0) rmdir(&(0x7f0000002cc0)='./file1\x00') 22:16:35 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@OVL_FILEID_V1={0x81, 0xf8, {'\x00', {0x0, 0xfb, 0x7e, 0x0, 0x0, "efa550c3950a896e6fcdcc0681e13d25", "d240d181d87a5d7f6c9ce25de1cc650045d2ba3f00b3414a93746361847786d192c39679c629c9d043d1aac2b2adacaa6c7de299bbbb8360b6b606dc9b1a4d7cc6cd235d145f6c6f6d7671fff5d13c467b2a9de4d5170ba01f148b67d7ddea033d4c2e3b8c81a5cf8e"}}}, 0x0, 0x0) 22:16:35 executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 22:16:35 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:35 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:35 executing program 0: openat$damon_attrs(0xffffffffffffff9c, 0x0, 0x0, 0x128) r0 = epoll_create(0x800) clock_gettime(0x0, &(0x7f0000000240)={0x0}) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280)={r1}, 0x0, 0x0) 22:16:35 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, 0x0) 22:16:35 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:35 executing program 4: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040), &(0x7f0000000080)={[0xc000000000000000]}, 0x8) 22:16:35 executing program 4: r0 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000005380), 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='\'%%\x00', 0x0, r1) 22:16:35 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006740)={0x2020}, 0x2020) [ 519.143919][ T8537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 519.225150][ T8537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 519.270755][ T8537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:35 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x100002) write$nci(r0, 0x0, 0x0) 22:16:35 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 22:16:35 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:35 executing program 2: io_uring_setup(0x7079, &(0x7f0000000000)={0x0, 0x0, 0x8}) [ 519.539337][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 519.568260][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 519.589995][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:36 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002580)='/proc/timer_list\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x20000009}) 22:16:36 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x88081, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) 22:16:36 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:36 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 22:16:36 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:36 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000440), 0x86880) 22:16:36 executing program 2: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) 22:16:36 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:36 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/16, 0x10}], 0x1, 0xfffffffd, 0x0) [ 519.989404][ T8568] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 520.026980][ T8568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:16:36 executing program 4: read$proc_mixer(0xffffffffffffffff, 0x0, 0x0) 22:16:36 executing program 2: r0 = io_uring_setup(0x142a, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000001340)={0x2, 0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], &(0x7f00000012c0)}, 0x20) [ 520.084525][ T8568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:36 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:36 executing program 4: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x17aa30bdfe37dea2, &(0x7f0000002440)=ANY=[], 0x0, 0x0, 0x0) 22:16:36 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000002240)={0x18}, 0x18) fcntl$getownex(r0, 0x10, &(0x7f00000022c0)) 22:16:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:36 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:36 executing program 2: renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 22:16:36 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 22:16:36 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:36 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 22:16:36 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0xd) 22:16:36 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:36 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) read$nci(r0, 0x0, 0x0) 22:16:36 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 520.393948][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:36 executing program 2: r0 = syz_io_uring_setup(0x938, &(0x7f00000000c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 520.482128][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:16:36 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006740)={0x2020}, 0x2020) [ 520.534112][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:36 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:36 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0x40086602, 0x0) 22:16:36 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/39, 0x27}], 0x1, 0x0, 0x0) 22:16:36 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:36 executing program 2: syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='.\x00', 0x30920a2, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}}, 0x0, 0x0, 0x0) 22:16:37 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 22:16:37 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:37 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x315200, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='/dev/bsg\x00', &(0x7f0000000040)='./file0\x00', r1) 22:16:37 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) [ 520.819486][ T8628] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 520.846959][ T8628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:16:37 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:37 executing program 4: r0 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000000), 0x721001, 0x0) fcntl$getown(r0, 0x2) [ 520.887626][ T8628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:37 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:37 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) 22:16:37 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x541b, 0x0) 22:16:37 executing program 4: r0 = fsopen(&(0x7f0000000800)='hfs\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x801c581f, 0x0) 22:16:37 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:37 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/16, 0x10}], 0x1, 0x0, 0x0) 22:16:37 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:37 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 22:16:37 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x240002) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000180)='1000000\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) [ 521.145015][ T8646] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:37 executing program 2: fsopen(&(0x7f0000000140)='cramfs\x00', 0x0) 22:16:37 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/170, 0xaa) [ 521.213549][ T8646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 521.278967][ T8646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:37 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:37 executing program 4: mount$pvfs2(0x0, 0x0, 0x0, 0x0, 0x0) 22:16:37 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:37 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0x541b, 0x0) 22:16:37 executing program 0: r0 = io_uring_setup(0x142a, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000001340)={0x2, 0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4096, 0x1000}, {0x0}], &(0x7f00000012c0)}, 0x20) 22:16:37 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006740)={0x2020}, 0x2020) 22:16:37 executing program 4: r0 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$damon_contexts(r0, 0x0, 0x0) 22:16:37 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002580)='/proc/bus/input/devices\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) 22:16:37 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006ec0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}, 0x0, 0x0, 0x0) 22:16:37 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006740)={0x2020}, 0x2020) [ 521.553783][ T8679] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 521.593551][ T8679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:16:37 executing program 0: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x1}, &(0x7f00000000c0)={0x5}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xff]}, 0x8}) [ 521.638226][ T8679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:38 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:38 executing program 4: r0 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$damon_contexts(r0, 0x0, 0x0) 22:16:38 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) syz_io_uring_setup(0x1d99, &(0x7f0000000240)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 22:16:38 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 22:16:38 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 22:16:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000002440)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) [ 521.851841][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 521.877234][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:16:38 executing program 4: lstat(&(0x7f0000002200)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 22:16:38 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 22:16:38 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 521.919108][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:38 executing program 2: r0 = epoll_create(0x1) lseek(r0, 0x0, 0x0) 22:16:38 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x16cc0, 0x0) 22:16:38 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 22:16:38 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:38 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="1d", 0x1}], 0x1) 22:16:38 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat(r0, &(0x7f0000002240)='./file0\x00', r0, &(0x7f0000002280)='./file0\x00') 22:16:38 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 22:16:38 executing program 1: statx(0xffffffffffffffff, &(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) 22:16:38 executing program 2: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0xc0001, 0x0) write$proc_mixer(r0, &(0x7f0000000080)=[{'PCM', @void}], 0x4) 22:16:38 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/168, 0xa8) 22:16:38 executing program 0: r0 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000000), 0x721001, 0x0) fcntl$getown(r0, 0x406) 22:16:38 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000540)=""/12, 0xc}, {&(0x7f0000000580)=""/153, 0x99}], 0x2) [ 522.292358][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 522.368849][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:16:38 executing program 4: name_to_handle_at(0xffffffffffffffff, &(0x7f0000002b40)='./file1\x00', 0x0, 0x0, 0x0) 22:16:38 executing program 2: r0 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000000), 0x721001, 0x0) fcntl$getown(r0, 0x3) 22:16:38 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 522.422665][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 522.442022][ T8741] dlm: non-version read from control device 153 22:16:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:38 executing program 0: mount$binderfs(0x0, &(0x7f0000001700)='./binderfs\x00', &(0x7f0000001740), 0x0, &(0x7f0000005800)={[{@stats}]}) 22:16:38 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000540)=""/12, 0xc}, {&(0x7f0000000580)=""/153, 0x99}], 0x2) 22:16:38 executing program 2: syz_io_uring_setup(0x5430, &(0x7f0000001480)={0x0, 0x3ca6, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000001140), &(0x7f0000001180)) 22:16:38 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) read$snapshot(r0, &(0x7f00000000c0)=""/178, 0xb2) 22:16:38 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:38 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) 22:16:38 executing program 0: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0x100000, 0x0, 0x0, {r0}}, 0x20) 22:16:38 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000540)=""/12, 0xc}, {&(0x7f0000000580)=""/153, 0x99}], 0x2) 22:16:38 executing program 4: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000080)={[0xc000000000000000]}, 0x8) [ 522.656392][ T8755] dlm: non-version read from control device 153 [ 522.681224][ T8758] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:38 executing program 2: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff, 0x0) 22:16:38 executing program 0: r0 = epoll_create(0xe79) clock_gettime(0x0, &(0x7f0000000040)={0x0}) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)={r1}, 0x0, 0x0) [ 522.734471][ T8758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 522.770841][ T8767] dlm: non-version read from control device 153 [ 522.802988][ T8758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:39 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, 0x0, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:39 executing program 4: r0 = io_uring_setup(0x3ea1, &(0x7f0000000100)) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r1], 0x1) 22:16:39 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000540)=""/12, 0xc}, {&(0x7f0000000580)=""/153, 0x99}], 0x2) 22:16:39 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x8a, 0x0, 0xe0000}, 0x20) 22:16:39 executing program 4: name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) 22:16:39 executing program 2: linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x1800) 22:16:39 executing program 1: readv(0xffffffffffffffff, &(0x7f0000002940)=[{&(0x7f0000000540)=""/12, 0xc}, {&(0x7f0000000580)=""/153, 0x99}], 0x2) [ 522.951673][ T8779] dlm: non-version read from control device 153 22:16:39 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, 0x0, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:39 executing program 4: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0103, 0x0) readv(r0, 0x0, 0x0) [ 523.004280][ T8781] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:39 executing program 1: readv(0xffffffffffffffff, &(0x7f0000002940)=[{&(0x7f0000000540)=""/12, 0xc}, {&(0x7f0000000580)=""/153, 0x99}], 0x2) [ 523.056817][ T8781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 523.088806][ T8781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:39 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002580)='/proc/timer_list\x00', 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/170, 0xaa) read$dsp(r0, &(0x7f0000000000)=""/10, 0xa) 22:16:39 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/170, 0xaa) 22:16:39 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) 22:16:39 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, 0x0, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:39 executing program 1: readv(0xffffffffffffffff, &(0x7f0000002940)=[{&(0x7f0000000540)=""/12, 0xc}, {&(0x7f0000000580)=""/153, 0x99}], 0x2) 22:16:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:39 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000005380), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 22:16:39 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000540)=""/12, 0xc}, {&(0x7f0000000580)=""/153, 0x99}], 0x2) [ 523.707191][ T8801] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:39 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000043c0)={'#! ', './file0', [{0x20, '/dev/vga_arbiter\x00'}]}, 0x1d) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 22:16:40 executing program 0: r0 = fsopen(&(0x7f0000000800)='hfs\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x5451, 0x0) 22:16:40 executing program 4: r0 = fsopen(&(0x7f0000000800)='hfs\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xc020660b, 0x0) [ 523.770383][ T8801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:16:40 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:40 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000540)=""/12, 0xc}, {&(0x7f0000000580)=""/153, 0x99}], 0x2) [ 523.814838][ T8801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:40 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000022c0)) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002340)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xf11) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000004780)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 22:16:40 executing program 0: syz_io_uring_setup(0x4fae, &(0x7f0000001680), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001700), &(0x7f0000001740)) 22:16:40 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001780)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 22:16:40 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000540)=""/12, 0xc}, {&(0x7f0000000580)=""/153, 0x99}], 0x2) 22:16:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:40 executing program 2: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000040), 0x8) 22:16:40 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:40 executing program 4: fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) 22:16:40 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x100000, 0x0, 0x0, {r0}}, 0x20) 22:16:40 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002940)=[{&(0x7f0000000540)=""/12, 0xc}, {&(0x7f0000000580)=""/153, 0x99}], 0x2) 22:16:40 executing program 2: r0 = epoll_create(0x800) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280), &(0x7f00000002c0)={[0x4]}, 0x8) [ 524.125951][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:40 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xc0101, 0x0) 22:16:40 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) [ 524.169416][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:16:40 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002940)=[{&(0x7f0000000540)=""/12, 0xc}, {&(0x7f0000000580)=""/153, 0x99}], 0x2) 22:16:40 executing program 2: r0 = fsopen(&(0x7f0000000800)='hfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 22:16:40 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 524.219571][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 524.272303][ T8845] QAT: Invalid ioctl -1006595040 22:16:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:40 executing program 4: mount$fuseblk(&(0x7f0000000040), 0x0, &(0x7f00000000c0), 0x0, 0x0) 22:16:40 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) 22:16:40 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002940)=[{&(0x7f0000000540)=""/12, 0xc}, {&(0x7f0000000580)=""/153, 0x99}], 0x2) 22:16:40 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 22:16:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 22:16:40 executing program 2: r0 = epoll_create(0x3) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000005380), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 22:16:40 executing program 0: r0 = epoll_create1(0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006ec0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000002600)) 22:16:40 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, 0x0, 0x0) 22:16:40 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:40 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000006880)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)) 22:16:40 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, 0x0, 0x0) [ 524.500767][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 524.558497][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 524.600167][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:40 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/170, 0xaa) 22:16:40 executing program 2: openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) 22:16:40 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/159, 0x9f}], 0x1) 22:16:40 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, 0x0, 0x0) 22:16:40 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:40 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000540)=""/12, 0xc}], 0x1) 22:16:40 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) move_mount(r0, &(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0/../file0\x00', 0x0) 22:16:40 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$qrtrtun(r0, &(0x7f0000000280)=""/223, 0xdf) 22:16:41 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) 22:16:41 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000540)=""/12, 0xc}], 0x1) 22:16:41 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 524.835048][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 524.861637][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 524.905389][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:41 executing program 2: r0 = epoll_create(0x800) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280)={0x0, r1+10000000}, 0x0, 0x0) 22:16:41 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0) [ 525.096511][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 525.110199][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 525.120779][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:41 executing program 4: io_uring_setup(0x7079, &(0x7f0000000000)={0x0, 0xa374, 0x8}) 22:16:41 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000540)=""/12, 0xc}], 0x1) 22:16:41 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 22:16:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:41 executing program 2: lstat(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000240)) 22:16:41 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0x80086601, 0x0) 22:16:41 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000006880)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe, 0x13, r0, 0x0) 22:16:41 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000540)=""/12, 0xc}, {0x0}], 0x2) 22:16:41 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000180)={{}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid}) [ 525.651442][ T8917] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:41 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006ec0), 0x2, 0x0) readv(r0, &(0x7f00000017c0)=[{&(0x7f0000000500)=""/83, 0x53}], 0x53) 22:16:41 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:41 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) 22:16:42 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) 22:16:42 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000540)=""/12, 0xc}, {0x0}], 0x2) 22:16:42 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000002580)='/proc/bus/input/devices\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x8}, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) [ 525.767323][ T8917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 525.809045][ T8917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:42 executing program 0: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0xd7e1}, &(0x7f0000000100), 0x0) 22:16:42 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) 22:16:42 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000540)=""/12, 0xc}, {0x0}], 0x2) 22:16:42 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000005380), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000000080)={0x18, 0x0, r1}, 0x18) 22:16:42 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:42 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) linkat(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) 22:16:42 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002580)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/39, 0x27}], 0x1, 0x10, 0x0) 22:16:42 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000580)=""/153, 0x99}], 0x1) 22:16:42 executing program 2: mount$pvfs2(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 22:16:42 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) [ 526.063725][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:42 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000002240)='cpuset.memory_spread_page\x00', 0x2, 0x0) [ 526.113145][ T8956] dlm: non-version read from control device 153 [ 526.136274][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 526.166550][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 526.285501][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 526.325570][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 526.335567][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:42 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000580)=""/153, 0x99}], 0x1) 22:16:42 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0x5452, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) 22:16:42 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:42 executing program 2: mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10031, 0xffffffffffffffff, 0x0) 22:16:42 executing program 4: r0 = fsopen(&(0x7f0000000140)='cramfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000180)='rootfs\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) 22:16:42 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=tcp']) [ 526.466469][ T8971] dlm: non-version read from control device 153 22:16:42 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) 22:16:42 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x800, 0x1) truncate(&(0x7f0000000000)='./file0\x00', 0x0) 22:16:42 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000580)=""/153, 0x99}], 0x1) 22:16:42 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 526.583294][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:42 executing program 2: mount$fuseblk(&(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000280)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}}) [ 526.632745][ T8983] dlm: non-version read from control device 153 [ 526.640943][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 526.643657][ T8980] 9pnet_fd: p9_fd_create_tcp (8980): problem connecting socket to 127.0.0.1 [ 526.668263][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 526.792915][ T8984] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 526.827106][ T8984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:16:43 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000002940)=[{0x0}, {&(0x7f0000000580)=""/153, 0x99}], 0x2) 22:16:43 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010000001c"]) 22:16:43 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0x40086602, 0x0) 22:16:43 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006ec0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xc00, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}, 0x0, 0x0, 0x0) 22:16:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:43 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 526.858451][ T8984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:43 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) utime(&(0x7f0000000000)='./file0\x00', 0x0) 22:16:43 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, 0x0, 0x0) [ 526.955383][ T8996] autofs4:pid:8996:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d) [ 526.957281][ T8998] dlm: non-version read from control device 0 22:16:43 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000002940)=[{0x0}, {&(0x7f0000000580)=""/153, 0x99}], 0x2) 22:16:43 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x9be7ec2599f731d9, 0x0) 22:16:43 executing program 4: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000180)='1', 0x1) 22:16:43 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 527.077491][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:43 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0}}, 0x120) 22:16:43 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x81, 0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) [ 527.138135][ T9007] dlm: non-version read from control device 0 22:16:43 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000002940)=[{0x0}, {&(0x7f0000000580)=""/153, 0x99}], 0x2) 22:16:43 executing program 4: r0 = fsopen(&(0x7f0000000800)='hfs\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x2, 0x0) [ 527.195086][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 527.231120][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 527.289493][ T9019] dlm: non-version read from control device 0 [ 527.376022][ T9012] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 527.405566][ T9012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 527.420676][ T9012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:43 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000300)='./file0\x00') 22:16:43 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 22:16:43 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:43 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0x2, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) 22:16:43 executing program 4: mkdir(&(0x7f0000001180)='./file0\x00', 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x0) 22:16:43 executing program 1: r0 = io_uring_setup(0x3ea1, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x20000000}) 22:16:43 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x30140, 0x0) 22:16:43 executing program 0: io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) 22:16:43 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fchown(r0, 0x0, 0x0) 22:16:43 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000001680), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001700), &(0x7f0000001740)) 22:16:43 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 527.671920][ T9034] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 527.750538][ T9034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 527.808936][ T9034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:44 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) faccessat2(r0, &(0x7f00000000c0)='./file0\x00', 0x2, 0x1100) 22:16:44 executing program 1: openat$cuse(0xffffffffffffff9c, &(0x7f0000005380), 0x2, 0x0) 22:16:44 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000005380), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0xffffffffffffff71) 22:16:44 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) 22:16:44 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 527.913509][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 527.930355][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 527.940199][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:44 executing program 0: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff, 0x0) 22:16:44 executing program 2: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000032c0), 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000003300)={'#! ', './file0'}, 0xb) 22:16:44 executing program 4: r0 = io_uring_setup(0x2fea, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000000c0), 0x2) 22:16:44 executing program 1: mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x0, 0x0, 0x20000}, 0x20) 22:16:44 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2000, 0x1) 22:16:44 executing program 0: syz_io_uring_setup(0x20077e0, &(0x7f0000000240), &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000380)) [ 528.115692][ T9061] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 528.181604][ T9061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 528.234183][ T9061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 528.316634][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 528.352007][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:16:44 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:44 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) 22:16:44 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x202000) fcntl$getown(r0, 0x9) 22:16:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:44 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='/dev/bsg\x00', &(0x7f0000000040)='./file0\x00', r1) 22:16:44 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000005380), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000002040)={0x30}, 0x30) [ 528.361624][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:44 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000200)=""/195, 0xc3}], 0x2) 22:16:44 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000004300)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) 22:16:44 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000006880)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000006b40)={0xf, 0x8}, 0x10) 22:16:44 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) 22:16:44 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) readv(r0, &(0x7f0000001500)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) 22:16:44 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(r0, &(0x7f00000000c0)=""/14, 0xe) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/219, 0xdb}, {&(0x7f0000000200)=""/83, 0x53}], 0x2) [ 528.542587][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:44 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/84, 0x54) [ 528.605259][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 528.671663][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:45 executing program 0: r0 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$damon_contexts(r0, &(0x7f00000001c0)=[{' ', './file0'}, {' ', './file0'}], 0x2) 22:16:45 executing program 4: fsopen(&(0x7f0000000000)='rootfs\x00', 0x0) 22:16:45 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/170, 0xaa) 22:16:45 executing program 1: linkat(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', 0x0) 22:16:45 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:45 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 528.806927][ T9094] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 528.826447][ T9094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 528.842236][ T9094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:45 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) truncate(&(0x7f0000000000)='./file0\x00', 0x0) 22:16:45 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000180)=""/171, 0xab) 22:16:45 executing program 2: r0 = io_uring_setup(0x4973, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x10000000) 22:16:45 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:45 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) mount$pvfs2(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2e156f6210407940, &(0x7f0000002400)) 22:16:45 executing program 2: mount$9p_xen(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) chmod(&(0x7f0000000280)='./file0\x00', 0x0) 22:16:45 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) mount$9p_xen(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0) [ 529.065552][ T9116] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:45 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x88281, 0x0) write$FUSE_ATTR(r0, &(0x7f0000003080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xee00}}}, 0x78) 22:16:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) 22:16:45 executing program 2: r0 = io_uring_setup(0x2fea, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000000c0)=[0x2, 0x8000000], 0x2) [ 529.218795][ T9116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 529.253211][ T9116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:45 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:45 executing program 1: openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x6400, 0x0) 22:16:45 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/170, 0xaa) 22:16:45 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x9}, 0x8) 22:16:45 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:45 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006ec0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) 22:16:45 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 22:16:45 executing program 2: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) readv(r0, &(0x7f00000017c0)=[{&(0x7f0000000500)=""/83, 0x53}], 0x1) 22:16:45 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000002580)='/proc/bus/input/devices\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) 22:16:45 executing program 2: syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1300060, &(0x7f0000000100)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}}, 0x0, 0x0, 0x0) 22:16:45 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:45 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) [ 529.559726][ T9148] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 529.610920][ T9148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 529.626654][ T9160] ======================================================= [ 529.626654][ T9160] WARNING: The mand mount option has been deprecated and [ 529.626654][ T9160] and is ignored by this kernel. Remove the mand [ 529.626654][ T9160] option from the mount to silence this warning. [ 529.626654][ T9160] ======================================================= [ 529.664717][ T9148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:46 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:46 executing program 0: r0 = syz_io_uring_setup(0x206e, &(0x7f0000001040), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000010c0), &(0x7f0000001100)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) 22:16:46 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:46 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0) 22:16:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)='G', 0x1}], 0x1) [ 529.974832][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 530.002538][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 530.016023][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:46 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 22:16:46 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0x401c5820, 0x0) 22:16:46 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x8103, 0x0) 22:16:46 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) write$vga_arbiter(r0, &(0x7f0000000080), 0xf) 22:16:46 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 22:16:46 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/183, 0xb7) 22:16:46 executing program 0: r0 = fsopen(&(0x7f0000000800)='hfs\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x5460, 0x0) 22:16:46 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', 0x0, 0x6000, 0x0) 22:16:46 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x8001, 0x0) write$proc_mixer(r0, &(0x7f0000000000)=[{'DIGITAL3', @void}], 0x9) 22:16:46 executing program 1: r0 = fsopen(&(0x7f0000000000)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='binder\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) 22:16:46 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:46 executing program 4: syz_io_uring_setup(0x4fae, &(0x7f0000001680)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001700), &(0x7f0000001740)) [ 530.477918][ T9183] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:46 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={r0, r1+60000000}, &(0x7f0000000140)={0x0}) 22:16:46 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) 22:16:46 executing program 4: r0 = io_uring_setup(0x142a, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000001340)={0x1, 0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0}, 0x20) 22:16:46 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 530.596440][ T9183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 530.625308][ T9183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 22:16:47 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002580)='/proc/bus/input/devices\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 22:16:47 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000b40)={0x2020}, 0x2020) 22:16:47 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006ec0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 22:16:47 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 530.880323][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 530.893357][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 530.901951][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x38) 22:16:47 executing program 1: openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) 22:16:47 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/170, 0xaa) 22:16:47 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002580)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x60000000}) 22:16:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 22:16:47 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:47 executing program 1: r0 = syz_io_uring_setup(0x498, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x5151, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) 22:16:47 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) lseek(r0, 0xffffffffffffffff, 0x0) 22:16:47 executing program 2: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 22:16:47 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000006880)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) 22:16:47 executing program 2: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x10040, 0x0) 22:16:47 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x141040, 0x0) 22:16:47 executing program 1: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040), &(0x7f0000000080), 0x8) 22:16:47 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 531.545784][ T9235] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:47 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x51d501, 0x0) 22:16:47 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x100082, 0x1f0000}, 0x20) [ 531.603349][ T9235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 531.631961][ T9235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 22:16:48 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 22:16:48 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='/sys/kernel/debug/damon/attrs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) 22:16:48 executing program 4: r0 = syz_io_uring_setup(0x618d, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:16:48 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 22:16:48 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:48 executing program 2: mkdir(&(0x7f0000004a40)='./file0\x00', 0x0) 22:16:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) 22:16:48 executing program 1: r0 = io_uring_setup(0x142a, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 22:16:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "388d9d", "0ee29f2db8917ee36abc9469a2d32506d05ccf1f882144141346a6f7713f0a32eee6f130e80eb00af84c670e7bf275010d3525de740f7be2cb2e81114128029da8b827a755f3879bb4a777fd7ac58cd6ac6762eadfaaa9a8e57c96b7b852edc67cf384d7d481ef3b5a23facabbfb214937b450bb3f633bf098b47b5ef5f9b2f8e7ddf6e17d15335260ec64ab28f9f054ce5c04e01f26eacd8d1fc5b1f9a87f6f00f04dca5f0ff99e565e85c7c6ee7d006d0fd3a08956aa8d44e68ac785efca48ecb386c61611003487348c57cd9ea8040f4b387058545fdb6a08d569e9dbc1cdc4b91bdd1fd29837ddf6d2b355f2465727306944c8980c351b9d2a938b56af4f"}}, 0x110) 22:16:48 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:48 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x3210c0, 0x0) [ 532.081787][ T9265] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 532.149685][ T9265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 532.166930][ T9265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 22:16:48 executing program 2: r0 = fsopen(&(0x7f0000000800)='hfs\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x541b, 0x0) 22:16:48 executing program 4: openat$fuse(0xffffffffffffff9c, &(0x7f0000002400), 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) 22:16:48 executing program 0: r0 = fsopen(&(0x7f0000000800)='hfs\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x80086601, 0x0) 22:16:48 executing program 1: syz_io_uring_setup(0x924, &(0x7f0000000080)={0x0, 0xa28e, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 22:16:48 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:48 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8cc40, 0x0) 22:16:48 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006ec0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x0, 0x0, 0x0) 22:16:48 executing program 0: openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x84203, 0x0) 22:16:48 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$proc_mixer(r0, 0x0, 0x0) 22:16:48 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:48 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) [ 532.533421][ T9294] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 532.583094][ T9294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 532.594418][ T9294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 22:16:48 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat2(r1, &(0x7f00000012c0)='./file0\x00', r0, &(0x7f0000001300)='./file0\x00', 0x2) 22:16:48 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000005380), 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x50010, r0, 0x0) 22:16:48 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x292340, 0x0) 22:16:48 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:48 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) 22:16:49 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0xc000, 0x0) 22:16:49 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) 22:16:49 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 22:16:49 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:49 executing program 0: mknod$loop(0x0, 0x1000, 0x0) 22:16:49 executing program 2: fcntl$setsig(0xffffffffffffffff, 0xa, 0x6) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fstat(r0, &(0x7f0000000080)) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000240)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a80), 0x802, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001580)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = dup(r1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000001600)={0x6000, 0x0, &(0x7f00000015c0)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x6) r4 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000001640), 0x464482, 0xa0) syz_io_uring_setup(0x4fae, &(0x7f0000001680)={0x0, 0x283b, 0x2, 0x1, 0x3dd, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001700), &(0x7f0000001740)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001780)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001980)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) [ 532.950605][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 533.003494][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 533.042584][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 22:16:49 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1ad187c, 0x0) 22:16:49 executing program 1: fsopen(&(0x7f0000000140)='cifs\x00', 0x0) 22:16:49 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f00000024c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 22:16:49 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:49 executing program 2: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000008a00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0) 22:16:49 executing program 1: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x100008}, 0x20) 22:16:49 executing program 4: statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x6000, 0x0, 0x0) 22:16:49 executing program 2: mknod$loop(0x0, 0xa5c0, 0x1) 22:16:49 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000700)='encrypted\x00', &(0x7f0000000740)='gcm(aes)\x00') 22:16:49 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:49 executing program 2: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000040)={0x72, 0xf1}, 0x20) [ 533.395634][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x21, &(0x7f0000000000), 0x4) 22:16:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x80000000, 0x4) 22:16:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x7, 0x0, 0x0) 22:16:49 executing program 2: add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000b00)="bc7b0f25ecc3452502842eb0effb0d1c956cc834c73de5b889b415a4270455e4afab350fddec34572a16e48267228fac99310387d0048698644f95f603d2e9a4d86513dbd4d896456deb49cb5f2f319053594305ef8cd244f69f2e67e8595f634fa395abca5042b216cbcb5baa59b7a8f73dc41976cd5cda3f77abcbe0d18ad06cb03caf2c06d0602625574b6cab7bf733323fdd88f32799e586d5f24ad6017f748671486ba3c3868eedc23009e512d6d4fee6799c96a2a412e1312eb4c18da363cfd67f76f7e4f183291a04d44ed819f01b03cc4f1794f1309e2cbcb0e82629651a83e6a32a60990d18c62283cfb5b2c534d328c3fa24a358092c5a0e696766093d0a90c0e0eb5baa371af62114e22502d2db5686901511ae074f878d41ed20c9cd2eed639e2f9ec69c734c6eaf8ab5f538b07b0f946674f57520e318c2496ba5fc80ad912c19d759226628580168894330884b7854681bc1dddda0f47a386824ed11ffb7c64eac4be69c5691f39b413ae5e0fb566cef1a97bdf8ef72c74a5ba174ea91c115ca4479464778b66f835674f179f6f798444b58164b490c70e5d2393c177a8da4a4abe309d9dc838a9bfb21b1e1c0d75d81893cb6e1b8d71714b8975b9ba8873f4f054a4e1bd1a74bbf95b7f2a3b1ea88889f3f37d4a8f1169227f256edb28010d72e7ba523a7cb8819f17c83ef5c59f44bc4832d6191466eb21cb3a5a1db04e87b0bc05a175fe46096ab4e22feab41778300a568c60db6c420617542cd9eaa537f62d65d9907865da0d70140c336d47a4687413fbc63eb27abb4b74bdcd4537c544866d176da0a67f17f6a2402742c6926d9c08a594243185b24055355750ebe7a6aa0f08ecd9b0296ced5ed22d83c9c7fd761608bc45be6d74aed6ff4bde88bc31a317b3f60120173e38ca5fcba9547ae2e930f3c4a4a9f145cbc88cd4dce8eddb136a1e1aa793e01392b7d41070760e89a4b1271c135e3eeeb9fb75cab101a10985508118b118ec00bf65b751176e4198e7cf51afca3311b2c46f3a1cfb8bbe8aec4978340546d0dc659313476a5a7a9bdb451976d7ecc088e77edcb5bff1d7bd9b1465d6a775944871b9a1f3e71a68d8decf288cc217203f97a25a274a325680629bf6d9a5c8fde107d790e1cb63e45af00021a4aefad8605f185266761351354a007613f32a1d970e98b74a0ce7820ad51932b854372cdfabc75b5c35417c4d111db807b57263d5df6e0aadc0523d02871f0771c0e89235f9b03da85776c3b4574d5adf973e59ccc839deb03524fffb88f515f58225b6c19e00d528de7ae1e0750fa37954cb328578c45d345a236aa9f8f1442d624b1a725273d7cf9ce550c3481e76802b5d12428d080b3b3180034a7554ef783525ce96180e1ed3627402893d5c36ed06b2788901ebfea9968fc0640c510e08fb13a3f470271acc11a4a538dc78d2d1bf819c8293f59aea3b881a7b78f92fe34828b12dce2b642a67dc1abd7dc08c42f17e108bbeb1dd78cfc2bc5a83dfe685eb1eeb6d0676a2b8f2c8e6cc05523aae5d2099e0288e1e27f5cacf997810299a8ade4be8d168a6778884a84e10869f30fe5d91d1c1dbb20f63ad7186a39d7e837407888b39fc37f54308586a6860af7fd79ae60259f5f39af00bdf47c85303899211e9a53185f713f80a6976689062b6abf13dad63de3817ff70d88df92aa3c7bada7d72dabe2bbe2041ca04a8f1ee2ddd8ba7f7c124915b9964d2d6e950cabc3e98d1b1198c53d9c3edc1b652395ae0a84c63f76067c9c837dd56fbba2110eb96f80834518eb0db82745ae3de1a6ba5acdb2736bc44478b32203e59ea0384f63fee70567e09c05bfbdc81afcc0a11e10c34297083757c8b88a965027cdf7046761330e4eae8ded8f48e4da8a40c03ebdcbbfb510029be0d136d64b2111ed9128b2da9816f0543ce19cd786abddde6c1001f26bda2735c8d81f16d871d390351482e9d39841bf2fc31ca3de422aa67144c61e89052caee03592753486a9a054e7ab00b452aac6c69ae413119584e66f6a3bfa8e83de8cff40b8a154e9f9b58b6edc8d0e974bf2a6d697bcdf99ba132694a1eb05cd0e56bfc006d445123a073af167fb1a1b7fedcf8d26d193a14342061fa985599eae84c890eb3e94aab683edd065f0df1f84580a83319cddc0b5daa65a6c98d8108aec31b0efd2e53e52237cde0b74d89aa8413d46082f386685083a0534220fd5e794501dc0f170704ab824706cada417e9258eeff8b22925eb3bc7708feac32c0e9826558c4e259f9a2150eff70a06b781ae5dfb1b8a6412af3f088a427a04d86f9ff8f563438f163edb13ef9c14ce4e906adc459acbeeb57998c04df68aa5beb6184c2cefe14c1b40930422337deef06f573d0cc3ff368aaa538627f14a033d338c452247deaa93971d8f1d4ff988a50d4505888a3c825c52edc57148faaa2c526ce8e1aeaf261870a34a660c299ea4918daaef458c7bcc1c3205b4a0c721ba7ab99ccf4a1b4d18d27bdb273d43d871fe20c3493782a51eb0e2eeade43fc71d0206d70191ba7b6f6af255540243c683f346ce35cc901c745c350155998af1ebe4befbd394359dcd7331cc23925034a89a25308ff9db579405f8c2a837ac23aa9486a80bc4686dcb37f9f536f0122fdc171b514e9b3b8c0746547b1da16a75cafcfa6280ff0028044bffa2067147e2e574745eb5bd7d3f4fb75debd631331c06a6582366dceaf3bbac7e00228004d8544ba3a89411c96b8ddb7e50d0e1e88ef18c502974e30f2147773c7c38028960f492706ee2f9cd898871042e910fbad3b0dbd61e249f62ae56ed8801475a1b93ebec812f04858cf151bfe1e81184962eca5371c33d647a13246d711ab0b4551acb80415380e35cb1d1ff41e51622ccc6b7fefe607beb8b6b9ed33c51ca3bf2d6130fa9dd6ebe705336829087f63f0711d4d9b206d50a12a2577b96266951b3a670d9b34b21a427d7e00f7a5076a8ebefe32c63b61bcd8e860e17f3c8279917cca8039e09daa8a12823a6de5461cfc823bac849cc40208079de2bc33286927a051e0c39406aaf3767ae0d8504d729811cc979c5921ea72eee8a07dbcd5883d64a062b34481c190510def773ee8f0c4330e6ed72f935e3366905ae2c6e47dbe8a0109fea4c44fe4722d0877fc6beb30662d0938a65d12688e3c86384f4caa5dd09641bb71cb9f08d1727efadd6f8d200da490438ad1ee6d2a832e4c4041b8f73869e22907e863d9a04be78f3990cfab8924d58c6639a5e8def48ef8e5e3410ab72d4fd0387ebb86ee8be8c98ad99c5e51e287ff88b8c1ee489c3dacdf79420ddaca26184a14c6185debf8a804ac731726d20297582963df23fa95ceba18eb9815ded04f0aded9e73ac37f005a0ac666034ceafdba09a9424119215fb3256a4954c1600977e99d03df5d5132d19cb118365e9dc070dd5a04c04dadfdaa996285d29b7efa9548bfafec2f482c9830504a780de8cd33f0d8486d147d8edaadfa23c1f48023ec094706f3db059294910b250b39c0a016a4b45264c6dcf2a85380695ebd745f140234f66d89a254f5b26fdc2e3afbd3e1ef8a4e349c3a6efcf56fcaa5425edaccdbee8515f84b03495e6041d6413ef4b0461965ee27bfaf42c9b965bac25bdc6a85d68e815614d1d1f6eefe35c4dab1c27264d66c5d5478ee008b458d00aaaaefc1018103649a5c2df7b2a4fa8ff1425c206c774aa4b30a430ff1c4b3eee617df665f2eec43eeb4202c45b80395bec646c98790a11807342d0dc9f3d7443788c4a5e0ae75a93239cf1715eb66926c8076c89ab7394706c3a966a7fb7f43e9c2729b2fc782d1354305052821741561ba5c52219800ddae74bf01d1cd050847d96ade7aeacaa77252d4e79a7c5f7e891ce7fe115e94d68738cafdc8ab86fbfd64b6c1983acd459f3d402afb9235e659cd710e7513df0df75f3a8dffc47c90fe3055a37feb4c24137957edc9a2d914198e7e1b0f552570db01e7c70cea42d04fd3c9002a8b82f6afac1b3dfa2f82b3faf2298cfe64bb179e641e8c54bf8487704c7d517b3658eb4831d86b2088ea2d54358cde3e3c0421a0daadd6eefb1edca9092ab00a1cb32223fc9b12bb7af9896b4c51855f3e237b4cd4a77126fcd55365f734f240761c89e1920db96c1be65f33b0318684393aa34611b30124f0a58cbaa6a54ce0e8a321ef1b701c7ddecd81eb41fbd66a43c218afff6be0ad4e0044546c8936395c6b7fde088f8577d509fff5f1d30410bbf3fbf725783f30ef4dcf8801067501e0abf61958d58c160f0a14bc7e4200d668787b4339d6a2a0de3da4e0ff1630ae6143172a9f9f8ac867d2656e22312debed0fc9a2ee1742018b9759480587b52203203b136fa2f2fc1824138066887d529f425ff9480f9ba748ecf7031ef46e835bee6d7c94167e5872fa805b523c07afbfc2835a35273825d5cb48f811117b6354244f24fa290e18c54c4dd1594f3425e84472d176b65478664d4565c5c22813e094484d1edb866f6cb1a005386999d8bcc37102cf92890ef92c810a23814317879dc50f740965a61f70a6cf06d711b42b9d663c322b61e121bda399cab84b055697a0ccc01bb1a8a0d3cf1aab2610c6da7472a3fb0649794f194188baa7c3a286653625c64c9e2a9781aa500ec9913c3b27b2c9b2cf7d878552e3e72f0961d85949bdce484efec414e39f5f4d4147c8af3ee19be9916157dd601a3ec8f0bc18a684821c77c5b1ce610a20763ff39913c6e9b773ee6d6b9e73041188372820a82fd4e19d3962fb3ddd3f36c4842d79825259d5cca7121632d503e8b0a0f5abe2ebd3e60ca212f0db0ef9d4c7663c20c098c50f511cb125f86b958c219a5979bfa8eee42eecb4b073fb2a38479f42b08ccef822ac6bab2045f3e421fc7299e4d021a80ba2db2ac301f91670c68701cf7f2bb93eafad4ae860b4fc29afe9c6d12e775db152c754d6eceabb18fffb50077938c1d485643132be7df449b64fad7686d3645604a1b472655fae5d01ba413bfced39bb47d8c7719ed0243c50f54bba89ef6d16ce39df3d5c55073e35d30573b59a71e9ad3a38ec3cd46947fbe8737a94342f1cea2b6f194651dd661c11cd11681c928ba794b706910c2082217cb50579bfccf310496a737a9897b08fca480e89209b182b63ec03c96b822025dab4dbdac57984655c31ea7e054a721ae1ded188f2b586c413e4247c726831ea5", 0xe81, 0xfffffffffffffffe) 22:16:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 22:16:49 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 533.505136][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 533.534782][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x83, 0x0, 0x0) 22:16:49 executing program 1: r0 = socket(0x23, 0x5, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 22:16:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x3, 0x84) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x1) 22:16:49 executing program 2: keyctl$KEYCTL_MOVE(0x11, 0x0, 0x0, 0x0, 0x0) 22:16:49 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:49 executing program 0: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$clear(0x7, r2) 22:16:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000740)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, r1}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000001c0), r1, 0x0, 0x2, 0x4}}, 0x20) 22:16:49 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280), 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9}) [ 533.755669][ T9367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc}]}, @CTA_TUPLE_ORIG={0x4}, @CTA_ZONE={0x6}]}, 0x2c}}, 0x0) 22:16:50 executing program 0: r0 = socket(0x18, 0x0, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) [ 533.910517][ T9367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 533.940835][ T9367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 22:16:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x3, 0x84) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 22:16:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000740)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, r1}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000001c0), r1, 0x0, 0x2, 0x4}}, 0x20) 22:16:50 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140e, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}]}, 0x20}}, 0x0) 22:16:50 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 22:16:50 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x10}, 0x2}}, 0x0) 22:16:50 executing program 0: setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0xffffffffffffffa5) 22:16:50 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) 22:16:50 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) 22:16:50 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/exec\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, @ib={0x1b, 0x0, 0x0, {"7760d974a4be1559c04344534ef2095c"}}}}, 0x118) 22:16:50 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 534.285935][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 534.374148][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 534.383872][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) 22:16:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 22:16:50 executing program 4: r0 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000b00)="bc", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x0) 22:16:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4$x25(r0, 0x0, 0x0, 0x0) 22:16:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:50 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, r1, 0x40b}, 0x14}}, 0x0) 22:16:50 executing program 2: r0 = socket(0x11, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={0x0}}, 0x0) 22:16:50 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, 0x0) 22:16:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x20, 0x1, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 22:16:50 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) 22:16:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x7b, 0x0, 0x0) 22:16:50 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:50 executing program 2: clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x7, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000080)={0x2, 0x8000000000000000, 0x0, 0x0, 0x6}, &(0x7f00000001c0), &(0x7f0000000240)={r0, r1/1000+60000}) 22:16:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000008060104000000000000c20000000009050001"], 0x40}}, 0x0) 22:16:50 executing program 4: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x11, r1, r0, r0, 0x0) [ 534.738379][ T9428] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 534.813502][ T9444] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 534.857553][ T9428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 534.887506][ T9428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x18, 0x0, 0x0) 22:16:51 executing program 1: r0 = socket(0xa, 0x3, 0x5b) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 22:16:51 executing program 2: r0 = socket(0x28, 0x1, 0x0) accept4$x25(r0, 0x0, 0x0, 0x0) 22:16:51 executing program 0: r0 = socket$inet(0x2, 0x2, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000001040)) 22:16:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:51 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x79, 0x0, 0x0) 22:16:51 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000110"], 0x30}}, 0x0) 22:16:51 executing program 0: add_key(&(0x7f0000000040)='big_key\x00', 0x0, &(0x7f0000000b00)="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", 0x5c9, 0xfffffffffffffffe) 22:16:51 executing program 2: r0 = socket(0x1e, 0x1, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 22:16:51 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:51 executing program 1: r0 = socket(0x28, 0x1, 0x0) connect$x25(r0, &(0x7f0000000000), 0x12) 22:16:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x24, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8}]}, 0x24}}, 0x0) 22:16:51 executing program 0: keyctl$KEYCTL_MOVE(0x2, 0x0, 0x0, 0x0, 0x0) 22:16:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0x80108906, 0x0) [ 535.231318][ T9459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x541b, 0x0) [ 535.561480][ T9459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 535.583745][ T9459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:16:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000740)={0xa, 0x28, 0xfa00, {0x0, {0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x30) 22:16:51 executing program 0: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0x0, r0) 22:16:51 executing program 1: keyctl$KEYCTL_MOVE(0x19, 0x0, 0x0, 0x0, 0x0) 22:16:51 executing program 4: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x3, r1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, r0) 22:16:51 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 22:16:51 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='keyring\x00', 0x0, &(0x7f00000001c0)="db", 0x1, r0) 22:16:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r1, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) 22:16:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='timerslack_ns\x00') write$cgroup_pid(r0, &(0x7f0000000000), 0x12) 22:16:52 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x15, r0, 0x0, 0x0, 0x0) [ 535.801898][ T9496] ucma_write: process 715 (syz-executor.2) changed security contexts after opening file descriptor, this is not allowed. [ 535.903497][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 535.934049][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 535.964764][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}]}, 0x28}}, 0x0) 22:16:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x7c, 0x0, 0x0) 22:16:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r1, 0x40b, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x30}}, 0x0) 22:16:52 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) mount$pvfs2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x384c60, 0x0) 22:16:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 22:16:52 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:52 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5e319627"}}) 22:16:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, 0x0) 22:16:52 executing program 2: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x14, 0x0, r0, r0, 0x0) 22:16:52 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000200)={0x0, 0x4, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "13624b9b"}}) 22:16:52 executing program 1: add_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000002c0)="be0105852b5827b4f1521d801525c1ad9c75176251d2300696b5e4448db8016853c11ea7b195d28a450e41b6db5a0d23180b3299354da9eeebc28f68e449fed289a86014ca015b986c576ac26da49d64502472bdaf9cf8b13e8d8f47c13f62415073cf0c90cb60d456f9803176cc1ecdc726d117000054f5737e6b4d89753a616637d70d", 0xffffffffffffff5b, 0x0) 22:16:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000740)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, r1}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000001c0), r1, 0x0, 0x1, 0x4}}, 0x20) [ 536.279290][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 536.326082][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 536.357512][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}]}, 0x28}}, 0x0) 22:16:52 executing program 2: keyctl$KEYCTL_MOVE(0xc, 0x0, 0x0, 0x0, 0x0) 22:16:52 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='H', 0x1, r0) keyctl$clear(0x7, r1) 22:16:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000740)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, r1}}, 0x30) 22:16:52 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000001140146"], 0x30}}, 0x0) 22:16:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000100)={0xb, 0x10, 0x8f, {0x0}}, 0x18) 22:16:52 executing program 2: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0) 22:16:52 executing program 0: r0 = timerfd_create(0x9, 0x0) timerfd_gettime(r0, &(0x7f00000002c0)) 22:16:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}]}]}, 0x30}}, 0x0) 22:16:52 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:52 executing program 1: add_key(&(0x7f0000000040)='big_key\x00', 0x0, &(0x7f0000000b00)="bc7b0f25ecc3452502842eb0effb0d1c956cc834c73de5b889b415a4270455e4afab350fddec34572a16e48267228fac99310387d0048698644f95f603d2e9a4d86513dbd4d896456deb49cb5f2f319053594305ef8cd244f69f2e67e8595f634fa395abca5042b216cbcb5baa59b7a8f73dc41976cd5cda3f77abcbe0d18ad06cb03caf2c06d0602625574b6cab7bf733323fdd88f32799e586d5f24ad6017f748671486ba3c3868eedc23009e512d6d4fee6799c96a2a412e1312eb4c18da363cfd67f76f7e4f183291a04d44ed819f01b03cc4f1794f1309e2cbcb0e82629651a83e6a32a60990d18c62283cfb5b2c534d328c3fa24a358092c5a0e696766093d0a90c0e0eb5baa371af62114e22502d2db5686901511ae074f878d41ed20c9cd2eed639e2f9ec69c734c6eaf8ab5f538b07b0f946674f57520e318c2496ba5fc80ad912c19d759226628580168894330884b7854681bc1dddda0f47a386824ed11ffb7c64eac4be69c5691f39b413ae5e0fb566cef1a97bdf8ef72c74a5ba174ea91c115ca4479464778b66f835674f179f6f798444b58164b490c70e5d2393c177a8da4a4abe309d9dc838a9bfb21b1e1c0d75d81893cb6e1b8d71714b8975b9ba8873f4f054a4e1bd1a74bbf95b7f2a3b1ea88889f3f37d4a8f1169227f256edb28010d72e7ba523a7cb8819f17c83ef5c59f44bc4832d6191466eb21cb3a5a1db04e87b0bc05a175fe46096ab4e22feab41778300a568c60db6c420617542cd9eaa537f62d65d9907865da0d70140c336d47a4687413fbc63eb27abb4b74bdcd4537c544866d176da0a67f17f6a2402742c6926d9c08a594243185b24055355750ebe7a6aa0f08ecd9b0296ced5ed22d83c9c7fd761608bc45be6d74aed6ff4bde88bc31a317b3f60120173e38ca5fcba9547ae2e930f3c4a4a9f145cbc88cd4dce8eddb136a1e1aa793e01392b7d41070760e89a4b1271c135e3eeeb9fb75cab101a10985508118b118ec00bf65b751176e4198e7cf51afca3311b2c46f3a1cfb8bbe8aec4978340546d0dc659313476a5a7a9bdb451976d7ecc088e77edcb5bff1d7bd9b1465d6a775944871b9a1f3e71a68d8decf288cc217203f97a25a274a325680629bf6d9a5c8fde107d790e1cb63e45af00021a4aefad8605f185266761351354a007613f32a1d970e98b74a0ce7820ad51932b854372cdfabc75b5c35417c4d111db807b57263d5df6e0aadc0523d02871f0771c0e89235f9b03da85776c3b4574d5adf973e59ccc839deb03524fffb88f515f58225b6c19e00d528de7ae1e0750fa37954cb328578c45d345a236aa9f8f1442d624b1a725273d7cf9ce550c3481e76802b5d12428d080b3b3180034a7554ef783525ce96180e1ed3627402893d5c36ed06b2788901ebfea9968fc0640c510e08fb13a3f470271acc11a4a538dc78d2d1bf819c8293f59aea3b881a7b78f92fe34828b12dce2b642a67dc1abd7dc08c42f17e108bbeb1dd78cfc2bc5a83dfe685eb1eeb6d0676a2b8f2c8e6cc05523aae5d2099e0288e1e27f5cacf997810299a8ade4be8d168a6778884a84e10869f30fe5d91d1c1dbb20f63ad7186a39d7e837407888b39fc37f54308586a6860af7fd79ae60259f5f39af00bdf47c85303899211e9a53185f713f80a6976689062b6abf13dad63de3817ff70d88df92aa3c7bada7d72dabe2bbe2041ca04a8f1ee2ddd8ba7f7c124915b9964d2d6e950cabc3e98d1b1198c53d9c3edc1b652395ae0a84c63f76067c9c837dd56fbba2110eb96f80834518eb0db82745ae3de1a6ba5acdb2736bc44478b32203e59ea0384f63fee70567e09c05bfbdc81afcc0a11e10c34297083757c8b88a965027cdf7046761330e4eae8ded8f48e4da8a40c03ebdcbbfb510029be0d136d64b2111ed9128b2da9816f0543ce19cd786abddde6c1001f26bda2735c8d81f16d871d390351482e9d39841bf2fc31ca3de422aa67144c61e89052caee03592753486a9a054e7ab00b452aac6c69ae413119584e66f6a3bfa8e83de8cff40b8a154e9f9b58b6edc8d0e974bf2a6d697bcdf99ba132694a1eb05cd0e56bfc006d445123a073af167fb1a1b7fedcf8d26d193a14342061fa985599eae84c890eb3e94aab683edd065f0df1f84580a83319cddc0b5daa65a6c98d8108aec31b0efd2e53e52237cde0b74d89aa8413d46082f386685083a0534220fd5e794501dc0f170704ab824706cada417e9258eeff8b22925eb3bc7708feac32c0e9826558c4e259f9a2150eff70a06b781ae5dfb1b8a6412af3f088a427a04d86f9ff8f563438f163edb13ef9c14ce4e906adc459acbeeb57998c04df68aa5beb6184c2cefe14c1b40930422337deef06f573d0cc3ff368aaa538627f14a033d338c452247deaa93971d8f1d4ff988a50d4505888a3c825c52edc57148faaa2c526ce8e1aeaf261870a34a660c299ea4918daaef458c7bcc1c3205b4a0c721ba7ab99ccf4a1b4d18d27bdb273d43d871fe20c3493782a51eb0e2eeade43fc71d0206d70191ba7b6f6af255540243c683f346ce35cc901c745c350155998af1ebe4befbd394359dcd7331cc23925034a89a25308ff9db579405f8c2a837ac23aa9486a80bc4686dcb37f9f536f0122fdc171b514e9b3b8c0746547b1da16a75cafcfa6280ff0028044bffa2067147e2e574745eb5bd7d3f4fb75debd631331c06a6582366dceaf3bbac7e00228004d8544ba3a89411c96b8ddb7e50d0e1e88ef18c502974e30f2147773c7c38028960f492706ee2f9cd898871042e910fbad3b0dbd61e249f62ae56ed8801475a1b93ebec812f04858cf151bfe1e81184962eca5371c33d647a13246d711ab0b4551acb80415380e35cb1d1ff41e51622ccc6b7fefe607beb8b6b9ed33c51ca3bf2d6130fa9dd6ebe705336829087f63f0711d4d9b206d50a12a2577b96266951b3a670d9b34b21a427d7e00f7a5076a8ebefe32c63b61bcd8e860e17f3c8279917cca8039e09daa8a12823a6de5461cfc823bac849cc40208079de2bc33286927a051e0c39406aaf3767ae0d8504d729811cc979c5921ea72eee8a07dbcd5883d64a062b34481c190510def773ee8f0c4330e6ed72f935e3366905ae2c6e47dbe8a0109fea4c44fe4722d0877fc6beb30662d0938a65d12688e3c86384f4caa5dd09641bb71cb9f08d1727efadd6f8d200da490438ad1ee6d2a832e4c4041b8f73869e22907e863d9a04be78f3990cfab8924d58c6639a5e8def48ef8e5e3410ab72d4fd0387ebb86ee8be8c98ad99c5e51e287ff88b8c1ee489c3dacdf79420ddaca26184a14c6185debf8a804ac731726d20297582963df23fa95ceba18eb9815ded04f0aded9e73ac37f005a0ac666034ceafdba09a9424119215fb3256a4954c1600977e99d03df5d5132d19cb118365e9dc070dd5a04c04dadfdaa996285d29b7efa9548bfafec2f482c9830504a780de8cd33f0d8486d147d8edaadfa23c1f48023ec094706f3db059294910b250b39c0a016a4b45264c6dcf2a85380695ebd745f140234f66d89a254f5b26fdc2e3afbd3e1ef8a4e349c3a6efcf56fcaa5425edaccdbee8515f84b03495e6041d6413ef4b0461965ee27bfaf42c9b965bac25bdc6a85d68e815614d1d1f6eefe35c4dab1c27264d66c5d5478ee008b458d00aaaaefc1018103649a5c2df7b2a4fa8ff1425c206c774aa4b30a430ff1c4b3eee617df665f2eec43eeb4202c45b80395bec646c98790a11807342d0dc9f3d7443788c4a5e0ae75a93239cf1715eb66926c8076c89ab7394706c3a966a7fb7f43e9c2729b2fc782d1354305052821741561ba5c52219800ddae74bf01d1cd050847d96ade7aeacaa77252d4e79a7c5f7e891ce7fe115e94d68738cafdc8ab86fbfd64b6c1983acd459f3d402afb9235e659cd710e7513df0df75f3a8dffc47c90fe3055a37feb4c24137957edc9a2d914198e7e1b0f552570db01e7c70cea42d04fd3c9002a8b82f6afac1b3dfa2f82b3faf2298cfe64bb179e641e8c54bf8487704c7d517b3658eb4831d86b2088ea2d54358cde3e3c0421a0daadd6eefb1edca9092ab00a1cb32223fc9b12bb7af9896b4c51855f3e237b4cd4a77126fcd55365f734f240761c89e1920db96c1be65f33b0318684393aa34611b30124f0a58cbaa6a54ce0e8a321ef1b701c7ddecd81eb41fbd66a43c218afff6be0ad4e0044546c8936395c6b7fde088f8577d509fff5f1d30410bbf3fbf725783f30ef4dcf8801067501e0abf61958d58c160f0a14bc7e4200d668787b4339d6a2a0de3da4e0ff1630ae6143172a9f9f8ac867d2656e22312debed0fc9a2ee1742018b9759480587b52203203b136fa2f2fc1824138066887d529f425ff9480f9ba748ecf7031ef46e835bee6d7c94167e5872fa805b523c07afbfc2835a35273825d5cb48f811117b6354244f24fa290e18c54c4dd1594f3425e84472d176b65478664d4565c5c22813e094484d1edb866f6cb1a005386999d8bcc37102cf92890ef92c810a23814317879dc50f740965a61f70a6cf06d711b42b9d663c322b61e121bda399cab84b055697a0ccc01bb1a8a0d3cf1aab2610c6da7472a3fb0649794f194188baa7c3a286653625c64c9e2a9781aa500ec9913c3b27b2c9b2cf7d878552e3e72f0961d85949bdce484efec414e39f5f4d4147c8af3ee19be9916157dd601a3ec8f0bc18a684821c77c5b1ce610a20763ff39913c6e9b773ee6d6b9e73041188372820a82fd4e19d3962fb3ddd3f36c4842d79825259d5cca7121632d503e8b0a0f5abe2ebd3e60ca212f0db0ef9d4c7663c20c098c50f511cb125f86b958c219a5979bfa8eee42eecb4b073fb2a38479f42b08ccef822ac6bab2045f3e421fc7299e4d021a80ba2db2ac301f91670c68701cf7f2bb93eafad4ae860b4fc29afe9c6d12e775db152c754d6eceabb18fffb50077938c1d485643132be7df449b64fad7686d3645604a1b472655fae5d01ba413bfced39bb47d8c7719ed0243c50f54bba89ef6d16ce39df3d5c55073e35d30573b59a71e9ad3a38ec3cd46947fbe8737a94342f1cea2b6f194651dd661c11cd11681c928ba794b706910c2082217cb50579bfccf310496a737a9897b08fca480e89209b182b63ec03c96b822025dab4dbdac57984655c31ea7e054a721ae1ded188f2b586c413e4247c726831ea5f2b5e23f0c3e86ef41fad4e1c8f25e2aa17bc090208d82c3e885bf950f23d573bfdc61c7b2c74c6c2d9f3a330843f84288a39a4a2b4f230da135098cd421e91d8027513a37aee38d8ab63adad02dd82ff2decc962ea3f38191bcd3d2a2010eec22363f81d711ef350fa90af601df9722fe976334a547715a72ab36b81e0a870830d58c38ab2392f514e7d810f86f33328170fe617459948e9abc06f1a08a0f8ee2e1aca4d4b4ea9c8ebd18d109373e321f93a5518a6c317f064d8586fa35620b3d57f97dd42c841f432e19e12b67080fb1df140a17286b5dfc6e208cd8c7eef993c1067c2de69606a62b028bd0ae16d67128d8b09b7156e06cd89b7ee2f893b0b9df7880d74c20e89d5a28586a2de71edf84f250db837c6dc6fae20423e076d1acacfdbddf3a6119f29c6393897b6b184a570286640e91bd8d91cd8b72934e079c47d257888b1a453cafe5f82a21984ddf8c30dd8a2cbfaea0ea3cf43392467dc68dd95a847192becc99fc8576267b03", 0xff1, 0xfffffffffffffffe) [ 536.747068][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 536.803525][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 536.819259][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}]}, 0x28}}, 0x0) 22:16:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030101010000000000000e000028521f070019"], 0x20}}, 0x0) 22:16:53 executing program 0: keyctl$KEYCTL_MOVE(0xf, 0x0, 0x0, 0x0, 0x0) 22:16:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000000000000007d00b4"], 0x14}}, 0x0) 22:16:53 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0x890b, 0x0) 22:16:53 executing program 2: add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000b00)="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", 0xe01, 0xfffffffffffffffe) 22:16:53 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') 22:16:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) 22:16:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x120) 22:16:53 executing program 1: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0) 22:16:53 executing program 2: keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) [ 537.128479][ T9566] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 537.170320][ T9566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 537.206064][ T9566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:16:53 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0xb, r0, r1, r2, 0x0) 22:16:53 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(0xffffffffffffffff, 0x63f4, 0x0, 0x0, 0x0, 0x0) 22:16:53 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000740)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) 22:16:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x13, &(0x7f0000000000)=0x80000000, 0x4) 22:16:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x1e, &(0x7f0000000000)=0x80000000, 0x4) 22:16:53 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='setgroups\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 22:16:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000740)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x0, 0xc00, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, r1}}, 0x30) 22:16:53 executing program 0: r0 = socket(0x1e, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x28, 0x2, 0x0, 0x0) 22:16:53 executing program 1: add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000b00)="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", 0x1000, 0xfffffffffffffffe) 22:16:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xa, 0x0, 0x0) 22:16:53 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(0xffffffffffffffff, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 537.536276][ T9595] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 537.583498][ T9595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 537.611564][ T9595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:16:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x64, &(0x7f0000000000), 0x4) 22:16:53 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 22:16:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x13, 0x0, 0x0) 22:16:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 22:16:53 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(0xffffffffffffffff, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 537.710123][ T9598] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 537.720238][ T9598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 537.733422][ T9598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:54 executing program 1: add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r0) 22:16:54 executing program 4: socket$inet(0x2, 0x80a, 0x4) 22:16:54 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r0, 0x0, 0x0, 0x80, 0x0, 0x0) 22:16:54 executing program 0: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)) 22:16:54 executing program 1: r0 = socket(0x1e, 0x1, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, 0x0) 22:16:54 executing program 2: r0 = timerfd_create(0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) [ 537.953439][ T9622] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 538.046682][ T9622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 538.067109][ T9622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 22:16:54 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:16:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x89a0, 0x0) 22:16:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x8940, 0x0) 22:16:54 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x11, r0, 0x0, 0x0, 0x0) 22:16:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000740)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x4e22, 0x0, @mcast1}, r1}}, 0x30) [ 538.178484][ T9625] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 538.193536][ T9625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 538.201310][ T9625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:54 executing program 4: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) socket$inet6(0xa, 0x0, 0x0) keyctl$clear(0x7, r0) 22:16:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000005c0)={&(0x7f0000000440), 0x3, &(0x7f0000000580)={&(0x7f0000000480)={0x94, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x94}}, 0x0) 22:16:54 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='gid_map\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 22:16:54 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0x1403, 0x1}, 0x10}}, 0x0) 22:16:54 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:16:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) [ 538.423586][ T9641] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 538.486985][ T9641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 538.502732][ T9641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:54 executing program 4: r0 = socket(0x28, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x28, 0x6, 0x0, 0x700) 22:16:54 executing program 2: r0 = socket(0x1, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) 22:16:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x6, 0x0, 0x0) 22:16:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}}}}, 0x3c}}, 0x0) 22:16:54 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100), 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x5d9, &(0x7f0000000180), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 538.683427][ T9651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 538.694684][ T9651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 538.715605][ T9651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:16:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 22:16:55 executing program 0: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r0, 0xffffffffffffffff, 0x0, 0x0) 22:16:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000740)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}, r1}}, 0x30) 22:16:55 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000011401"], 0x30}}, 0x0) [ 538.787595][ T9663] tipc: Failed to obtain node identity [ 538.837974][ T9663] tipc: Enabling of bearer rejected, failed to enable media 22:16:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) 22:16:55 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x5, 0x0, 0x0) 22:16:55 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1410, 0x3}, 0x10}}, 0x0) [ 538.891472][ T9671] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 22:16:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) 22:16:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x4, 0x0, 0x0) 22:16:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x240}]}]}, 0x20}}, 0x0) 22:16:55 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x7, &(0x7f0000000000), 0x4) 22:16:55 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x77, 0x0, 0x0) [ 539.008429][ T9681] sctp: [Deprecated]: syz-executor.3 (pid 9681) Use of int in max_burst socket option. [ 539.008429][ T9681] Use struct sctp_assoc_value instead 22:16:55 executing program 2: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0xb, r1, r0, r0, 0x0) 22:16:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x28, 0x2, 0x0, 0x0) 22:16:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000018"], 0x14}}, 0x0) 22:16:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14}, 0xf}}, 0x0) [ 539.062916][ T9685] sctp: [Deprecated]: syz-executor.1 (pid 9685) Use of int in max_burst socket option. [ 539.062916][ T9685] Use struct sctp_assoc_value instead 22:16:55 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x21, 0x0, 0x0) 22:16:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0x8916, 0x0) 22:16:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x6b, 0x0, 0x0) 22:16:55 executing program 0: r0 = socket(0x28, 0x5, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 22:16:55 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, 0x0) 22:16:55 executing program 3: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) add_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x3, r1, 0x0, 0x0, 0x0) 22:16:55 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x72, 0x0, 0x0) 22:16:55 executing program 1: add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="e0", 0x1, 0xfffffffffffffffb) 22:16:55 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000021401"], 0x30}}, 0x0) 22:16:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xb, 0x0, 0xe) 22:16:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) 22:16:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x2b) 22:16:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x23, 0x0, 0x0) 22:16:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x10, 0x0, 0x0) 22:16:55 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000071401"], 0x30}}, 0x0) [ 539.376752][ T9720] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 22:16:55 executing program 5: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x100000, 0x200076, 0x0, {r0}}, 0x20) 22:16:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x11, r1, r0, 0x0, 0x0) 22:16:55 executing program 3: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='rxrpc\x00', 0x0, &(0x7f0000000100)="1b45ee2c2c", 0x5, r0) 22:16:55 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) socket$inet6(0xa, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, r0) 22:16:55 executing program 2: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, r1) [ 539.468023][ T9729] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 22:16:55 executing program 0: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0xc, 0x0, r0, r0, 0x0) 22:16:55 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 22:16:55 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000000c1401"], 0x10}}, 0x0) 22:16:55 executing program 5: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r1, r2) 22:16:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x14, r1, 0x305}, 0x14}}, 0x0) 22:16:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x24, 0x0, 0x0) 22:16:55 executing program 4: r0 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000b00)="bc", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x0) 22:16:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000000c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 22:16:55 executing program 3: keyctl$KEYCTL_MOVE(0x6, 0x0, 0x0, 0x0, 0x0) 22:16:56 executing program 2: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="dd", 0x1, r0) keyctl$link(0x8, r1, r0) 22:16:56 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="fa", 0x1, r0) 22:16:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xd, 0x0, 0x0) 22:16:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01ff"], 0x14}}, 0x0) 22:16:56 executing program 4: add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) 22:16:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 22:16:56 executing program 2: r0 = socket(0x28, 0x1, 0x0) connect$x25(r0, 0x0, 0x0) 22:16:56 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$unlink(0x9, r1, r0) 22:16:56 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x5, r0, 0x0, 0x0, 0x0) 22:16:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xb, &(0x7f0000000000)=0x80000000, 0x4) 22:16:56 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x8, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cbfaf0e"}}) 22:16:56 executing program 5: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, r1) 22:16:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000002c0)) 22:16:56 executing program 2: socket$inet(0x2, 0x2, 0x73) 22:16:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x8904, 0x0) 22:16:56 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0xff, 0xce041) 22:16:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x8982, 0x0) 22:16:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x14, &(0x7f0000000000), 0x4) 22:16:56 executing program 5: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r1) 22:16:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_FILTER={0x4}, @CTA_ZONE={0x6}]}, 0x20}}, 0x0) 22:16:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x38, r1, 0x40b, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb9}]}]}]}, 0x38}}, 0x0) 22:16:56 executing program 3: keyctl$KEYCTL_MOVE(0x5, 0x0, 0x0, 0x0, 0x0) 22:16:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x8, 0x0, 0x0) 22:16:56 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0x8936, 0x0) 22:16:56 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000081401"], 0x30}}, 0x0) [ 540.262177][ T9796] sctp: [Deprecated]: syz-executor.1 (pid 9796) Use of int in max_burst socket option deprecated. [ 540.262177][ T9796] Use struct sctp_assoc_value instead 22:16:56 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0xa47363307e1d82af, 0x0, 0x0) 22:16:56 executing program 3: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f0000000000)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0) 22:16:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') write$RDMA_USER_CM_CMD_REJECT(r0, 0x0, 0x0) 22:16:56 executing program 1: add_key$keyring(&(0x7f0000000a80), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0xb, r0, 0x0, 0x0, 0x0) 22:16:56 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000140), r1, 0x0, 0x0, 0x1}}, 0x20) 22:16:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) 22:16:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x2, r0, 0x0, 0x0, 0x0) 22:16:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x38}}, 0x0) 22:16:56 executing program 5: add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000b00)="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", 0x7a1, 0xfffffffffffffffe) 22:16:56 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x1, &(0x7f00000003c0)=@raw=[@call], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:16:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 22:16:56 executing program 1: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r0) 22:16:56 executing program 3: add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 22:16:56 executing program 5: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x17, r1, 0x0, r0, 0x0) 22:16:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 22:16:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20008}, r1}}, 0x30) 22:16:57 executing program 1: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x6, r1, r0, 0x0, 0x0) 22:16:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xe9382c2cfb27f2d8}]}]}, 0x20}}, 0x0) 22:16:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1, 0x0, 0x2, 0x2}}, 0x20) 22:16:57 executing program 5: add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000080)="4775bea74e8ee5705d3f1529d70dc17cef86801cfc1024304d9b43428c2023c53b", 0x21, 0xffffffffffffffff) 22:16:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x15, 0x0, 0x0) 22:16:57 executing program 1: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x6, r1, r0, 0x0, 0x0) 22:16:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') write$cgroup_pid(r0, &(0x7f0000000000), 0x12) 22:16:57 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1, 0x0, 0x2, 0x3f00}}, 0x20) 22:16:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') r1 = gettid() write$cgroup_pid(r0, &(0x7f0000000040)=r1, 0x12) 22:16:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @loopback}, r1}}, 0x30) 22:16:57 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 22:16:57 executing program 1: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='H', 0x1, r0) add_key(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0x0, r1) 22:16:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000740)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, r1}}, 0x30) 22:16:57 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, r1}}, 0x83) 22:16:57 executing program 3: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0xb, r2, r0, r1, 0x0) 22:16:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_TYPE={0x8}]}], {0x14}}, 0x50}}, 0x0) 22:16:57 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 22:16:57 executing program 0: r0 = socket(0x25, 0x1, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) 22:16:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x17, 0x0, 0x0) 22:16:57 executing program 3: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x5, 0x0, r0, 0x0, 0x0) 22:16:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x11) 22:16:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x1}, 0x14}}, 0x0) 22:16:57 executing program 5: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0xc, 0x0, r0, 0x0, 0x0) 22:16:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0xb, r0, 0x0, 0x0, 0x0) 22:16:57 executing program 3: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x9}, 0x0) 22:16:57 executing program 5: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x6, r1, r0, r0, 0x0) 22:16:57 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040), 0x2) 22:16:57 executing program 1: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, r1) 22:16:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x10, r0, 0x0, 0x0, 0x0) 22:16:57 executing program 0: r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000180)='big_key\x00', 0x0, 0x0, 0x0, r1) 22:16:57 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@dont_hash}]}}, 0x0, 0x0, 0x0) 22:16:57 executing program 1: syz_genetlink_get_family_id$nbd(0xfffffffffffffffe, 0xffffffffffffffff) pipe(&(0x7f0000001980)) 22:16:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 22:16:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x402) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 22:16:57 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 22:16:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000000)) [ 541.426862][ T9905] fuse: Bad value for 'group_id' 22:16:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002e0000000a"], 0x20}}, 0x0) 22:16:57 executing program 0: pipe2$9p(0x0, 0x4400) 22:16:57 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f00000009c0)) 22:16:57 executing program 4: socketpair(0x10, 0x0, 0x5, &(0x7f0000000240)) 22:16:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x25}, 0x0) 22:16:57 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x519002, 0x0) 22:16:57 executing program 1: socketpair(0x0, 0x80e, 0x0, &(0x7f0000000040)) 22:16:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x62}}, 0x0) 22:16:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000800)={0x18, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x18}}, 0x0) 22:16:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) 22:16:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x127d, 0x0) 22:16:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 22:16:57 executing program 1: socketpair(0x10, 0x2, 0x935, &(0x7f0000000000)) 22:16:57 executing program 0: mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=ft,r']) 22:16:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, 0x0) 22:16:57 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xc}]}]}}, &(0x7f00000009c0)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) 22:16:57 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x4c09, 0x0) 22:16:57 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x5, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x9}, {}, {0xc}, {0x0, 0x1}]}, @typedef={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f00000009c0)=""/4096, 0x55, 0x1000, 0x1}, 0x20) 22:16:58 executing program 1: socketpair(0x28, 0x0, 0xfffffffc, &(0x7f0000000000)) 22:16:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x5, &(0x7f0000000040)=[@sack_perm, @sack_perm, @sack_perm, @timestamp], 0x4) 22:16:58 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x40040, 0x0) 22:16:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0xc0189436, 0x0) 22:16:58 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, &(0x7f0000000180)=""/254, 0x26, 0xfe, 0x1}, 0x20) 22:16:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1263, 0x0) 22:16:58 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) 22:16:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r0, 0x0, 0x0) 22:16:58 executing program 4: bpf$LINK_GET_NEXT_ID(0x3, 0x0, 0x0) 22:16:58 executing program 3: socketpair(0x11, 0xa, 0x0, &(0x7f0000000000)) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) 22:16:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x125f, 0x0) 22:16:58 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 22:16:58 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x20040, 0x0) [ 541.992814][ T9944] 9pnet: Could not find request transport: ft 22:16:58 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000ec0)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x1c}}, 0x0) 22:16:58 executing program 1: openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x7) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket(0x0, 0x5, 0x1b660000) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x1ff) 22:16:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./bus\x00', 0xc10, &(0x7f0000000100)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@fat=@flush}, {@shortname_win95}, {@shortname_winnt}, {@utf8}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@uni_xlate}]}, 0x1, 0x26a, &(0x7f00000006c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000022c0)=""/4085, 0xff5) 22:16:58 executing program 3: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESDEC], 0x0, 0x0, 0x0) 22:16:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) 22:16:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, &(0x7f0000000540)=""/193, 0x26, 0xc1, 0x1}, 0x20) 22:16:58 executing program 2: futimesat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={{0x0, 0xea60}, {0x0, 0x2710}}) [ 542.150211][ T9982] fuse: Bad value for 'fd' 22:16:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) 22:16:58 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x10040, 0x0) [ 542.188818][ T9985] loop4: detected capacity change from 0 to 256 22:16:58 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 22:16:58 executing program 2: syz_open_procfs(0x0, &(0x7f0000001d80)='fd/4\x00') 22:16:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', 0x0}) 22:16:58 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001540)={0x14, 0x13, 0xe43b}, 0x14}}, 0x0) 22:16:58 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000080)={&(0x7f0000000000)=@id, 0x10, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000100)='T', 0x1}, {0x0}, {&(0x7f00000002c0)=']', 0x1}], 0x4, &(0x7f0000000480)="7a00100b2a9a4837818da9df3bd86aeaed25eb78b632e28cdae76c3ab656f82f039a18a801", 0x25}, 0x0) 22:16:58 executing program 4: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x130f045, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0) 22:16:58 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001540)={0x14, 0x10}, 0xe80}}, 0x0) 22:16:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm], 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 22:16:58 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000002000004b0000000800dc00000000e207009e"], 0x2c}}, 0x0) 22:16:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x18, &(0x7f0000000040)=[@sack_perm, @sack_perm, @sack_perm, @timestamp], 0x4) 22:16:58 executing program 4: syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0) 22:16:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="03000009a5ed2929de22af4ecccba491"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x25}, 0x0) 22:16:58 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) 22:16:58 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000180)={0x1, @le_del_from_accept_list={{0x2012, 0x7}, {0x0, @none}}}, 0xb) [ 542.542253][T10018] netlink: 'syz-executor.3': attribute type 158 has an invalid length. [ 542.580319][T10020] fuse: Bad value for 'fd' 22:16:59 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000002000004b00000008"], 0x2c}}, 0x0) 22:16:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_MAC, @NL80211_ATTR_MAC={0x0, 0x6, @device_b}]}, 0x8}}, 0x0) 22:16:59 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)="6dd5266132cc61b1d3ea571f4d05dfca1d19829ee6a41b42cc558da9d59cb5129a4dea9913", 0xfd6d}, 0x20040801) 22:16:59 executing program 5: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001100)="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", 0xd4d}], 0x1}, 0x0) 22:16:59 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) 22:16:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {}, {}]}]}}, &(0x7f00000009c0)=""/4096, 0x3e, 0x1000, 0x1}, 0x20) 22:16:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000008c0)) 22:16:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000680), &(0x7f0000000100)='./bus\x00', 0xc10, &(0x7f0000000000)={[{@utf8no}, {@uni_xlate}, {@utf8}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x2}}, {@uni_xlateno}, {@fat=@errors_continue}, {@shortname_win95}, {@utf8no}, {@utf8no}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@uni_xlateno}]}, 0x81, 0x27d, &(0x7f0000000940)="$eJzs3T9rG2ccB/CfasmSS0EeCobS4WgXdxG2oVMXm+LSUkFLi6Dt0NbUdgmWMcRgSAbHGULyDjJly+4hQwjZs2XJGwheQsaYLIY4XJBOkuW/cUz0h+TzGXQPz933nufRnXRInB79++XqyuLa+vLu7rMolXKRn43Z2MvFeHwSI5HZai3345jC8SoAYNilaRov0syg+wIA9Mee6z8AfHTOef3/tY9dAgB6rHn9L0RajHf6/J8We9gnAKC3fv/zr5/nqtX535KkFLF6c6O2Ucs3l9n6uVdpmtZjKaaiHPsRaTqW3TWQZo8//FSdn0qaxqO2eq2Rj2gss7sH55bjUjTy01GO8SzT/rahnZ/O8snhfCE+7crnZqIcn5+cn+nkR1ujauRHY/LrrvYrUY4n/8Va1GMxJh9n22X5zekk+f6XahK1HyOi3X4xFgd0TAAAAAAAAAAAAAAAAAAAAAAA+PBVko4T5++pVE5bn+U78+vk2/MDHZqf5/bdRzc+++6Pp80dbJe68/n4Ij/YsQMAAAAAAAAAAAAAAAAAAMCwWL9ydWWhXl+6PNSFsThak4uIoxuPtcY0HH0+o1DqGs69l++5iZFOzes0TR/8883OeePXz9tEoX3yTHzbsyfq4UVSkWudAf04lFutwnaz5tbfX/2frSrGhfdcPOtVGWfFS63k6dtM3JlduL+58zyrKb21P/1+JwIAAAAAAAAAAAAAAAAAAA5+9DvongAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA4Bz8/3/vCoMeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvAkAAP//+hSRww==") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000022c0)=""/4085, 0xff5) 22:16:59 executing program 5: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0) 22:16:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 22:16:59 executing program 2: mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[]) [ 542.849217][T10035] binder: 10030:10035 ioctl 4018620d 0 returned -22 22:16:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0x5, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 542.913295][T10043] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 542.925008][T10046] fuse: Unknown parameter '18446744073709551615' [ 542.951268][T10047] loop3: detected capacity change from 0 to 256 22:16:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x38, 'wpan1\x00'}]}, 0x20}}, 0x0) 22:16:59 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/exec\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) 22:16:59 executing program 2: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0xfffffffffffffe20) 22:16:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9}, {0x0, 0x1}]}]}}, &(0x7f00000009c0)=""/4096, 0x36, 0x1000, 0x1}, 0x20) 22:16:59 executing program 3: socketpair(0x1d, 0x0, 0x1, &(0x7f0000000380)) 22:16:59 executing program 2: mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)) 22:16:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x904, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}, 0x48) 22:16:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x5, &(0x7f0000000040)=[@sack_perm={0x20000044}, @sack_perm, @sack_perm, @timestamp], 0x4) [ 543.071485][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 22:16:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', 0x0}) 22:16:59 executing program 5: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x142) 22:16:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x5, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x9}, {}, {0xc}, {0xe, 0x1}]}, @typedef={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f00000009c0)=""/4096, 0x55, 0x1000, 0x1}, 0x20) 22:16:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000080)='Bd4U', 0x4) 22:16:59 executing program 3: bpf$LINK_GET_NEXT_ID(0x21, 0x0, 0x0) 22:16:59 executing program 1: bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0xa8) 22:16:59 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) 22:16:59 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 22:16:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000140)=""/196, 0xc7}}, 0x43) 22:16:59 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000002000004b0000000800dc00000000e207"], 0x2c}}, 0x0) 22:16:59 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffd, 0x140) 22:16:59 executing program 3: stat(&(0x7f00000009c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 22:16:59 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000940)='ns/pid\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 22:16:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002"], &(0x7f00000009c0)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 22:16:59 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001540)={0xe84, 0x14, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x19, 0x1, "c04d942952c860be98819bbce4f36ef0c8e4ee62bb"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "e8b3d99e7e"}, @INET_DIAG_REQ_BYTECODE={0x29, 0x1, "80afec6c1417b66104bb8708aa710810a26721409969aee5507364130e423ae96ae4eeffb0"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "a42eb7fc52872eaa223b8efe3efb4212c31ba852d513f063eb653b2d54e97d3a7330b4eb4b7c1f3a15f056b60f4035db17dc12e203b935f51de8848471d447854c425ad331f20938a3a7c7103d14ea7f25fa5a9e6e99c3fc5905712a1f39fd36695b352a65d219f290568d0add15165d6f9cd19d2bb721224177bd5ab486487c63b2ca4fd3e35d0cec9e3da74f70d2dccf455efba4b4d3776606234dcad27a9815318356e2d352ee50a1ca91d1"}, @INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "85850a1729618448fdc2a7c7fe927c1f2c59510d76de8009cc46652778903878b7e2e7a54472eb2764914429e377b6462fadcf42a3e39ff8095982f93c6c4e4d5abe47d5aba4089fc0f43d5062f8a18c8c8ab2a804957ef832a131de9b4ffa1897b67c3b2a88ebc3c4ef75f2eebaf9be954fc5ad65e43b664634d859f96a9e1cc407fcf25de6217f252ba8b2a1d80fb93513a93844b0e57cf347494d8b653b3c82892cd0acd86fee391e775207a9de0b5f256e62ce"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "0f82de5496e092fdfcc4c796c22d80282d26e60f524a6cff8445124aa801953f35857a2737f037454c804a5ed416f3835082b021316b61e6224c289e4b74a3b2f770a5cd637c7816eccab2cf1a358e7c670c6c03ee5bf3ed43f86deb3e85a6c6d32b583a901340b376a8eccc7c2c99dea236f1dcc2d0b94eff0c589a5cea6333cc3006adb79077e1e7c6807eb41fd976006eb6b1c490735d95f83931f18954fbe9e3945e7180f9a371e883e0b3bfd66d46319201014a901ab90e6bad696d799d739ea666d2ac0626b2216c4310b73de9fc608bdeb6"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "348d6866911c86c70f6979e2a33befc81552a3eb770487b8c36a2dab675fab166b304be193fa597ef1fbc310d49dfbd08b3948cceb8aface5b73d0f68354b3d407cb9d455c3a0f2a9f"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "912e4dd79909b76d307093de0d5dbd5e48543ceedeeff049e52ec567574d6b619b82ddffe721d577e6560ccfa4f6a7c7e678a42a4d04372324119c6baa9eacf434bbe9599122ff3b989cffdef11ef75c9e59fbde3d9ddaa6b03a36c0724cd62b14f5ff94b72313da00a5e018ab79989e62d7ac6034a1243c36cea79dbe1a4136f49850528e6603c0b8c28d7081f1f2502719e74efd7eaa4ae3e9f0d48da535d03fad975d1429e5d613a2efa90a511a759d93b179564aaee59dfd0360864b6f0c29cab8c88abe1354991c22e638bae7fbb7838186c6ff9f4f7ae668d6f04b6edb5aa53ed04d"}, @INET_DIAG_REQ_BYTECODE={0xa91, 0x1, "d96116bf12a2c6552817926270c353697632f932744fe7354ac860b3ed80ac056984aa2eda7bd83dd54539f65d4140b67d4bf77dc0a64498bcfa506f549094e3f9097aba5657ed82c6756c58795309936b8d69f466a0d25134148a6e911121b0bde855f5c9fa1edf0c49372bcfe24c5f3b7ccc7392dc4b60edbf0c121220590d9aea229fb8a7f7055cf0765678bccde25e48b2d3f154136ca0a513982abbeb952c0680bb9b5f237ee6a093d3f87604186dbe6e7cc0f78984ef5b6c1a9d38efe1e53f92bba2e1638e1bd69c668a84d7708ad0ce957609b2e70dfc7275115a9958bf7d60957ec6a1ac1e1d85d493bf93cfbc9b9bba8df1c8b85900a19a0a0122e45cf8d749d443b16ef45aeac147e72397251c72cefcfb9e27e107cdc017510624b5aabf6199066c6dfc5932d99691bc9cce7fd64e19528060f598af66a2c4a1ebcde87b425e54a19d17aef61380282d8fb38543c28742e1e85021e93c4efca8bc6773580739c3dbe27cd458d2d6e5952967a47a8342a1942896797aa7bfaef0a91d9ac520af81ba3b5136a53bd77978a679fc86a57db88f18dad3d7cc634761c48a252f2a781ca218a3c4ca243595668942203a3ba5f4f1467e223930d2d6672210ca5cc7779e34275f950ca6515eaa3cb8115487ba379887a1f5d64247a33050082932a641d63e540c4a33401dae19b39af571f9e5d05407b0ded54861034185c10dc2b5a2dcee4762a4e38a8bdf8ec71a2c3885e03257db53cb6d8db0f1f275b19bba05807551e9d5c6a5cac378d75293c1d48a1a62902b8151f24ffb7dca7683c9375acfa0197f00451396ce79b5ec5aa94321802ea295b62befb884f6e206f1ca4455654d980affe3845900a2661eef61a5cd5720f925aadc87465382ebffae12d354ff1bdf6a6dcf70d8e9ff656df4141786c6f3197736a1a6f9cb6c5c71b0f3b7ddfc6a3a568e462b51206ddbcc51f41a95cb4a6ed62c2d325b355646247297150436c4d3fd90b54e08131e36a39edc3defa4c3ff22e76ca71ec7aa6b4526dab00d2fb13cf578184c4fff15868e99bbfd24fa5543dff91fe25dfc084445b91ab10c59094f3aa843b2cdbe651baf432f8982ac2c60dea2cebf81c27ac07407ade7da6744c073b1f032f81288617c458031300f325c5fe5473cb6255dd096cff4565250bb0eaf480625850f8f4c86121f84c44c98587380a1df1d98f05e11e432f21764329d96efa0ec379fa88d07236498415103747912cda39cab06c61cc9afc23fd3c38ef57eddb51ed7101eb97e8560eda7807bd5021d35139d8aeb3255705776da679131262cb42622f9fb10f7f4b63e1fde528b7777837a4ec92a433faafb5459a62ceaaa84000941ca7faec9ec1b58a6caec6a770b5d0db703c8533e64fded715efe50598ca77f973f51e441ac7f2dc5beca17c850e5b09660d910b4c8e675409d6de7a4c34418f363928665f45557014a50cd5de17484a426882c79a0f70021e154c073ae7510df6cb779855b35a21200cb61688833799c42d969a6782672074e8669a9188859653e106a8c40ee3c23a4c3be8e1e4e878950140d93d4d427a13adfba17642b6bfc27b8793d1cb7d249bc0df1615d2e9d28921d3fa3dd6918b7a3ed4940b797671483595add9d39dca164ee1046712cb19ba186a283b5df308dc0007b1a15b4048d527645dc9891d7a57cfd485c16e4391d0400edda3b4a1b8bb8e9526efcd0841cb5e719a4e577527452ccd7c632cb548b2cca2ec09c411b7385355a39e7e4460d1c70bc6856eac3e18bd635f1ff8673ebf4b102d8f9897c98ff14585ef4a1061d712d2b05ce5eb1c0ae739a15d71e796e3a87041e7bf88c1bd547e183abea87a3dbc92608b78f9bc421033b2c1bcc3dbb4ab2dd54366964544ef54479b5d7338f22d17324a39c21c84a2d7f888b768462a983c9853e4d484672df6b0240eb0deda500573d1d57815301198289d7e5ede6bd9bbf2625f71f16092fbfe294564026890e62bfd40e794b1402d2917d6dbcc4e51a284f34ef8a98af1337166cf73c40e72899c2077a2cc8e533801cfa334df5eb635b77ceb0f60a4313ece8494d84e2aa0c2451727d9b1f0031fc1f11987c8be3d1b1c967244b1603484bb57c50a264aae648b32189e89cef5a37776ffb81d1f84ec52dbfcdc52b73bcfc62a626a86de704a8f68e37a95bea8a8ccfe26ff0cf48b46dd60123b858ed991e1f15e05f44eee850f03ad39f57073fbfede0b9a18a6b2f088b05a400fac3725cc8d39a647c0d2ff48ad3642e231e65be945e656e946833853b0b19ddbe3531d143cca46ae7f430e9beda954e9297403c4d76c4903375d179f8341e7863a7c28c30fee8c45a9d36211b5bc80920e26a9847150ef282fff3b5dbe54715c7d17dabeb19d7d3fbd550a6683d71122f5b6ea25565f3808c55f5bc6d972e1b67a89f4be448652f74ae64a1782fa1f9b31734754a17e77616ffeaaf02bb8b343f0c4972b3b779acffe43daf4e0343c6b005138fbce22eec43eb4d69fe935216a99c6b754d2c7488d4473d2b5ebe97724228bb181347e043ac6ed4dee440aac361453df988a0668ba5b76258534e54980b24c55f50ea696c8c0e1da9ed325647248c6279a6d126c6bdfa28975e75c9868bd0f8645c4e4786582e0f07ed1450fc2e3776c3b3356483dfc29439549abcd98c32d046a9614613a56ff84e64b667b023da78c3e837fd686bfd9cd93188cfe29a67e3eea7fd3ba30f0c7a8a5884c01c581626e44e1f499d155372185877071060f4510637629e397c7e9ed5e5b685b8850fc770e24172e0268cad33d9c518821d802a2822c9364bed106d8ac7704eb703e2d71709a0570d002562a9841135d64841dfdbf021733e91190c8ce33e8ddc75c43c2afbb41e6ed46c840f7179bf1afcdd1c886f8079697337a3b5f90eb5a1b65515a46260cbc2eeb892265161dcc9c393415c0a201cf16e76682bbf78996a9b536f7adca18cce167357d0ca771bf2377fc3dae8a252f7be0cc055562c3af5fa48cd5a0a82f6b46d5cd7059624bdace7b9c346a5222534cc942f6a3a775214c72550ef5c89c18a018dbfe9893755beb8639965a4a1d988d49a0527dfd689c9a50cc4acc14261b8b13e00055ebcb3e33abed4ba43b38edd0648d9ae237154c64692c694d2dbcd852eac675cb07a04184fc64c14e7a7d1a656f706a568f73e7c2adf0c5b270a8e90e8243289e68f7a6e9a6e7b1f2d1793da0df3db3d8fcc27fca7c5edcaf5c7f46f13e1c075c95551bd38e4669190ef35aac4ca28f2a6a09526c39c2801d0d5b0ee18d7d91be49a0868b9eaca5fbb49d6e2c2d86895e2dc961bd60d06f51384cd1bd5ac26b72f033e496fafe32c5c0a8ed0b964dd55631c8ec48ea2f411065c2a263ffc371f14ee9e7c1eb561e0a1ebc5a322423bbb4640e81ff124b24ce60caecaeb2eed83b88e0f5d398c85a1d9c6f54d991e36ad1cdf7f7a4a1bdc4036cb679782fd31649ca95c159a9d7020fa09c8b9e7c046ee19afb9e11bb18188f0a8376d9f9a822d48e04be0f816d970f519ee72f527fbcb13172b28f3c88a344ce40f3ca3f2d1382d38dad8e30eceb45863ae9d9d63af8a0ea7abd284c052c93f76b5a82e800c33b596dc87f1f8cc252d930171edb1b6a52b4f0dd7cc005448d303d05b3771fd02b7bf23b3a6edc54bcb06219dfe8562a18c33520b4b9102d4001357d6082581eda617b2de5db5e9f61787c25e35e23809f6bce0b40eacdadfe17a79623d3d734ecf22378aa1ab2a649280c69e5ee2b2312eca8f54d2345ac3416daeb45b"}]}, 0xe84}}, 0x0) 22:16:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1262, 0x0) [ 543.384277][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 22:16:59 executing program 0: mount$9p_fd(0x21000000, 0x0, 0x0, 0x0, 0x0) 22:16:59 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001540)={0x14, 0x12, 0xe43b}, 0x14}}, 0x0) 22:16:59 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)={0x14, 0x14, 0xe43b, 0x0, 0x0, {0x28}}, 0x14}}, 0x0) 22:16:59 executing program 4: mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000540)) 22:16:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 22:16:59 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) 22:16:59 executing program 2: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0xfffffffffffffffe, r0) 22:16:59 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffd, 0x0) 22:16:59 executing program 1: syz_genetlink_get_family_id$fou(&(0x7f00000004c0), 0xffffffffffffffff) 22:16:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xfffffffffffffe51, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="183a0080", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf250100000000000700fe8000000000000000000000000000aa140009000000000000000000000000000000000000000700fe8000000000000000000000000000aa08000800ac1414bb08001b000000000600e0000001050003003a000000"], 0x58}, 0x1, 0x0, 0x0, 0x4091}, 0x88c0) 22:16:59 executing program 3: select(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) select(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1}, &(0x7f0000000180)={0x3, 0x20, 0x800}, 0x0, &(0x7f0000000240)={r0, r1/1000+10000}) 22:16:59 executing program 1: syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0xc8, &(0x7f00000002c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}], [{@fowner_lt={'fowner<', 0xee01}}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/loop#\x00'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@hash}]}}, 0x1, 0x0, &(0x7f0000000400)="c8fa0364d3bbec3ef8da3226a4a6ca679d809b2ee097f36a960ab2969b59e6748a7da8c7c95e532ee8380598ecdbd0b2b235bb0dd7145dc78eef48778d9f70117aaf32eeab73e02fc3f68690") 22:16:59 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x541b, 0x0) 22:16:59 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001540)={0x10, 0x10}, 0x14}}, 0x0) 22:16:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)={0x14, 0x0, 0x47d040d8561c5d9d}, 0x14}}, 0x0) 22:16:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x4c00, 0x0) 22:16:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={0x0, 0x2c}, 0x300}, 0x0) 22:16:59 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000040), 0x10, 0x0}, 0x40) 22:16:59 executing program 3: mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x1885830, 0x0) 22:16:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, &(0x7f00000009c0)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 22:16:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000080)) 22:17:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x9, &(0x7f0000000040)=[@sack_perm={0x3}, @sack_perm, @sack_perm, @timestamp], 0x4) 22:17:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000680), &(0x7f0000000100)='./bus\x00', 0xc10, &(0x7f0000000000)={[{@utf8no}, {@uni_xlate}, {@shortname_win95}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x2}}, {@uni_xlateno}, {@fat=@errors_continue}, {@shortname_win95}, {@utf8no}, {@uni_xlateno}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@uni_xlate}]}, 0x81, 0x27d, &(0x7f0000000940)="$eJzs3T9rG2ccB/CfasmSS0EeCobS4WgXdxG2oVMXm+LSUkFLi6Dt0NbUdgmWMcRgSAbHGULyDjJly+4hQwjZs2XJGwheQsaYLIY4XJBOkuW/cUz0h+TzGXQPz933nufRnXRInB79++XqyuLa+vLu7rMolXKRn43Z2MvFeHwSI5HZai3345jC8SoAYNilaRov0syg+wIA9Mee6z8AfHTOef3/tY9dAgB6rHn9L0RajHf6/J8We9gnAKC3fv/zr5/nqtX535KkFLF6c6O2Ucs3l9n6uVdpmtZjKaaiHPsRaTqW3TWQZo8//FSdn0qaxqO2eq2Rj2gss7sH55bjUjTy01GO8SzT/rahnZ/O8snhfCE+7crnZqIcn5+cn+nkR1ujauRHY/LrrvYrUY4n/8Va1GMxJh9n22X5zekk+f6XahK1HyOi3X4xFgd0TAAAAAAAAAAAAAAAAAAAAAAA+PBVko4T5++pVE5bn+U78+vk2/MDHZqf5/bdRzc+++6Pp80dbJe68/n4Ij/YsQMAAAAAAAAAAAAAAAAAAMCwWL9ydWWhXl+6PNSFsThak4uIoxuPtcY0HH0+o1DqGs69l++5iZFOzes0TR/8883OeePXz9tEoX3yTHzbsyfq4UVSkWudAf04lFutwnaz5tbfX/2frSrGhfdcPOtVGWfFS63k6dtM3JlduL+58zyrKb21P/1+JwIAAAAAAAAAAAAAAAAAAA5+9DvongAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA4Bz8/3/vCoMeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvAkAAP//+hSRww==") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000022c0)=""/4085, 0xff5) 22:17:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7ffffffff000}, 0x25, 0x0, 0x9effffff}, 0x0) 22:17:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 22:17:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x80041285, 0x0) 22:17:00 executing program 1: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x91ec44, &(0x7f0000000140)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}}, 0x0, 0x0, 0x0) 22:17:00 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x4c05, 0x0) 22:17:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./bus\x00', 0xc10, &(0x7f00000001c0)={[{@utf8no}, {@numtail}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@utf8no}, {@fat=@flush}, {@shortname_win95}, {@shortname_winnt}, {@fat=@umask={'umask', 0x3d, 0xde84}}, {@shortname_lower}, {@utf8no}, {@shortname_lower}]}, 0x1, 0x26a, &(0x7f00000006c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000022c0)=""/4085, 0xff5) 22:17:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000004c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 22:17:00 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x240080, 0x0) 22:17:00 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0x0, 0x0) [ 543.958737][T10149] loop5: detected capacity change from 0 to 256 22:17:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) creat(0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40180, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000400)={0x3, 0x0, @start={0x0, 0x1, "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", "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"}, [0x0, 0x5, 0x1, 0x1f, 0xb0, 0x18d0, 0x7, 0x2, 0x1, 0x8, 0x3, 0x164, 0x0, 0x923, 0x7, 0x76, 0x0, 0x200000000, 0x9, 0x4, 0x7a, 0x0, 0x6, 0x20, 0x100000001, 0x0, 0x3, 0x7, 0x7fff, 0x1000, 0x0, 0x8, 0x4, 0x0, 0xca, 0x7fff, 0xffffffffffffffff, 0x4, 0xd24f, 0x1d3f, 0x3, 0xff75, 0x3, 0xb, 0x0, 0xa6, 0x1, 0x401, 0xffff, 0x84, 0x5, 0xeae, 0x80000000, 0x5, 0x9, 0x1, 0x4, 0x7ffffffffffffffc, 0x0, 0x8eda, 0x5, 0x4, 0x0, 0x3]}) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) 22:17:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x21, 0x0, 0x0) 22:17:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x27}}, 0x14}}, 0x0) [ 544.054517][T10159] loop0: detected capacity change from 0 to 256 22:17:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x904}, 0x48) 22:17:00 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) 22:17:00 executing program 1: stat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 22:17:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x4c02, 0x0) [ 544.131433][ T27] audit: type=1804 audit(1674771420.343:6): pid=10165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4232159193/syzkaller.M4R8bK/409/bus" dev="sda1" ino=1168 res=1 errno=0 22:17:00 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000b80)) 22:17:00 executing program 1: syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0xc8, &(0x7f00000002c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}], [{@fowner_lt={'fowner<', 0xee01}}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/loop#\x00'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@hash}]}}, 0x1, 0x0, &(0x7f0000000400)="c8fa0364d3bbec3ef8da3226a4a6ca679d809b2ee097f36a960ab2969b59e6748a7da8c7c95e532ee8380598ecdbd0b2b235bb0dd7145dc78eef48778d9f70117aaf32eeab73e02f") 22:17:00 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000000040)="cafa17a316b07fed5fc2344053cabee93fcf843d6126f69feaa726d7b27b506446c5a717b9c0ce303b56c53e94fb5fd03a6f51a79f8a4a69e7c673c8f8abb4d28c08602784d33cc92c59ed3c23d6335c9496576c41786866d83acee3b3", 0x5d}, {&(0x7f0000002100)="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", 0xc74}], 0x3}, 0x0) [ 544.232771][T10177] binder: 10173:10177 ioctl c00c6211 0 returned -14 22:17:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7ffffffff000}, 0x25}, 0x0) 22:17:00 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 544.358906][T10189] ------------[ cut here ]------------ [ 544.364845][T10189] kernel BUG at net/core/skbuff.c:2490! [ 544.370510][T10189] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 544.376598][T10189] CPU: 1 PID: 10189 Comm: syz-executor.3 Not tainted 6.2.0-rc5-next-20230123-syzkaller #0 [ 544.386509][T10189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 544.396581][T10189] RIP: 0010:__pskb_pull_tail+0x1196/0x1740 [ 544.402425][T10189] Code: 98 c8 00 00 00 e9 c7 f6 ff ff e8 05 3d bc f9 48 8b 3c 24 be 02 00 00 00 e8 47 a9 ff ff 45 31 e4 e9 b4 f6 ff ff e8 ea 3c bc f9 <0f> 0b e8 e3 3c bc f9 4c 8b 7c 24 38 49 83 ef 01 e9 fb f4 ff ff 48 [ 544.422060][T10189] RSP: 0018:ffffc9000606ed08 EFLAGS: 00010216 [ 544.428146][T10189] RAX: 00000000000005e5 RBX: 00000000fffffff2 RCX: ffffc900063c2000 [ 544.436129][T10189] RDX: 0000000000040000 RSI: ffffffff87c5b146 RDI: 0000000000000005 [ 544.444115][T10189] RBP: ffffc9000606ed90 R08: 0000000000000005 R09: 0000000000000000 [ 544.452098][T10189] R10: 00000000fffffff2 R11: 0000000000000000 R12: 0000000000000ec0 [ 544.460081][T10189] R13: ffff888028cb8000 R14: dffffc0000000000 R15: ffff888079de86c0 [ 544.468070][T10189] FS: 00007f9800872700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 544.477016][T10189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 544.483638][T10189] CR2: 0000000020002000 CR3: 00000000788e3000 CR4: 00000000003506e0 [ 544.491722][T10189] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 544.499707][T10189] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 544.507691][T10189] Call Trace: [ 544.510982][T10189] [ 544.513928][T10189] ? net_generic+0xd9/0x2a0 [ 544.518509][T10189] ? trace_lock_acquire+0x1f1/0x290 [ 544.523747][T10189] tipc_msg_reverse+0x6dd/0x970 [ 544.528662][T10189] tipc_sk_filter_rcv+0x49f/0x3070 [ 544.533807][T10189] ? trace_tipc_sk_dump.constprop.0+0x390/0x390 [ 544.540077][T10189] ? find_held_lock+0x2d/0x110 [ 544.544870][T10189] ? mark_held_locks+0x9f/0xe0 [ 544.549658][T10189] tipc_sk_rcv+0xdc2/0x1b70 [ 544.554194][T10189] ? tipc_sk_filter_rcv+0x3070/0x3070 [ 544.559594][T10189] ? find_held_lock+0x2d/0x110 [ 544.564384][T10189] ? mark_held_locks+0x9f/0xe0 [ 544.569177][T10189] ? __local_bh_enable_ip+0xa4/0x130 [ 544.574523][T10189] tipc_sk_mcast_rcv+0x6c4/0xe20 [ 544.579490][T10189] ? tipc_sk_rcv+0x1b70/0x1b70 [ 544.584278][T10189] ? __skb_clone+0x597/0x780 [ 544.588905][T10189] ? tipc_msg_reassemble+0x25d/0x500 [ 544.594214][T10189] ? tipc_msg_build+0x10a0/0x10a0 [ 544.599269][T10189] tipc_mcast_xmit+0x608/0xcf0 [ 544.604058][T10189] ? __phys_addr_symbol+0x30/0x70 22:17:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) creat(0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40180, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000400)={0x3, 0x0, @start={0x0, 0x1, "21943ff71373cce869f14e8fa547165276bb5836bbe8dedeb5a1d32876d47520cd2dee2ab0b181959a4036a0a9e473954e20e42fc2dbe7493bc90cfa807074f63cc7f5bad8d0ccdc9b4cfb150ea9765635cd14a297974d2757335f86961ebe1f8b3f6caa055e4a986ae80e9b05a803c486a2ce1f28c671bb9d8257333da3b96bb9a49822b87dfd888321f723e89c0f58b99cdd58de20a9f358d9f1a539a6091ffae6d2206416193b8bd670d96051d8d46195723a028dc17fea6282df80371194fd85ed4ad4ce4e9163a8291855705c13c96e5fb717c04a68531b1f5198487050b40b797739e394001df62d4c4ca10d2533c2947ed6497756f7c50332d77e25085520edcbf82b4498833494b27e6d53b67b2a34331021f64ea998ddce71a8d03f5e7f68c4d936caa319541bfc4da989598af605271a03c44a603c3ed25121708177497478e333086fa85c37445bd87888e6e4c069eefa1888545a2ad3ec573e2e5096376deaa6310da57a4e393665ddde3b1d4f0f1ae3ae1714b310c2bf8e9ad6c1240d9b4795869a6c499f0b0a9cfe335c650d5f1be28ff3da0d817a3493bf0e7676ddd55d32f4a5617a2611c01573a07ee2eb9de470e8241f1c3c8b2fa3c65c5958938070533786c613d3f0b8a6c1a43953995bc2ab17129313bf852761987a4aaf131d535f1af55b55bbc635b66b853ab48782b18f7cf6791fdf475d2c243c6427cc6b68320eb2f8b405d296a7584407b69e20df2e7d4395260ddbb939c1a4a3de3d407eaf84228b70b32c3630141d6e74b52976956f0fd75136a8ae9650538156b2a9da5f77ffcb5ff4089a5037e1a3e1346c62fd5ddf17d6d5f81e65179a1c25dcd3dcbbe2827aa2e9d01a03aab4eaa8ccf256c884e7af78a2c50dab86ab0c2a4700c09b7849584a53baa73323e9f7a554cf762fdfc1647944207c7e933afb5120e52fe8bf2b40d6229024aae9f5db8b19746cab5a4bd8c000bd2f7e34ffdfeb8cf1fc2f08520d2eb8413333674dfe2778bc46e10ed5091e47119472127a49d17651d9c0339b348a36a72136b952172808f13dfd5373cf4dfbf46c3ed6666c0cd4ec99cacb08cdeaf83f99360086d1d762cff829b2f9157a94860aa83b56caf50173ee2ec0e0ecbe3e624c164d8b1202955401c918d83dabc14b75a781c829e8ebee0d0b958d06049e8249bcbc831515d488f252b56ec4ce91cb86bf598d0291ac2c97a695e113ac895466721b93c55159edf5d30a8c1b58715a78eb430833536da629206c9e3bca75f06e960511a11152610385e5d885961da5db17b49a336c1e37027f9f881d9cbd9ff8f507791fbbba0fdf487014856ba90fe762d9398b13f8031b9eb9ffc627fa36230d5d701c2ffaa6d4aa461d061df078d0ce0a29710cc2c052cd7c7a1fa92a51ae92a56ee05630913468b40ea9b5056b3ae14430c8", "2432a2b4eef65ebb0ae0df554858aab85c81efea24097528e25f9259df6557d22230b0790de86b4d2dcb4c74aa6350c31e054153f4ab4365c4e590973b2520e9b41cbe742df971f602e02dbb7cb06b9c7e8a010eace54cfcaf6ef820abe2813dbb0105ad23c9a12873de046144a1b18c5a15ea2a072088438d2717be710291d79d79f595fcce84a88b8c09b17de97de33b983043f072732487bfe9866753ba2cc17b84b138799eb7f613f9577b67d98134605eb65ff394dc050f8f239ffc8f97cac2caebb76e3bc4129217c4e258054ecca085687869ec08e2a9b8699a6430bb424df49e6759d897abf3b802cfc5db39ef318ee0f363caa6d041cca1c0003c5f79f494f4e4cc462a1523d620bbe16969117e7d7a75efb38e393edfbf40d549a6e765d4fc19dc4ba95c4aac918157219eb43106ba9754faffbf3f46964620b52a8352a175de2b52659c7d37a8c043175ee607908ec128eede35d84699c8509c04664a92cff8a524e532b0f5caf80db279676dfa1b28b750acd1af34ce564514a0bb1af6d6e94583d459dbb329c1075793a1b5513340be1af9500c55329968d88befd02636488ff5bde04343ff9c3cdbac7f76ea4980c94524774fa1fbe928947028c9417162e947fb4f20a35474f8e9846ad44fe64328c9b3af569b4b184ffe2e6f383fc133ee595a9ee7ba597bedc634412826793585ffb3af5f8deb6eedfddeb98ebaab7db103c29bd7bbec5c7a0f1ca8ea08195f8edb2d8def5d6233b4e58408ca7e44a27025d69b97affcee3a7c1d512e82da1a09541b7866731e9d4317736b30ab2563c1a6a89265ad26ec76b2e99338604a2be3968d47e0aeff9dbda93b9088bb7e8420e3f8bf142d8ff17309f9865634b7d86ecd0745c40ad42f4fdfd5a917e6080494047d771e24df31a70932a5fc6eea812dab48b9ea73ee4fe1f00baf60297f2cb2b51cda7dc8d2e205055716f0dfd21b948ba42bd964eee21d7996ad84240d1321f2b9037bb0e59c9ab4ee8612f44992eb2cd42366de145706d086fe5f6a4cb5c7d05440b807183495333ac79f7c2f34a612e11a886e22ad351987afc5d95ef3d33cf5c7a8b70953476f323e17451a9e118d08d22bfb5be8eb12d9de72d5c0889b52eebfa4b43fba3903b1248e32f7ad8e78088053014a601ff5bf6a45cdea34f2a1ff0f306842e4787d07a5f9119f892d6877ea5f066d2629d62cde272c4516710dacb11d016ae10627baba0e03316d37ae1d379ed36d653b19f05e5a534e9324182a51f2558b2c51ee9406afd17e5dfe94c4bcbeb46affe7d18d8446724c15d49247c6f09233326740d6123feeeba71a91eaf5201790237f096ca1a8bfd877407abd5420a35cfc9497e004a89f4cc463cec368384a062ab13a6f097ce8dd8e16bf86b0d690a01bae99713b5092ab0acfc1216196eba1800c21220a"}, [0x0, 0x5, 0x1, 0x1f, 0xb0, 0x18d0, 0x7, 0x2, 0x1, 0x8, 0x3, 0x164, 0x0, 0x923, 0x7, 0x76, 0x0, 0x200000000, 0x9, 0x4, 0x7a, 0x0, 0x6, 0x20, 0x100000001, 0x0, 0x3, 0x7, 0x7fff, 0x1000, 0x0, 0x8, 0x4, 0x0, 0xca, 0x7fff, 0xffffffffffffffff, 0x4, 0xd24f, 0x1d3f, 0x3, 0xff75, 0x3, 0xb, 0x0, 0xa6, 0x1, 0x401, 0xffff, 0x84, 0x5, 0xeae, 0x80000000, 0x5, 0x9, 0x1, 0x4, 0x7ffffffffffffffc, 0x0, 0x8eda, 0x5, 0x4, 0x0, 0x3]}) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) 22:17:00 executing program 1: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) r0 = userfaultfd(0x80c01) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@private0, 0x0}, &(0x7f00000000c0)=0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/current\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r2, 0x0, 0x2, &(0x7f0000000140)='}\x00'}, 0x30) r3 = syz_clone(0x0, &(0x7f00000001c0)="3f9d4bbc9199199a7b56742e8c43996e2f499e66278a59736bbb71bf6755752fd8bccea667d446fe5dcd45ab08f698980802e451d50806efff25bca3da30d152d5b456cc7a8ab87a4dcd797717475593e4cf077db5f4bacee716d48638f73da49d1173e8ab1459146e7c36d564d43b063202f2896fedcb815f7b60c7033499376ff2f1bd491db673f43b04ba533f61f776cbae4a76de18a8e1df13cdebe83b3840c135947033d49b0b30127786ed27bd", 0xb0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="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") r4 = syz_open_procfs(r3, &(0x7f0000000400)='cgroup\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"334c9d582e17e54c60d669ae4ceb412a", 0x0, 0x0, {0x7fffffff, 0x7}, {0x7}, 0x0, [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x101]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x0, 0x6, 0x8, 0x4, 0xffffffff, 0x0, 0x0, 0x1, 0x55, 0x7, 0x0, 0x0, 0x4}}) r5 = syz_open_procfs(r3, &(0x7f0000001980)='gid_map\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x18, 0x7, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x100}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x2}]}, &(0x7f0000001a80)='syzkaller\x00', 0x8, 0xef, &(0x7f0000001ac0)=""/239, 0x41000, 0x17, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001c00)={0x0, 0xa, 0x81, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001c40)=[0x1, 0xffffffffffffffff, r4]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x17, 0x0, 0x0, &(0x7f0000001840)='GPL\x00', 0x2, 0xee, &(0x7f0000001880)=""/238, 0x41000, 0x0, '\x00', r1, 0x1e, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x2, 0x0, 0x4, 0x40}, 0x10, 0xffffffffffffffff, r6}, 0x80) r7 = syz_open_procfs(0x0, &(0x7f0000001d80)='fd/4\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000001f00)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=""/117, 0x75}, &(0x7f0000001f40)=0x40) syz_clone(0x800, &(0x7f0000001f80)="f261588a8ebbcbf0f7cf1ed9af7038a613f18ba99a9d3731b82ef61f7265bbbb8458677053a353bec1255b5b54307fcc608109f5bf48092147393c6af82b5924a87beaed0361a847001bb0f2aeb59e9a16e0a9e9f330350a862bfc5b1d72c366ab24aea4de50f23a21d16c16cae889129531c35303d7088e12045d3ae24df138a31e4887dcf16db0ece74379a4fa8890efc4559743fffe03", 0x98, &(0x7f0000002040), &(0x7f0000002080), &(0x7f00000020c0)="6489312ad9bd251f445c4eeeaa81d8f9ae96d070ff18781eedb898e7861cf8dc892ff0dd71c5da2d94b7ea3d28007d312e6dca7adf2a36da56778a42850c381f2df53bfc77d8eb9beb97ce8b7c8bb57ed2bbb290c2ed149518076279cd31066e7fb8cb073ca8790b5ef7acc1ec54272907cf54e38b5eb4a0f28d8aa6838293d5") munlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000002580)={{0x0, 0x6, 0x9, 0x9, 0x9, 0xa6af, 0x2, 0x200, 0x623, 0x0, 0x1, 0x81, 0x7ff, 0x7}}) 22:17:00 executing program 4: bpf$LINK_GET_NEXT_ID(0x2, 0x0, 0x0) 22:17:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x0, 0x1}, 0x6) [ 544.609110][T10189] ? tipc_mcast_send_sync+0x790/0x790 [ 544.614505][T10189] ? tipc_nametbl_lookup_mcast_nodes+0x1ff/0x380 [ 544.620944][T10189] tipc_sendmcast+0x839/0xc50 [ 544.625648][T10189] ? mark_lock.part.0+0xee/0x1910 [ 544.630748][T10189] ? __lock_acquire+0xbdd/0x5780 [ 544.635708][T10189] ? tipc_poll+0x7c0/0x7c0 [ 544.640156][T10189] ? lock_chain_count+0x20/0x20 [ 544.645036][T10189] ? __init_waitqueue_head+0x150/0x150 [ 544.650611][T10189] ? mark_lock.part.0+0xee/0x1910 22:17:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @typedef={0x4}]}}, &(0x7f00000009c0)=""/4096, 0x32, 0x1000, 0x1}, 0x20) [ 544.655664][T10189] ? mark_lock.part.0+0xee/0x1910 [ 544.660713][T10189] ? mark_lock.part.0+0xee/0x1910 [ 544.665755][T10189] __tipc_sendmsg+0x1118/0x1890 [ 544.670637][T10189] ? is_dynamic_key.part.0+0x1c0/0x1c0 [ 544.676117][T10189] ? tipc_sendmcast+0xc50/0xc50 [ 544.681003][T10189] ? __lock_acquire+0x16c8/0x5780 [ 544.686057][T10189] ? mark_lock.part.0+0xee/0x1910 [ 544.691105][T10189] __tipc_sendstream+0xee4/0x1260 [ 544.696164][T10189] ? tipc_connect+0x6b0/0x6b0 [ 544.700873][T10189] ? tipc_send_packet+0x5d/0xa0 [ 544.705758][T10189] ? mark_held_locks+0x9f/0xe0 22:17:00 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x901000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9d, 0x69}}}}}, 0x28}}, 0x0) 22:17:00 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x3c) [ 544.710552][T10189] ? __local_bh_enable_ip+0xa4/0x130 [ 544.715856][T10189] tipc_send_packet+0x6b/0xa0 [ 544.720562][T10189] ? tipc_sendstream+0x70/0x70 [ 544.725369][T10189] sock_sendmsg+0xde/0x190 [ 544.729818][T10189] ____sys_sendmsg+0x71c/0x900 [ 544.734696][T10189] ? copy_msghdr_from_user+0xfc/0x150 [ 544.740093][T10189] ? kernel_sendmsg+0x50/0x50 [ 544.744799][T10189] ___sys_sendmsg+0x110/0x1b0 [ 544.749498][T10189] ? do_recvmmsg+0x6e0/0x6e0 [ 544.754107][T10189] ? trace_lock_acquire+0x1f1/0x290 22:17:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x65, 0x0, 0x0) [ 544.759330][T10189] ? receive_fd+0x110/0x110 [ 544.763881][T10189] ? lock_acquire+0x32/0xc0 [ 544.768412][T10189] ? receive_fd+0x110/0x110 [ 544.772943][T10189] ? __fget_files+0x26a/0x480 [ 544.777644][T10189] ? __fget_light+0xe5/0x270 [ 544.782260][T10189] __sys_sendmsg+0xf7/0x1c0 [ 544.786804][T10189] ? __sys_sendmsg_sock+0x40/0x40 [ 544.791855][T10189] ? syscall_enter_from_user_mode+0x26/0xb0 [ 544.797775][T10189] ? lockdep_hardirqs_on+0x7d/0x100 [ 544.803003][T10189] do_syscall_64+0x39/0xb0 [ 544.807453][T10189] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 544.807725][ T27] audit: type=1804 audit(1674771421.003:7): pid=10204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4232159193/syzkaller.M4R8bK/410/bus" dev="sda1" ino=1162 res=1 errno=0 [ 544.813448][T10189] RIP: 0033:0x7f97ffa8c0c9 22:17:01 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) [ 544.813471][T10189] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 544.813491][T10189] RSP: 002b:00007f9800872168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.813513][T10189] RAX: ffffffffffffffda RBX: 00007f97ffbabf80 RCX: 00007f97ffa8c0c9 [ 544.878804][T10189] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 544.886791][T10189] RBP: 00007f97ffae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 544.894781][T10189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.902771][T10189] R13: 00007fffb06996af R14: 00007f9800872300 R15: 0000000000022000 [ 544.910778][T10189] [ 544.913825][T10189] Modules linked in: [ 544.917763][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.923783][T10189] ---[ end trace 0000000000000000 ]--- [ 544.929283][T10189] RIP: 0010:__pskb_pull_tail+0x1196/0x1740 [ 544.935139][T10189] Code: 98 c8 00 00 00 e9 c7 f6 ff ff e8 05 3d bc f9 48 8b 3c 24 be 02 00 00 00 e8 47 a9 ff ff 45 31 e4 e9 b4 f6 ff ff e8 ea 3c bc f9 <0f> 0b e8 e3 3c bc f9 4c 8b 7c 24 38 49 83 ef 01 e9 fb f4 ff ff 48 [ 544.954825][T10189] RSP: 0018:ffffc9000606ed08 EFLAGS: 00010216 [ 544.960939][T10189] RAX: 00000000000005e5 RBX: 00000000fffffff2 RCX: ffffc900063c2000 [ 544.969103][T10189] RDX: 0000000000040000 RSI: ffffffff87c5b146 RDI: 0000000000000005 [ 544.977095][T10189] RBP: ffffc9000606ed90 R08: 0000000000000005 R09: 0000000000000000 [ 544.985132][T10189] R10: 00000000fffffff2 R11: 0000000000000000 R12: 0000000000000ec0 [ 544.993148][T10189] R13: ffff888028cb8000 R14: dffffc0000000000 R15: ffff888079de86c0 [ 545.001190][T10189] FS: 00007f9800872700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 545.010166][T10189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 545.016797][T10189] CR2: 0000000020002000 CR3: 00000000788e3000 CR4: 00000000003506e0 [ 545.024831][T10189] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 545.032868][T10189] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 545.040899][T10189] Kernel panic - not syncing: Fatal exception in interrupt [ 545.048244][T10189] Kernel Offset: disabled [ 545.052570][T10189] Rebooting in 86400 seconds..